Difference between revisions of "Potentially unwanted program"
m (Gah! I gotta check more carefully before saving! Having a single bullet point before a list of them looks a little strange.) |
m (→Kinds of Potentially Unwanted Programs: ...yet another miniscule fix) |
||
| Line 4: | Line 4: | ||
==Kinds of Potentially Unwanted Programs== | ==Kinds of Potentially Unwanted Programs== | ||
| − | *[[Adware]] (Like [[Superfish]]) - Insert advertisements into web pages you view, or even starts popup ads | + | *[[Adware]] (Like [[Superfish]]) - Insert advertisements into web pages you view, or even starts popup ads in your computer system itself |
*[[Crippleware]] - Installs a program which can do little if anything. This will usually nag the user to buy the full version so that they may actually use it. The most common kinds are [[anti-malware]] and system optimization programs. | *[[Crippleware]] - Installs a program which can do little if anything. This will usually nag the user to buy the full version so that they may actually use it. The most common kinds are [[anti-malware]] and system optimization programs. | ||
*Mirror/[[Local Proxy]] - Mirrors or redirects all internet traffic through itself so it may build a profile of the user, which may be used for targeted marketing or sold | *Mirror/[[Local Proxy]] - Mirrors or redirects all internet traffic through itself so it may build a profile of the user, which may be used for targeted marketing or sold | ||
| − | * [[Web browser]] Hijacking - Forcibly alters [[Web browser|browser]] settings to earn the distributor money, usually by changing the home page and/or default search engine<ref>https://www.codeword.xyz/2015/08/09/exploiting-android-users-for-fun-and-profit</ref>. This sort of thing is very common. | + | * [[Web browser]] Hijacking - Forcibly alters [[Web browser|browser]] settings to earn the distributor money, usually by changing the home page and/or default search engine<ref>https://www.codeword.xyz/2015/08/09/exploiting-android-users-for-fun-and-profit</ref>. This sort of thing is very common. Browser addons are also sometimes installed, though these can often be classified as [[Adware]] and/or [[Spyware]]. |
| − | * [[Dialer]] - A largely out-of-date attack intended for dial-up internet connections (or now, [[Cellular phones]]<ref>http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953</ref>) which dials out to unwanted destinations for the purpose of wasting the | + | * [[Dialer]] - A largely out-of-date attack intended for dial-up internet connections (or now, [[Cellular phones]]<ref>http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953</ref>) which dials out to unwanted destinations for the purpose of wasting the owner's data transfer allowance. |
==Examples== | ==Examples== | ||
Revision as of 15:07, January 22, 2016
A potentially unwanted program (PUP) is software which has been bundled with another installer. This is usually a demo version of some program they are attempting to sell. When someone goes to install a certain desired program, the PUP is installed as well, with or without the user's consent. These unwanted add-ons are also sometimes called bloatware, since they can fill (bloat) a person's system with useless software. People would be well advised to watch carefully what is going on when downloading software. The screens associated with software downloads are often set to "yes" for these things, and the ways to decline such installations are often obscure. You only install a given piece of software once—it's worth taking the time to pay close attention to that is going on.
Adware is often installed as a PUP, sometimes with full programs, and sometimes with browser extensions[1]
Kinds of Potentially Unwanted Programs
- Adware (Like Superfish) - Insert advertisements into web pages you view, or even starts popup ads in your computer system itself
- Crippleware - Installs a program which can do little if anything. This will usually nag the user to buy the full version so that they may actually use it. The most common kinds are anti-malware and system optimization programs.
- Mirror/Local Proxy - Mirrors or redirects all internet traffic through itself so it may build a profile of the user, which may be used for targeted marketing or sold
- Web browser Hijacking - Forcibly alters browser settings to earn the distributor money, usually by changing the home page and/or default search engine[2]. This sort of thing is very common. Browser addons are also sometimes installed, though these can often be classified as Adware and/or Spyware.
- Dialer - A largely out-of-date attack intended for dial-up internet connections (or now, Cellular phones[3]) which dials out to unwanted destinations for the purpose of wasting the owner's data transfer allowance.
Examples
Conduit's web browser toolbar is sometimes proclaimed as "popular," but is often installed as bloatware.
Here's a very common example. Since the Adobe Flash Player is so common, most people have seen this. Adobe has been attaching PUPs to its and Shockwave products for years. This is one of the ways Google Chrome took over the web browser market.
Another example is the program "Freemake Video Converter", which is actually a very fine piece of software. The website for this has a place where one can make donations with PayPal. People would be well advised to make donations like this when they download free software—it could make the author less inclined to accept bloatware kickbacks.
Figure 1 shows the initial screen after starting the download and installation process. It is quite common for people to select the "express" installation rather than the "custom" one. Custom installations often involve complex decisions that a casual user would not be able to make. That's why the "standard" or "express" installation is usually a good idea, and is usually recommended.
But read the fine print!
(needs the pictures)
References
- ↑ http://arstechnica.com/security/2014/01/malware-vendors-buy-chrome-extensions-to-send-adware-filled-updates
- ↑ https://www.codeword.xyz/2015/08/09/exploiting-android-users-for-fun-and-profit
- ↑ http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953