I downloaded VLC from CNET. You download a install file not a setup. The install added at least one 'bonus' app. It was a cloud backup from Norton. Either as a part of this package or something from CNET or something else was an app called update. I can't see it as a process but it kept trying to connect to the internet. I normally keep my self unplugged from the network unless I need to be connected so it continued to fail making the connection. I restored my system to an earlier date just to be safe. I will NEVER download anything from CNET ever again. I assume the Trojan is a white hat Trojan but it may have the ability to automatically install more apps I do not want without my saw so. I looked for some indication that I would be installing software I did not want. This is all that was mentioned The said nothing about the extra software.