Difference between revisions of "Potentially unwanted program"
m (→Examples: formalized language a little and replaced missing words.) |
DavidB4-bot (talk | contribs) (clean up) |
||
| Line 7: | Line 7: | ||
*[[Crippleware]] - Installs a program which can do little if anything. This will usually nag the user to buy the full version so that they may actually use it. The most common kinds are [[anti-malware]] and system optimization programs. | *[[Crippleware]] - Installs a program which can do little if anything. This will usually nag the user to buy the full version so that they may actually use it. The most common kinds are [[anti-malware]] and system optimization programs. | ||
*Mirror/[[Local Proxy]] - Mirrors or redirects all internet traffic through itself so it may build a profile of the user, which may be used for targeted marketing or sold | *Mirror/[[Local Proxy]] - Mirrors or redirects all internet traffic through itself so it may build a profile of the user, which may be used for targeted marketing or sold | ||
| − | * [[Web browser]] Hijacking - Forcibly alters [[Web browser|browser]] settings to earn the distributor money, usually by changing the home page and/or default search engine<ref>https://www.codeword.xyz/2015/08/09/exploiting-android-users-for-fun-and-profit</ref> | + | * [[Web browser]] Hijacking - Forcibly alters [[Web browser|browser]] settings to earn the distributor money, usually by changing the home page and/or default search engine.<ref>https://www.codeword.xyz/2015/08/09/exploiting-android-users-for-fun-and-profit</ref> This sort of thing is very common. Browser addons are also sometimes installed, though these can often be classified as [[Adware]] and/or [[Spyware]]. |
* [[Dialer]] - A largely out-of-date attack intended for dial-up internet connections (or now, [[Cellular phones]]<ref>http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953</ref>) which dials out to unwanted destinations for the purpose of wasting the owner's data transfer allowance. | * [[Dialer]] - A largely out-of-date attack intended for dial-up internet connections (or now, [[Cellular phones]]<ref>http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953</ref>) which dials out to unwanted destinations for the purpose of wasting the owner's data transfer allowance. | ||
| Line 45: | Line 45: | ||
[[Category:Internet]] | [[Category:Internet]] | ||
[[Category:Malware]] | [[Category:Malware]] | ||
| − | [[ | + | [[Category:Software]] |
Revision as of 03:55, June 23, 2016
A potentially unwanted program (PUP) is software which has been bundled with another installer. This is usually a demo version of some program they are attempting to sell. When someone goes to install a certain desired program, the PUP is installed as well, with or without the user's consent. These unwanted add-ons are also sometimes called bloatware, since they can fill (bloat) a person's system with useless software. People would be well advised to watch carefully what is going on when downloading software. The screens associated with software downloads are often set to "yes" for these things, and the ways to decline such installations are often obscure. You only install a given piece of software once—it's worth taking the time to pay close attention to that is going on.
Adware is often installed as a PUP, sometimes with full programs, and sometimes with browser extensions[1]
Kinds of Potentially Unwanted Programs
- Adware (Like Superfish) - Insert advertisements into web pages you view, or even starts popup ads in your computer system itself
- Crippleware - Installs a program which can do little if anything. This will usually nag the user to buy the full version so that they may actually use it. The most common kinds are anti-malware and system optimization programs.
- Mirror/Local Proxy - Mirrors or redirects all internet traffic through itself so it may build a profile of the user, which may be used for targeted marketing or sold
- Web browser Hijacking - Forcibly alters browser settings to earn the distributor money, usually by changing the home page and/or default search engine.[2] This sort of thing is very common. Browser addons are also sometimes installed, though these can often be classified as Adware and/or Spyware.
- Dialer - A largely out-of-date attack intended for dial-up internet connections (or now, Cellular phones[3]) which dials out to unwanted destinations for the purpose of wasting the owner's data transfer allowance.
Examples
Conduit's web browser toolbar is sometimes proclaimed as "popular," but is often installed as bloatware.
Since the Adobe Flash Player is so common, most people have seen this common example. Adobe has been attaching PUPs to its Flash Player and Shockwave products for years. This is one of the ways Google Chrome took over the web browser market.
Another example is the program "Freemake Video Converter," which is actually a very fine piece of software. The website for this has a place where one can make donations with PayPal. People would be well advised to make donations like this when they download free software—it could make the author less inclined to accept bloatware kickbacks.
Figure 1 shows the initial screen after starting the download and installation process. It is quite common for people to select the "express" installation rather than the "custom" one. Custom installations often involve complex decisions that a casual user would not be able to make. That's why the "standard" or "express" installation is usually a good idea, and is usually recommended.
But read the fine print! It will install adware, and hijack your browser if you don't select "Custom".
After you choose "Custom" and click "Next", more checkboxes will come up, as in Figure 2. You need to uncheck the two items before clicking "Next".
At this point Figure 3 comes up. They're still trying to install bloatware. This time it's an "Advanced ScreenSnapshot" program. Once again, you have to pay attention to what the installation process is doing, and select "Custom installation", "advanced" though that may be.
After you choose "Custom", you get Figure 4, with another checkbox that you have to clear before clicking "Next".
And now you get Figure 5. They just don't give up. It's more utilities. "Speed Up your PC" and "remove clutter" utilities are ubiquitous across the internet. Most people know that they are essentially worthless. And why anyone would want to increase their startup time by 75% is a mystery. The "Extend your battery life" trick presumably just sets your power profile to the "low power" option. That's a standard option that Windows gave you when you first started the computer.
So you have to clear that checkbox. Then, when you click "Next", the software that you want will be installed.
References
- ↑ http://arstechnica.com/security/2014/01/malware-vendors-buy-chrome-extensions-to-send-adware-filled-updates
- ↑ https://www.codeword.xyz/2015/08/09/exploiting-android-users-for-fun-and-profit
- ↑ http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953