I just tried to download FileZilla from SourceForge. It tries to install some random content from an unpopular and useless provider. It is definitely not reliable anymore.
More generally, which FTP clients would you recommend?
I use WinSCP. It doesn't install adware, and it has a simpler interface than FileZilla. It is easy to use and supports FTP, SFTP, and SCP. It can also save as many profiles as you want.
winscp.com") which I use to automatically push backups from our web servers to the FTP backup server.
Use the zip option instead of the .exe installer, and simply unzip filezilla to where you want it - other than to bundle the crapware and potentially check for updates, why would filezilla need an installer?
Alternatively, it seems like there is a nowrap link for sourceforge downloads, so instead of the default
use
instead
Alternatively, you can download the .exe from here directly, however you will need to find which one you want
source for nowrap
https://forum.filezilla-project.org/viewtopic.php?f=2&t=32969
Keep away from it, at least as long as they reference the SourceForge download site!
Edit 2: Since this answer in 2014, SourceForge has got new owners, who abandoned the adware bundling policy, but FileZilla, back then one of their first, major partners for adware, has still been distributed with adware bundles through other channels.
The FileZilla download from SourceForge (their official download site) definitely installs unwanted software without the user's explicit consent and knowledge (thus malware). It was NOT the software advertized in the SourceForge downloader popup, which I rejected.
I tried and first got an offer for a price search software, which I could reject. That was, of course, what I did. A few minutes after opening FileZilla, an "Optimizer Pro" window opened up, harassing me with reports about possible "optimizations" and asking me to register.
This software was never mentioned in any screen immediately visible, there was no pre-set checkbox, and even looking over the EULA quickly didn't show me anything suspicious.
This kind of malware - adware, spyware, browser hijackers (start page, search engines etc.) is becoming a growing pest, even from renowned sources (Oracle's Java runtime being a typical example for this). Just make these malware sites known! How long did it take for the browser toolbar crapware bundled with Java to be mentioned in public? SourceForge still seems to be a renowned site, but this can spoil their reputation very quickly!
-- some other alternatives have already been mentioned here.
Edit:
I think the unwanted software might have been installed by a deceptive EULA page, as shown in this article:
http://www.pcpro.co.uk/blogs/2014/04/03/time-to-outlaw-crapware-laden-installers/
I remember a similar EULA page, but with "FileZilla" instead of "CamStudio" in the title. It suggests an EULA for the desired software, the EULA itself looks pretty much standard (yes, I expected the tool to try make me install unwanted crapware, so I read into the EULA), only the fine print on the left (which I probably forgot) reveals than another, adware, not named there, is going to be installed by clicking "Accept".
The EULA page shown in the article is clearly deception: it is titled as an EULA for the desired software (CamStudio, FileZilla or whatever), and in a small printed side note, it adds something entirely different, not even naming the adware to be installed. This is the classic fine print trap, a traditional method of deception. Of course, most legal systems make such "contracts" void, so there's usually neither a legitimization to install unwanted software, nor any other valid commitment.
The installer at FileHippo has no such crapware.
I use WinSCP or Cyberduck which is a little bit like a MacOSX-App :)
both are very leightweight, fast and powerful
Compiling from binaries is the safest way if the main site has malware. Use your Search Engine to find guides on how to compile.
md5 checks offer a reliable protection against file corruption (like malware).
Make sure that you get the right binary. Compiling is usually done from your command processor.
If the place where you download from has a Software Revision Control, you may be highly confident that you are downloading from the right source as it is common.
You may want to download through FTP. Most sites offer an option when you ask for download. If not, you check their Pages to see if they allow you to connect to their FTP through a client. You will usually use batch to connect to the FTP.
