PCWorld Forums

PCWorld Forums: Why Isn't A Program Malware If It Installs Additional, Unwanted Software? - PCWorld Forums

Jump to content

  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Why Isn't A Program Malware If It Installs Additional, Unwanted Software?

#1 User is offline   PCWorld 

  • Advanced Member
  • PipPipPipPipPipPipPipPip
  • Group: PCWorld BOT
  • Posts: 103,924
  • Joined: 01-August 07

Posted 03 December 2012 - 07:55 AM

Post your comments for Why isn't a program malware if it installs additional, unwanted software? here
0

#2 User is offline   TerrenceNewton2zgr 

  • Member
  • PipPip
  • Group: Members
  • Posts: 43
  • Joined: 08-July 11

  Posted 03 December 2012 - 09:22 AM

I really hate when I'm installing something as well-known and ordinary as a Java update, and I have to make sure to un-check all these boxes so it doesn't install any of that garbage. And the disgusting this is, in general, people who are not computer-savvy will just not think to un-check them, especially they way some of them are kind of sneaked in.
1

#3 User is offline   Mike564123 

  • Member
  • PipPip
  • Group: New Member
  • Posts: 10
  • Joined: 05-November 12

  Posted 03 December 2012 - 09:30 AM

You can use Ninite and avoid all of this. Of course, their list is limited, so if the program you want is not on there you will have to install as you normally would. We use Ninite at work (I work for an IT company that builds computers for clients) and Ninite really gives you just the program, nothing more. But really, this all comes down to reading the fine print. Im sure its pretty much only lawyers that read the entire EULA, and yet there is a ton of stuff in them that would probably scare most people off. This is why viruses and malware are so prevalent, people are just too lazy to be diligent and do proper research.
0

#4 User is offline   rixware 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 83
  • Joined: 11-April 07

  Posted 04 December 2012 - 08:06 AM

Whenever I have to update Flash, Adobe tries to stick me with McAfee. One time I accidentally let it get through and -- ouch! Have you ever tried to uninstall that virus crapware? It's nearly impossible without visiting the McAfee site, sifting through all the dreck, and locating the one magical utility which cleans away everything. For this, I blame ADOBE (while also cursing McAfee under my breath)!

Not long ago, a user I support installed a well-known and formerly trusted free PDF printer. Along with it she got a browser hijacker that was actually placed there for profit by the author (versus someone maliciously modifying and redistributing the installer). The checkbox to disable the install was hidden on a tab of the installer screen. The remnants of that little mistake (which took four hours to undo) are still hanging around in the browser causing occasional error messages about the default search provider being corrupted.

My point is that these types of add-ons are not harmless annoyances which can be avoided by carefully reading the install screens. They are malware, plain and simple, and should be regarded as such. Yes, there are worse kinds of malware, but that's not the point.

If at any time I discover that some application is requesting to install an add-on I did not request that is unrelated to the program I'm installing, I quit the installer immediately without installing the program, delete the installer, and cross that vendor off my list for good. Only a zero-tolerance approach will rid us of this bane on modern software. (One large shareware download site has now added this into their default download sequence, meaning you have to carefully avoid this malware on every single download. I'll never visit that site again.)

I'm not against software authors making money, but it should be done on the merits of their work and not by trickery.
0

#5 User is offline   LiveBrianD 

  • Elite
  • PipPipPipPipPipPipPipPip
  • Group: Members
  • Posts: 11,191
  • Joined: 31-December 09
  • Location:Right behind you... made you look! :D

Posted 04 December 2012 - 09:05 AM

PUPs (more like POS) are a pain for everyone. I always have to be really careful in those installers (often, I just disconnect my internet while running the installer so it can't use any Opencandy crap or the like to download more garbage), and I end up having to remove that garbage from other people's PCs when they forget to uncheck the boxes. I just ran into that yesterday - 3-4 toolbars installed on a PC, and some hotspot shield program messing with the intranet. Ughh...
Spoiler
"The Internet will be used for all kinds of spurious things, including fake quotes from smart people." -Albert Einstein
Need a Windows ISO image?
0

#6 User is offline   Sunsmasher 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 56
  • Joined: 11-December 08

  Posted 04 December 2012 - 09:11 AM

Quote

Whenever I have to update Flash, Adobe tries to stick me with McAfee. One time I accidentally let it get through and -- ouch! Have you ever tried to uninstall that virus crapware? It's nearly impossible without visiting the McAfee site, sifting through all the dreck, and locating the one magical utility which cleans away everything. For this, I blame ADOBE (while also cursing McAfee under my breath)! Not long ago, a user I support installed a well-known and formerly trusted free PDF printer. Along with it she got a browser hijacker that was actually placed there for profit by the author (versus someone maliciously modifying and redistributing the installer). The checkbox to disable the install was hidden on a tab of the installer screen. The remnants of that little mistake (which took four hours to undo) are still hanging around in the browser causing occasional error messages about the default search provider being corrupted. My point is that these types of add-ons are not harmless annoyances which can be avoided by carefully reading the install screens. They are malware, plain and simple, and should be regarded as such. Yes, there are worse kinds of malware, but that's not the point. If at any time I discover that some application is requesting to install an add-on I did not request that is unrelated to the program I'm installing, I quit the installer immediately without installing the program, delete the installer, and cross that vendor off my list for good. Only a zero-tolerance approach will rid us of this bane on modern software. (One large shareware download site has now added this into their default download sequence, meaning you have to carefully avoid this malware on every single download. I'll never visit that site again.) I'm not against software authors making money, but it should be done on the merits of their work and not by trickery.

0

#7 User is offline   Sunsmasher 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 56
  • Joined: 11-December 08

  Posted 04 December 2012 - 09:12 AM

You're probably depriving yourself of a lot of good free software because you won't uncheck a few boxes here and there, but of course, that's your choice to make....
0

#8 User is offline   mjd420nova 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,984
  • Joined: 05-August 06
  • Location:Fremont, California

Posted 04 December 2012 - 11:34 AM

You have to read the download instructions and not blindly click to get started. The stuff that come along with that download can be avoided. I had one user that only had about three inches of space with a half dozen tool bars filling up the top half.
0

#9 User is offline   waldojim 

  • Elite
  • PipPipPipPipPipPipPipPip
  • Group: Members
  • Posts: 15,089
  • Joined: 29-October 08
  • Location:Texas

Posted 04 December 2012 - 11:42 AM

The most aggravating part is that I have found this software with PAID software as well.

Nero is the big culprit that comes to mind. Why on earth do they feel the need to bundle crapware in with PAID software?
"There is a cult of ignorance in the United States, and there always has been. The strain of anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'" -- Isaac Asimov
Spoiler
0

#10 User is offline   mjd420nova 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,984
  • Joined: 05-August 06
  • Location:Fremont, California

Posted 04 December 2012 - 04:14 PM

Some units from Dell, HP and Gateway come with an incredible amount of junk, some call it crap ware. It wasn't as bad with Lenovo but an Acer laptop I looked at had so much it took over three minutes to boot and froze completely when no ethernet was found. If just once I could turn on a machine and have it come up just the basic desktop and no unneccesary icons.
0

#11 User is offline   waldojim 

  • Elite
  • PipPipPipPipPipPipPipPip
  • Group: Members
  • Posts: 15,089
  • Joined: 29-October 08
  • Location:Texas

Posted 04 December 2012 - 07:55 PM

View Postmjd420nova, on 04 December 2012 - 04:14 PM, said:

Some units from Dell, HP and Gateway come with an incredible amount of junk, some call it crap ware. It wasn't as bad with Lenovo but an Acer laptop I looked at had so much it took over three minutes to boot and froze completely when no ethernet was found. If just once I could turn on a machine and have it come up just the basic desktop and no unneccesary icons.


My Sony was that way. Just the OS, and a few Sony media applications. None of it junk though. It was quick, and clean... too bad the machine died and Sony support had to ruin the experience.
"There is a cult of ignorance in the United States, and there always has been. The strain of anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'" -- Isaac Asimov
Spoiler
0

#12 User is offline   OneTrueFriend 

  • Member
  • PipPip
  • Group: Members
  • Posts: 38
  • Joined: 28-August 07

  Posted 06 December 2012 - 10:35 AM

I am sick and tired of this sneaky practice
which gets sneakier by the day.
Even once trusted sites are using this sleigh of hand
and the whole thing has become a minefield.
I am well capable of making my own decisions so I ask these
people to stop ticking boxes on my behalf and dumping
malware on my machine - taking advantage of my need for
some software.
Those of you who do this, and you know yourselves, hang your
heads in shame.
You are often guilty of gross dishonesty.
Shame on you.
You are giving the industry that provides your livelihood a
very bad name.
I am confident that the population of my country - Ireland -
stands behind me on this.
0

#13 User is offline   InspectorT 

  • Member
  • PipPip
  • Group: Members
  • Posts: 18
  • Joined: 02-July 07

  Posted 06 December 2012 - 11:13 AM

Quote

If just once I could turn on a machine and have it come up just the basic desktop and no unneccesary icons.



Easy! Buy a Mac.
0

#14 User is offline   rwoodward 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 63
  • Joined: 15-December 11

  Posted 06 December 2012 - 12:27 PM

Quote

If just once I could turn on a machine and have it come up just the basic desktop and no unneccesary icons.

Easy! Buy a Mac.


Why yes, Apple would *never* preinstall potentially unwanted software on their machines [cough] iTunes[cough].
0

#15 User is offline   rwoodward 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 63
  • Joined: 15-December 11

  Posted 06 December 2012 - 12:32 PM

Quote

If at any time I discover that some application is requesting to install an add-on I did not request that is unrelated to the program I'm installing, I quit the installer immediately without installing the program, delete the installer, and cross that vendor off my list for good. Only a zero-tolerance approach will rid us of this bane on modern software.


So you're not using any Adobe or Google products? Hmmmm...
0

#16 User is offline   john3347 

  • Advanced Member
  • PipPipPipPip
  • Group: Members
  • Posts: 130
  • Joined: 24-June 09

  Posted 06 December 2012 - 12:42 PM

If an application installation installs additional applications to your computer, especially without specifically obtaining permission, it IS malware. It is not, by definition, a virus or a trojan, but an uninvited program installed by a wanted installer is malware. The default action by these spam programs should be "do not install". I should not have to uncheck any boxes. I support rixware's policy to refuse to install any program that clandestinely attempts to install any additional program on my computer. This policy is not practical in every instance, but if I am just trying a program and not really, solidly convinced that I need it, I also just back out from the installation and the author of the wanted program doesn't make a few cents off the unwanted program, they lose out entirely. If this policy became popular, we would fix this problem.
0

#17 User is offline   JohnFleming 

  • Member
  • PipPip
  • Group: Members
  • Posts: 11
  • Joined: 26-July 07

  Posted 06 December 2012 - 01:00 PM

Be VERY careful of MyPhoneExplorer, an app for Outlook syncing with an Android phone. This installation hijacks your browser, changes the default search engine, and generally fouls things up. NEVER again, cheapskate.
0

#18 User is offline   ronin7752 

  • Senior Member
  • PipPipPipPipPip
  • Group: Members
  • Posts: 940
  • Joined: 21-February 09

  Posted 06 December 2012 - 07:06 PM

Vendors who make "more money" off of end-user ignorance are scumbags -- legal or not.
90% of being smart is knowing what you're dumb at.
0

#19 User is offline   micker377 

  • Member
  • PipPip
  • Group: Members
  • Posts: 28
  • Joined: 30-October 06

  Posted 06 December 2012 - 09:41 PM

Quote

Im sure its pretty much only lawyers that read the entire EULA,


That's why I use a program called "EULAlyzer". It reads the EULA quickly, and points out any "interesting" parts. I don't install ANY program without "reading" the EULA first.
0

#20 User is offline   oldschoolh4ck3r 

  • Senior Member
  • PipPipPipPipPip
  • Group: Members
  • Posts: 881
  • Joined: 11-January 09

  Posted 09 December 2012 - 07:32 AM

If you're not given the option upfront to not install a bundled app, that app is a trojan.
---
Abort, Retry, Epic Fail? _
0

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users