Flashpaste Lite ??

[PaulFXH]

Hi Folks
Today I downloaded a nice little tool for pasting expressions I use
frequently (usernames, greetings, goodbyes etc) to emails, posts or
forms. This is Flashpaste Lite which is free and available at
http://softvoile.com/flashpaste/.

The tool works great and I find it very useful. However, just after I
started using it, an unsolicited pop-up started appearing. This
featured the message "Advertisment--NISI Media" (Yes, with the spelling
error).
After closing the pop-up, it always appeared again after a few minutes.

Checked on Google and a number of occurrences of this nuisance were
mentioned but without any connection to Flashpaste Lite.
Amazingly, it can be uninstalled through Add/Remove Programs which is
what I did. However, I see in the Google search that somebody else who
did this found that the pop-up kept coming back even after removal (up
to now----4 hours----it hasn't come back for me).

Nevertheless, when I did a registry search just now, I found four NISI
entries, one of which indicated NISI Media and Flashpaste in the same
hive.

Anybody know what's going on here?

TIA
Paul

Dell 4550 Desktop
WinXP SP2
2.53 GHz CPU
1.0 GB RAM
Int HD 80 GB
Ext HD 160 GB

 

[Anne]

This is Flashpaste Lite which is free and
available at http://softvoile.com/flashpaste/.

The tool works great and I find it very useful. However, just
after I started using it, an unsolicited pop-up started appearing.
This featured the message "Advertisment--NISI Media" (Yes, with
the spelling error).
After closing the pop-up, it always appeared again after a few
minutes.

<SNIP>

I used FlashPaste Lite for over a year and didn't see any pop-up ads (I
use the payw version now). Still this is disturbing news and any
further info would be appreciated. Adware or not adware?

 

[PaulFXH]

Anne escreveu:

I used FlashPaste Lite for over a year and didn't see any pop-up ads (I
use the payw version now). Still this is disturbing news and any
further info would be appreciated. Adware or not adware?

Hi Anne,
The jury's still out as far as I know. I've seen quite a few posts to
other NGs from panic-stricken users whose computer have been "infected"
with NSIS Media.
However, I haven't seen any information declaring that this is
something genuinely nasty.
In my case, it certainly appeared uninvited on my computer just after I
had downloaded the freeware version of FlashPaste after which I kept
getting pop-ups at inconvenient times.
Nevertheless, it did come with an uninstaller and I was able to take it
out very easily through Add/Remove Programs. I can't imagine that it's
normal for malware to enter your computer equipped with an uninstaller
to facilitate its removal. Kinda defeats the purpose of malware.
After its removal from my computer, I've had no further problems
whatsoever. However, there are still three instances of NSIS in my
registry, one of which seems to be associated with the FlashPaste
uninstaller.
This is the registry entry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Flashpaste
Lite]
"NSIS:StartMenuDir"="Flashpaste"

There's a possible innocent explanation in that NSIS may refer to
Nullsoft Scriptable Install System which is a well established
installer. I'd like to hear the view of others on this.

Paul