PUP 62% of the Top 50 Download.com applications bundle toolbars and other PUPs

[mona]

62% of the Top 50 Download.com applications bundle toolbars and other PUPs

In : Emsisoft / Security Knowledge by Slade on February 26, 2015 | Deutsch, English, Français

CNET’s Download.com is considered to be one of, if not, the most popular download portal(s) hosting a conglomerate of different software (free and paid). We recently discussed the top ten methods of how toolbars, adware, homepage hijackers and other potentially unwanted programs (PUPs) can sneak onto your computer. Potentially unwanted programs are becoming a new epidemic that users must learn face to overcome on a regular basis. In fact, a recent Panda Security study shows that potentially unwanted programs are on the rise resulting in PUPs now comprising 24.77% of total malware infections.
A lot of potentially unwanted programs are delivered by installers hosted on download portals such as Download.com. But what kind of programs are frequently bundled and should you look out for? And how many of Download.com’s apps actually contain PUPs?
We researched both. First, here is a list of the most commonly bundled PUPs we see through Download.com:

Example 1: MyPC Backup – free trial with pop-ups

MyPC Backup is a commonly distributed potentially unwanted program that can often be found bundled with a wide variety of freeware applications. Once installed, MyPC Backup will nag the user to try and coax them into signing up for a “free account”. Afterwards, it will urge the user to back up their files and folders.

 

 

The con then comes into play stating that you need to purchase the full version in order to perform the backup. Please, never let appearances fool you: if it seems too good to be true, it most likely is. Also, expect to be inundated with pop-ups during your free trial period.

Example 2: iObit Products – are iObit products “useful” or “useless”?

Most users have more than likely used one or more of iObit’s free software offerings. Some users may wonder how iObit products are considered to be possibly unwanted. Well, iObit’s clever tactics of bundling one or more of their free software offerings within other similar freeware products is considered to be potentially unwanted. An example of this is: Advanced System Care will install iObit Uninstaller, while iObit Driver Booster may offer to install iObit Malware Fighter.



Plus, do you know if iObit’s privacy policy is one that you want to comply with? iObit has been accused in the past of using shady software development methods. Please be cautious when installing related iObit applications. Consider this: if an application that you may never use is unknowingly installed along with another application, why do you need it on your PC? iObit is also notorious for pushing their paid products by using “in program ad’s” (Activate Now) and questionable promotional and marketing tactics.

 

Example 3: Pro PC Cleaner – finds fake issues that you need to pay for to fix
Pro PC Cleaner has made its presence known and tagging along with it are its fake results. Pro PC Cleaner uses cleverly deceitful tactics and a colorful user interface in order to give the user a false sense of confidence and security.

 

Example 4:

Skype is bundled with a multitude of freeware installers. If a user happens to accidentally overlook the “I do not accept” or the check box to opt out of installing Skype: it can be considered just as unwanted as Pro PC Cleaner.

 

Example 5: YTD Video Downloader – more browser modifications than you’d want
Last, but not least, Spigot can be considered the most common potentially unwanted offer that is bundled with the vast majority of Download.com freeware. Spigot is rather nasty because it makes a plethora of browser modifications.

 

 

Spigot modifies a user’s browser homepage, startup page, search engine and tab settings. As shown in the image above, Spigot also installs various browser add ons. If a user is not installing cautiously, a massive amount of junkware and unwanted changes could befall their browser(s). An offering such as this is definitely unwanted; however, avoiding it is as easy as clicking to decline. Please use definite caution when facing an installer such as this.

 

 

Download.com’s Top 50 downloads: what comes with them?

 

We looked into the top 50 most downloaded applications on Download.com and the various potentially unwanted programs installed with each. Shown below is the list of 50 applications and the bundled PUPs listed next to them.

 

As of February 2015, these programs contain PUPs:

1. Avast Free Antivirus - Dropbox
2. KMPlayer - Spigot browser extensions – shopping aid, newtab Aid, slick savings, Ebay shopping assistant, search protect, offers to change homepage and search engine to Yahoo during installation, Pro PC Cleaner, and Wajam
3. AVG Free Antivirus - AVG SafeGuard – changes homepage and search engine to AVG secure search, web tuneup
4. YAC (Yet Another Cleaner) - Considered to be a PUP itself
5. CCleaner - Chrome
6. Advanced System Care - Driver Booster, iObit Uninstaller
7. Free Youtube Download - Skype, PC Reviver
8. YTD Video Downloader - Spigot browser extensions – slick savings, browser Error assistant, Ebay shopping assistant, search protect, offers to change home and startup pages to Yahoo during installation, and GeniusBox
9. iObit Uninstaller - Advanced System Care
10. Download App - Spigot browser extensions – shopping new tab aid, slick savings, Ebay shopping assistant, search protect, offers to change homepage and search engine to Yahoo during installation, and Pro PC Cleaner
11. 3DP Chip - nProtect, SpeedUpMyPC 2015
12. GOM Media Player - Skype, Clean Water
13. Virtual DJ 8 - NO PUPs
14. Malwarebytes Anti-Malware - NO PUPs
15. PhotoScape - Google Drive, PC Mechanic
16. Start Menu 8 - NO PUPs
17. Driver Booster - iObit Malware Fighter
18. VLC Media Player - NO PUPs
19. Ad Aware Free Antivirus - Ad Aware Web Companion – changes home page and search engine to secure search
20. Minitool Partition Wizard - NO PUPs
21. Irfan View – NO PUPs
22. mHotspot - Tuneup Utilities, PC Mechanic, Safer Browser, Clean Water, Driver Max
23. Panda Free Antivirus - Panda Security Toolbar – changes default homepage and search engine to Yahoo
24. Hotspot Shield – changes default homepage and search engine to HotSpot web search, installs Hotspot shield toolbar during installation
25. Mozilla Firefox - NO PUPs
26. SlimDrivers – MyPC Backup
27. uTorrent - OWSLA Bundle , Skype
28. Virtual DJ 7 - NO PUPs
29. Any Video Converter - offers to change homepage and search engine to Yahoo during installation, Spigot browser extensions – shopping aid, new tab aid, slick savings, Ebay shopping assistant, search protect, and Pro PC Cleaner
30. AdwCleaner - NO PUPs
31. PrimoPDF - Open Candy
32. DriverMax - Open Candy, Safer Browser, Tuneup Utilities
33. Daemon Tools Lite - Spigot browser extensions – shopping aid, new tab aid, slick savings, Ebay shopping assistant, search protect, offers to change homepage and search engine to Yahoo during installation, Pro PC Cleaner, iCinema, and Bo Browser
34. UMPlayer - NO PUPs
35. Screencast – O – Matic - NO PUPs
36. iObit Malware Fighter - MyPC Backup, Advanced System Care Ultimate
37. Spybot Search and Destroy - NO PUPs
38. FastStone Imager Viewer – NO PUPs
39. Google Chrome - NO PUPs
40. VLC Media Player (64 Bit) - NO PUPs
41. 7Zip - NO PUPs
42. Kingo Android Root - Spigot browser extensions – shopping aid, new tab, slick savings, Ebay shopping assistant , search protect, offers to change homepage and search engine to Yahoo during installation, and Pro PC Cleaner
43. Format Factory - Spigot browser extensions – shopping aid, new tab, slick savings, Ebay shopping assistant, search protect, and Pro PC Cleaner
44. Media Player Codec Pack – NO PUPs
45. Macrium Reflect Free - NO PUPs
46. AOMEI Partition Assistant Standard Edition – NO PUPs
47. Youtube Music Downloader - Spigot browser extensions – shopping aid, new tab, slick savings, Ebay shopping assistant, search protect, offers to change homepage and search engine to Yahoo during installation, and Pro PC Cleaner
48. JetAudio Basic - offers to change homepage and search engine to Yahoo during installation, Spigot browser extensions – shopping aid, new tab, slick savings, Ebay shopping assistant, search protect, Pro PC Cleaner, and AVG Toolbar – offers to change homepage and tabs to AVG Secure Search
49. Pandora Recovery - offers to change homepage and search engine to Yahoo during installation, Spigot browser extensions – shopping aid, new tab, slick savings, Ebay shopping assistant, search protect, Pro PC Cleaner
50. Grand Theft Auto: Vice City Ultimate Vice City Mod - offers to change homepage and search engine to Yahoo, Spigot browser extensions – shopping aid, new tab, slick savings, Ebay shopping assistant, search protect, and Pro PC Cleaner

To share and download the above research easily, we created a PDF file with our findings. Get it here. Feel free to share!

 

Conclusion: 31 out of 50 tested Download.com applications bundle PUPs

In conclusion: out of the top 50 freeware applications on Download.com, 31 out of 50 are being bundled with potentially unwanted programs. This means that 62% of the freeware applications on Download.com contain potentially unwanted software. Be sure to use this download portal with extreme caution or else you may risk the possibility of facing a potentially unwanted outbreak.

 

Here are several reminders on how to stay PUP free:

• Instead of using download portals, go to the direct vendor website and download the desired software from there. Use caution here as well, because direct vendors can bundle PUPs themselves as well but at least it reduces the risk a little.
• Read over the terms of agreement carefully.
• Moreover, read the privacy policy of each bundled program carefully: what do they do with your data?
• Avoid seemingly suspicious software (free and paid).
• Uncheck boxes during installation since most PUPs use an opt-out approach.
• Use an antivirus program that comes with PUP detection, such as Emsisoft Anti-Malware.
• Do periodic scans for malware and PUPs with the free Emsisoft Emergency Kit, which scans and cleans your computer.

 

Download and share a summary of the findings here. Have a great (PUP-free) day!

 

 

 

another article worth reading :

BEWARE - PUPs are now spreaded by antivirus industry !

 

source

[dcs18]

Quite true - have been restricting the download.com site.

[mona]

Quite true - have been restricting the download.com site.

Me too, even before they started using their wrappers it used to be my main source for soft downloads.

Switched to Softpedia mainly, but I hate the site's new metro-like layout.

MajorGeeks is not bad too.

[CODYQX4]

Quite true - have been restricting the download.com site.

Me too, even before they started using their wrappers it used to be my main source for soft downloads.

I've mainly used FileHippo, this site, Softpedia, and MacUpdate.

Doesn't help about apps bundling their own crap, but I've yet to have them wrap it.

Yet downloading FileZilla from SourceForge, they make it hard to get the real deal and not an adware wrapper.

[steven36]

Most all these programs though on that list contain pups no matter were you get them at ... Download.com also has adware at there site if you download from there best to use this user script .AntiAdware - Remove forced download accelerators, managers, and adware on supported websites .

But its not just some programs that have unwanted things most all websites you visit have cross site scripting with ads Potentially Unwanted Sites We can call that PUS :lol:

Really you dont get nothing for free much ..Thats just like some top used programs that's free that dont bundle adware they collect info from you when you use them because they are spyware to began with.

[lurch234]

Switched to Softpedia mainly, but I hate the site's new metro-like layout.

You have an option to change from modern to classic next to the little red heart top right. Better than metro at least

[steven36]

Switched to Softpedia mainly, but I hate the site's new metro-like layout.

You have an option to change from modern to classic next to the little red heart top right. Better than metro at least

yes works as long as you allow cookies ...I have cookies disabled by default on all sites .. after allowed them it worked . :)

[212eta]

Softpedia and Ninite...

[software182]

majorgeeks is better

[thunderpants]

There's a small program called 'checky' that claims to stop any pups when installing software .

I haven't had a chance to test it.

There's one of those sites like cnet ,where u put an 'm.' in the address and u can bypass and get direct links.

I've had a memory blank on the name of it :)

I'm searching my old bookmarks for it and will post it when i find it.

http://m.en.softonic.com/windows

and this one that i haven't used in a while ,but it usually gives u the link to the website of the progs author:

http://www.freewaregeeks.com/index.php?PageSpeed=noscript

P.S.. I just noticed that "noscript" in the address of freewaregeeks, i think it's because i'm using Noscript firefox addon.

TRY REMOVING IT IF PAGE DOESN'T OPEN OK.

[lurch234]

There's a small program called 'checky' that claims to stop any pups when installing software .

I haven't had a chance to test it.

Its called Unchecky.

Unchecky automatically unchecks unrelated offers, both saving you mouse clicks and making it less likely to miss a checkbox of an unwanted offer.

Installers often try to sneak additional programs as a natural part of the installation. Unchecky warns you when you try to accept a potentially unwanted offer, which makes it less likely to be accepted accidentally.

I havent tried it. There's a video that shows it in action on the homepage.

Unchecky

[dcs18]

After being burnt one too many times, I have switched to portable software. I also extract setup programs to a folder so I can have a closer look inside.

Yeah - I am big fan of portables myself and use most of Fuken's releases.

ps:--

Just an heads up for everybody - there is just this one release from Fuken which almost bit me . . . . . . . . . Speccy Portable (bundled with crap - try to avoid it.) :(

[steven36]

Yes, Every Freeware Download Site is Serving Crapware (Here’s the Proof)

http://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/

Spread the Word: Ninite is the Only Safe Place to Get Windows Freeware

http://www.howtogeek.com/201354/ninite-is-the-only-safe-place-to-get-windows-freeware/

[fuzzler]

I think that's how they just get profit out of giving away freebies. You just need to uncheck those at install and you're good to go.

[SURbit]

I quit Download.com long ago, was once a fan too. I just don't get some site wanting to destroy their

fan base and following with these tactics. I go there sometimes for news on stuff - again not that often.

 

Emsisoft Anti-Malware is good for PUP's and  EULAlyzer v2.2 for Making EULAs Easy Discover if the

software you're about to install displays pop-up ads, transmits personally

identifiable information, uses unique identifiers to track you.

 

I agree with those that said good things about Softpedia - it at least it tries to show some class

and give some form of comfort in reassurance to the downloader.

 

 

[mona]

16 hours ago, SURbit said:

I quit Download.com long ago, was once a fan too. I just don't get some site wanting to destroy their

fan base and following with these tactics. I go there sometimes for news on stuff - again not that often.

 

Emsisoft Anti-Malware is good for PUP's and  EULAlyzer v2.2 for Making EULAs Easy Discover if the

software you're about to install displays pop-up ads, transmits personally

identifiable information, uses unique identifiers to track you.

 

Thank you for mentioning EULAyzer.

 

It's pretty interesting little program. You can discover if the software you're about to install displays pop-up ads, transmits personally identifiable information, uses unique identifiers to track you, or much much more. EULAlyzer can analyze license agreements in seconds, and provide a detailed listing of potentially interesting words and phrases.

The Benefits
Discover potentially hidden behavior about the software you're going to install
Pick up on things you missed when reading license agreements
Keep a saved database of the license agreements & documents you view
Instant results - super-fast analysis in just a second

And with additional features like the EULA Research Center, which optionally allows users to anonymously submit license agreements they scan to help us to further improve the program, everyone can be a part of the effort to make something that used to be so tedious, so easy.

 

Direct download link   <-----

[ EULAlyzer 2.2 Installer | Size: 1,693 KB | MD5: 73C58FD7F3C0A624F7E40D77D8498450 ]

 

[hawk007]

Actually, this is not specific to Download.com, also true for all other software portals offer DL of those Chinese  Media Converter, Video/Audio Downloaders, System Optimizers, Registry Cleaners, Ram Optimizers (savers), PC Problem solvers, Software Uninstallers, Driver Updaters, Malware Fighters, File lockers, File Encrypters etc. etc. and so on. And, this don't make things different, whether downloaded from CNEt or Softpedia or from other sites.

[WALLONN7]

On 25/02/2015 at 6:14 AM, dcs18 said:

Quite true - have been restricting the download.com site.

 

Me, for now on...