Page 1 of 2 12 LastLast
Results 1 to 15 of 17
  1. #1
    Ken Kashmarek
    Guest

    Question Win10 Technical Preview Attempted Crapware Install

    I have dowloaded and installed two packages to my Win10 TechPreview partition: Firefox 35 and Windows Essentials (formerly Window Live Install). These produced the following during the install process:

    Adware Web Companion

    Win10AdwareWebCompanion.jpg

    Web Guard

    Win10WebGuard.jpg

    GeniusBox

    Win10GeniusBox.jpg

    Pro PC Cleaner

    Win10ProPCCleaner.jpg

    When I cancelled the install, this driver install dialog came up

    Win10DriverInstall.jpg

    These installs were pulled from the web.

    I had three installs without any such attempts at crapware: Microsoft Office, NoteTab Light, and Auslogics Disk Defrag (all came from existing files on my system).

    Does anybody recognize where these crapware dialogs came from and how they became associated with these installs recently downloaded from the web.

    I have Firefox and Windows Essentials on other systems and did have run into these issues.

    Thanks.

  2. #2
    Super Moderator Rick Corbett's Avatar
    Join Date
    Dec 2009
    Location
    South Glos., UK
    Posts
    2,143
    Thanks
    101
    Thanked 579 Times in 464 Posts
    Where did you download them from?

    https://www.mozilla.org/en-US/firefox/desktop/

    http://windows.microsoft.com/en-gb/w...ive/essentials

    If you downloaded them from anywhere else then it sounds like they have been repackaged with PUP wrappers.

  3. The Following User Says Thank You to Rick Corbett For This Useful Post:


  4. #3
    Ken Kashmarek
    Guest
    Thanks for your reply. Indeed, I got snookered on the download link. I failed to check the URL and the keyword 'alldownloads' appears for both. Further, the signer was Digest Algorithm, which in a subsequent search, identified the 'alldownloads' site.

    When I did my quick search, I picked the top item on the list as the URL:

    mozillafirefox.alldownloads.net/‎

    did not come from Mozilla. One has to wonder how these miscreants manage to get their stuff at the top of the hit list (oh, wait, they pay Google for that)?

  5. #4
    3 Star Lounger bassfisher6522's Avatar
    Join Date
    Jul 2013
    Location
    NC
    Posts
    373
    Thanks
    53
    Thanked 40 Times in 39 Posts
    Yep....absolutely correct. It's all about that money!

  6. #5
    WS Lounge VIP Browni's Avatar
    Join Date
    Dec 2009
    Location
    Rochdale, UK
    Posts
    1,651
    Thanks
    38
    Thanked 161 Times in 139 Posts
    Maybe worth while installing Unchecky on your system?

    I've not used it myself yet but I have seen it recommended a few times here.

  7. #6
    Super Moderator Rick Corbett's Avatar
    Join Date
    Dec 2009
    Location
    South Glos., UK
    Posts
    2,143
    Thanks
    101
    Thanked 579 Times in 464 Posts
    Sorry but... the more times Unchecky is downloaded/installed, the more likely it is that PUP wrappers will just change their default behaviour to "uncheck to install our crapware" (or include 2 mutually exclusive checkboxes on different installer dialogs so you get the crapware anyway).

    Nothing beats actually reading and understanding each installer dialog... just my opinion.
    Last edited by Rick Corbett; 2015-02-16 at 22:15.

  8. #7
    WS Lounge VIP Browni's Avatar
    Join Date
    Dec 2009
    Location
    Rochdale, UK
    Posts
    1,651
    Thanks
    38
    Thanked 161 Times in 139 Posts
    Good point Nick.

    But how long would it take for supposedly legit sites such as CNET to change their systems?

    Totally agree with reading all dialogue pages though!

  9. #8
    Super Moderator Rick Corbett's Avatar
    Join Date
    Dec 2009
    Location
    South Glos., UK
    Posts
    2,143
    Thanks
    101
    Thanked 579 Times in 464 Posts
    Quote Originally Posted by Browni
    Good point Nick.

    But how long would it take for supposedly legit sites such as CNET to change their systems?
    Sorry but, no idea, Frowni.

  10. #9
    5 Star Lounger Lugh's Avatar
    Join Date
    Jun 2010
    Location
    Indy
    Posts
    620
    Thanks
    166
    Thanked 77 Times in 68 Posts
    I agree with Drowni, for agreeing with Mick.

    I use Unchecky. What it does is reduce the chance you'll miss one thru human error rather than inattention. You certainly still got to watch the install dialogs carefully, anything else is askin' for a PUPpin'.

  11. #10
    Silver Lounger
    Join Date
    Apr 2010
    Location
    Montréal
    Posts
    1,795
    Thanks
    33
    Thanked 52 Times in 51 Posts
    Rick, my opinion too. I will always read the whole URL before clicking on it. Always is the key here. If eg: I look at a Toshiba app and the URL does not end with Toshiba, I keep looking. I got bitten a few times but as soon as it was noticed, I did a Restore, this does your own Unchecky. Jean.

  12. #11
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts

    Exclamation

    Ken & ____,

    Often when doing a search, as a general rule of thumb, one can ignore the 1st or 1st couple of links listed; they are often 'ads' or some (other) sort of BS. The 'real' stuff or 'good' stuff often only starts being listed a wee bit down the page of results. Happens a lot w/ IT, tech stuff, too.

    Cheers,
    Drew
    000I054slL4W.jpg

  13. #12
    WS Lounge VIP Browni's Avatar
    Join Date
    Dec 2009
    Location
    Rochdale, UK
    Posts
    1,651
    Thanks
    38
    Thanked 161 Times in 139 Posts
    Hmmm, Frowni & Drowni.

    It's not that hard to spell my forum name correctly

    Cheers,
    Ian

  14. #13
    Super Moderator Rick Corbett's Avatar
    Join Date
    Dec 2009
    Location
    South Glos., UK
    Posts
    2,143
    Thanks
    101
    Thanked 579 Times in 464 Posts
    Quote Originally Posted by Browni
    Hmmm, Frowni & Drowni.

    It's not that hard to spell my forum name correctly
    Ian - My apologies. I never meant to upset or confuse you with my feeble attempt at humour.

    In post #7 you called me Nick, not Rick
    In post #8 I called you Frowni, not Browni (I know... juvenile )
    In post #9, Mike Feury - picking up on this - called us Mick and Drowni (I just LOL'd at this, Like Fury)
    Last edited by Rick Corbett; 2015-02-17 at 20:38.

  15. #14
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    Ian & Rick work nicely (But, then, I'm a tad bias) Cus just partial to regular names

    Cheers,
    Drew
    000I054slL4W.jpg

  16. #15
    WS Lounge VIP Browni's Avatar
    Join Date
    Dec 2009
    Location
    Rochdale, UK
    Posts
    1,651
    Thanks
    38
    Thanked 161 Times in 139 Posts
    Quote Originally Posted by Rick Corbett View Post
    Ian - My apologies. I never meant to upset or confuse you with my feeble attempt at humour.

    In post #7 you called me Nick, not Rick
    In post #8 I called you Frowni, not Browni (I know... juvenile )
    In post #9, Mike Feury - picking up on this - called us Mick and Drowni (I just LOL'd at this, Like Fury)
    lol I see it now!
    I blame my spearchucker

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •