Download Manager Tips, Reader Q&A

An important message for FlashGet users, plus how to fix weird PC clock problems--and a brand new time-wasters section.

I just got a nasty surprise from FlashGet, my favorite download manager. It's got a big, inviting security hole that let a nasty Trojan worm its way onto my system. I'm not the only one having to fend off the attack. Users on theFlashGetandKaspersky Labsforums first raised the flag.

My at-the-moment favorite antivirus program,Kaspersky, spotted and deleted Trojan-Downloader.Win32.Agent.kht. I didn't give it a second thought; some of the files I download are, to say the least, suspect. [You, too. --Editor] And I didn't connect the Trojan with FlashGet.

But the next day, Kaspersky hollered again--and this time it was just after launching FlashGet. So I did some digging and found a Viruslist blog entry that explained the FlashGet exploit.

FlashGet's servers appear to have been infected and FlashGet merrily passed along the Trojan to users. That's why even though Kapersky caught it the first time, FlashGet let it through again. You can read Aleks Gostev's explanation atViruslist.

The problem is that FlashGet's security breach hasn't been fixed. For all I know, the site might be attacked again, with FlashGet users still at risk. So far there hasn't been an acknowledgment of the problem on the FlashGet site and the Chinese developer hasn't replied to my request for comment.

I prefer FlashGet, but I also like a Trojan-free PC. So I struggled with whether to uninstall and replace FlashGet with another download manager. Finally I decided that with Kaspersky and my anti-spyware program,CounterSpy, watching over me, I can safely continue to use the download manager.

If you're feeling apprehensive, uninstall FlashGet and read about some alternatives--as well as other downloading tips--in "Get Smart About Downloads." Here's a quick list:

Using a download manager is vital if you're scarfing up multi-part videos or lots of files from the Internet. For one thing, you can stack up dozens of files and the manager will download them automatically. The other benefit is that you can set a schedule so the manager downloads the files when you want, say, late at night after you've gone to bed. Finally, and probably most important, is that you don't have to worry if your browser crashes midway while downloading a large file--mine are typically 700MB--because the program will resume the download.

I get lots of e-mail asking for help, like this one from Cynthia M.:

"So today, my normally reliable computer at work starts changing the time. First it thinks that it's 5 p.m. on Monday. Unfortunately, it's already Tuesday. Oddest thing, though, it correctly identifies that I'm on Pacific Daylight Time. Fast forward through several resets, reboots, McAfee Virus Scans, and deleting and reinstalling the Windows Daylight Savings Time patch. Better, but no cigar: Now the time is resetting back to 10:25 a.m., although it's at least recognizing it is Tuesday."

The problem, I told her, is a weak system battery. The symptoms can also exhibit as a temperamental PC, say, giving you a horrifying message that the hard drive doesn't exist when you try to book up. The next boot, however, will be normal.

A battery stores a PC's CMOS settings, and the time and date, among other things. A dying battery confuses the settings. Changing it is straightforward, but time consuming. You can pick up a new coin cell battery for under $7 at any electronics store.