BestPCDownload? Or the worst possible foistware attack?


Clicking this download button begins installation of InstallIQ™, which manages your Media Player Classic installation. Additional software may be offered to you via opt-in ads during the installation process. Learn More.


Media Player Classic Specs

  • Rating: (380 votes)
  • Total downloads: 254427
  • Version: 6.4
  • Download size: 13.85MB (NOTE: The real downware I got was only 1.9 MB ( 1994264 bytes ). Hit here and read more info from VT.)
  • OS: Windows 2000, Windows XP, Windows Vista
  • Software requirements: None

Now, let’s take a closer look at this sponsored installation:

  1. “Please scroll down to view all offers.” (They are PC Optimizer Pro, LookThisUp, DRIVERfighter, Genieo (a java-based program), Kaspersky Security Scan, SLOW-PCfighter and FULL-DISKfighter)
  2. 20141019192112

  3. I find more junk were created in the following qs_2da3d60 folder. For example is I detected arcadeparlor, blasteroids, chocolatebar, contentexplorer and so forth.
  4. 20141019193942

  5. Meantime, the mentioned “Uninstall Helper” (original info @ did not appear in the programs list.
  6. 20141019200425

  7. When bloated install was done, I met a page “Thank you”, which was another download page for InstallX’s customized installer “adobeflashplayer.exe” (md5, d6e1de889e239495c6e3bed534dfbdff).
  8. 20141019194542


  9. And, I used the downloaded Kaspersky Security Scan (version: to perform a quick scan then. I got the below information:
      • Computer protection 1
      • Malware: 0
      • Vulnerabilities: 0
      • Other issues: 10


Here’s how my program list looks like now:



About PUP Hunter

I am experienced in helping avoid foistware attack, and fixing bloatware/ greyware issues, the very proactive way.
This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s