Yesterday I was trying to upgrade my DPP version 3.0 to 3.4. I went to Canon's website and downloaded dpp341en.exe - 23.5MB on my XP system. At some point during the download my anti-spyware program (Stopzilla) released a message that said a trojan named Ultimate Defender was in the update. I quarantined it so it would not let me update to DPP 3.4. Actually the anti-spyware program found two versions of it initially. Not believing the possibility for this to happen, I downloaded the same thing again, but with the same results. I called Canon tech support. They were able to download the update with no problem, but there shouldn't be one since they told me they don't run anti-spyware programs from their facility. They said that their programs come from NY and they were going to mention it. I think we were both in disbelief because things like that don't or shouldn't happen to Canon. All I can do is report what happened, the software that uncovered the problem, and hope that anyone updating DPP 3.4 will run a check after it is updated. Ultimate Defender is high-rated spyware.
Not to discount Ultimate Defender but these type of programs can have False Positives. It is the heuristic characteristics of the program identifies it as bad when in reality its fine.
This being said this would not surprise me. There have been a few cases of manufactures sending new products out that are infected with viruses etc. I could see this happening with a program update as well. Since they pulled the file it sounds like this could possibly be the issue. At least they are looking at it. Better to be safe than sorry. They should give you a discount for finding the problem
The link hasn't been changed on the USA site, but it leads you to an Error 404 Not Found. 3.4.1 is not even listed on Canon Europe, latest they have is 3.2. Wish Canon would get on the ball with their whole software, driver and update scene, very hit 'n miss and not very friendly to navigate.
3.4 is out already?! I just upgraded mine to 3.3.1.1. and 3.4 is out already?! But I agreed that Canon has to better manage their software release, its all over the place, well maybe not, coz its sometimes available here and not there! Geez...
Update, May 14, 2008: Canon USA has removed the DPP 3.4.1 and EOS Utility 2.4 updates for Windows while a change is made to the installer packages. Chuck Westfall, Technical Advisor at Canon USA, says that the software itself isn't being changed, and that the updaters will reappear on the Canon USA website in the next day or two.
David Tognazzi wrote:
Eh? Why they pull it? Is it safe to install? (just a false alarm triggered by one AV program?)
Well, if I was Canon, I certainly would pull it until it could be confirmed as a false positive, sanitized, or updated so it won't trigger false positive. It would not surprise me if it is an actual positive planted by a hacker.
A recent thread showed how to bypass Canon's "updates only" downloads. It was pretty pathetic protection, and trivial to overcome. If this is their security approach to their programs, it is not surprising that some infected software got onto their website.