Microsoft security essentials and malwarebytes both detect opencandy in the installer. Even if you download xfire from
http://www.xfire.com/download/MSE Log.txt
Items:
file:C:\Users\myname\AppData\Local\Temp\nssEB79.tmp\OCSetupHlp.dll
file:C:\Users\myname\AppData\Local\Temp\SUxttf_B.exe.part
file:C:\Users\myname\Downloads\xfire_installer_44036.exe
webfile:C:\Users\myname\Downloads\xfire_installer_44036.exe|http://media.xfire.com/xfire/client/download/xfire_installer_44036.exe
Well so far xfire for me. I didn't use it for years. I now remember why.