EasyDoc Converter

I have no reason to doubt that, but when I posted my comment last night there was still a "Previously available here" live link on the page which would download the malware from that site. I see it has finally been removed.

We posted the "previous" download link in the Related Links to allow people who knew it was malware a chance to download it, scan it and get to know it. The more anti-virus people out there that have access to this type of file, the better for everyone. It was removed a bit later today as we felt we gave it enough time in the related links section to get noticed by the pros who wanted to check it out.

When you visited last night, you would have noticed that we did remove it as a normal "Download Now" link on the site.

In the future, people who have a legitimate need to get their hands on a malware sample should be able to obtain it from VirusTotal. It's generally not a good idea to leave samples where the general public can access them, for a number of reasons.

what did you use to discover this?

Bitdefender published a blog post about it yesterday, and I downloaded the app here and found it exhibited the same behavior.

The link here was the same as the developer link -- as it was hosted on the developer's servers. MacUpdate removed the main link within 2-minutes after it being reported as new malware.

Reported malware to the hosting company and the site is deactivated. The link was up last night and only stopped working once I reported the malware to his ISP. As of this morning it was still a link but went to the deactivated page. Macupdate site is really disappointing.