What the spyware does, is anyone’s guess, but it asks for permission to change Windows settings, which makes me suspicious. What Sourceforge wants to do, is push a piece of Spyware at you. Went to Sourceforge to download a copy of FileZilla, the Open Source FTP client. The thing to remember, is to look at the size of the download before you run it. How long that link will remain, is unclear. This link gives you the index page for all the downloads, but it automatically adds the nowrap parameter:

So, just add “?nowrap” to get the file you really wanted. Now what you get is the compiled installer for the project, in this case an executable 6MB in size. Quickly go to the URL and add “?nowrap” onto the end. That URL will give you the Sourceforge downloader application for the project, sized about 700kB. When you get to the Filezilla download page, it will be a URL like this: I have just had this tip passed on to me (thanks Mike:), and it is brilliant. The list of files is still there, but every link now redirects to the Sourceforge malware-ridden downloader. It seems that direct access to the compiled application is no longer available.

Remove filezilla malware mac