When I downloaded PhotoScape...

Vendor - PUP.Optional.OpenCandy
Type - File
Location - C:\Users\John\Downloads\PhotoScape_V3.7.exe

I don't remember the fake Mozilla one but free Malwarebytes removed it it... Said it was a Trojan Horse.

I think it installs just by mousing over the link. I wonder if buying the upgraded version of Malwarebytes would totally prevent this?