if you download from the official website: http://imgburn.com/index.php?act=download , there is no malware... it could ask you to install crap but you can always say no, this is the first time I hear about imgburn infected with malware... ofcourse a 3rd party download site can add whatever they want so be careful!

edit: just checked, you are asked to install 2 extra programs, you say no/don't accept and they are not getting installed...

I was reading on there forum that some users are still having issues with something called opencandy even when they unchecked the relevant boxes.

There must be something to the claim that program is no longer safe all user reviews for the latest version at download.com are negative. I would assume that most people would know to check the install options carefully nowadays.

I have downloaded 2.5.6.0 from oldapps.com but I haven't yet installed it. I think this is the version I had installed in the past. I don't like downloading from non official sites.🙁

Use this instead: http://infrarecorder.org/

No muss, no fuss. quick, lean and works perfect. also free. What more could you want?

I recommend this modified package from the RyanVM site. It was intended as an addon for slipstreaming, but it also works as a standalone switchless installer... just open the 7Z archive and grab the IBurn258.exe installer file out of the svcpack folder. It's just the main program, all bundled crap removed.

so all this because a user can't read 2 dialog screens and press "no/don't agree" ? :\

The official installer asks about installing "Real Player" (no) and "Dragons of Atlantis" (do not aggree).
There is NO express/custom install options, you are asked every time about these 2 extras. Getting crap installers from other sites has nothing to do with imgburn.

Thanks guys these give me some good options to try. 😀

so all this because a user can't read 2 dialog screens and press "no/don't agree" ? :\
The official installer asks about installing "Real Player" (no) and "Dragons of Atlantis" (do not aggree).

You're completely missing the point. It's not just about unchecking a couple pieces of bundled software. The way the Opencandy crap works is that it goes out and connects to an external server to retrieve those "offers". Declining the offers does not change the fact that it phones home. Many people find such behavior unacceptable, and rightfully so, because it's running under administrative rights and you have no control over what it retrieves from that external source.

^ ah, I thought this open-candy crap was an extra installer on top of the real one... Seems I was wrong ...

use ninite.com the installeR never come with any extra crap. seriously check it out it may save you some time

You can also edit your hosts file, so that the OpenCandy crap cannot connect to anything.

One of the first things I installed on my new system was ImgBurn 2.5.7.0. There's no records in my firewall logs of any OpenCandy stuff, nor are there any policies set in regards to the program, SweetLabs Inc., or anything related. Based on that, and forum posts on the ImgBurn website, I think 2.5.7.0 is the best you can do without getting hit with OpenCandy stuff.

After reading some posts about OpenCandy I think a lot of people are failing to properly express why OpenCandy is bad. Downloading stuff in order to present offers to users while running with administrative rights through an installer isn't the big danger, it's that if an offer is malformed, intentionally or not, it could install stuff without the user's consent, which adds an extra hassle to remove, especially if it's malicious stuff. This may be against OpenCandy's policies and they may remove such things from their network when they're informed, but the simple fact is that the danger is present, people are affected by these incidents, and thus people would rather not take the risk.

Considering how rapidly the author of ImgBurn is taking flak for this decision I have a hunch we may be seeing a 2.5.8.1 in the near future that has OpenCandy taken out. ;)

You actually have many options available here and will likely have more trouble deciding which is best for your particular needs than finding a particular solution that works.
Personally, I keep IMGBurn and AppGeeker DVD Creator (download here) installed to cover all bases and maximize my options when more than one converter can handle the job.

Odd. I had a post in here, but it seems to have vanished...

Anyway, most OpenCandy installers can be subverted just by running the installation package from the command line with the "/NOCANDY" switch. I say "most" because I tried this trick with Freemake Video Converter the other day, and the installer choked badly, possibly because the installer featured more customization than usual. But it works most of the time.