Jump to content



Photo

[Guide] Avoiding Adware in Installers


  • Please log in to reply
17 replies to this topic

#1 +Xinok

Xinok

    Resident Reresident

  • 3,498 posts
  • Joined: 28-May 04
  • Location: Shikaka
  • OS: Windows 7 x64
  • Phone: Galaxy S3

Posted 05 June 2011 - 03:53

Avoiding Adware in Installers



About This Guide
This guide provides several real examples of installers which contain adware. The intent is to show you the tricks that they use to attempt to trick you into installing the adware in hopes that you can learn to avoid it.

Before you brush off this guide as common sense, it may be worth a look. The adware developers are getting very sneaky and I've almost been caught a few times myself. Recently, Foxit Reader modified their installer so that the adware was no longer optional but mandatory. This is a continuing trend and adware is only going to get worse, so it's important to learn how to avoid installing it... unless you like toolbars which track your browsing history.

Note: All of the installers have [#] in their titlebar because they were running in Sandboxie.


Accept or Decline? Agree or Disagree?
This is a common trick that they'll use. To avoid installing the adware, you must click Decline / Disagree rather than Accept / Agree.





# Setup - 3D Morris Prof #.png


This may catch some users because the text looks like the license agreement.
# Setup - Beneton Movie GIF #.png


 


I agree to...
In these examples, you must uncheck the checkbox in order to avoid installing the adware.

I agree to the agreement :huh:
# PicPick Setup #.png


# Trillian Installer #.png


 


Custom Installation
For some installers, you must choose Custom installation if you want to opt out of the adware.

# SMRecorder 1.2.0 Setup Search #.png


 


Post-Installation
This installer attempts to catch you after you've installed the program.

# Setup - Beneton Movie GIF #_1.png


 


Distraction
Some installers may catch you by tricking you into clicking the wrong option. I'm not sure if these were designed to deceive, but I nearly clicked the wrong options for both installers, so I added them to the guide.

Here, my first reaction was to click Custom installation and uncheck the boxes below it.
It seems obvious, but the Custom installation is the first thing to grab your attention.
# GotCLIP Downloader Setup #.png


Once again, the Custom installation was the first thing to grab my attention.
# Setup - JDownloader 0.9 #.png


 


Mandatory Installation
Recently, Foxit Reader didn't give you an option; You we're forced to install the adware if you wanted to install Foxit Reader. You may think that unchecking the two boxes was enough, but you have to read to understand there's no opting out.

Foxit Reader later updated their installer following several complaints, but this still stands as a solid example.

# Setup - Foxit Reader 5.0 #.png


 


Websites Packaging Adware in Downloads
This is a new and worrying trend. Many websites, including the popular CNET, have started packaging several downloads in a custom web installer which includes adware, often without the permission of the original developers. The examples below are pretty obvious and easy to avoid, but it's a trend you should be aware of none the less.

CNET's download.com
CNET.png

Softonic.com
Softonic.png


Tucows

Tucows.png


 

Installers with Spyware
It was recently reported that DAEMON Tools, a popular CD-image mounting software, installed a spyware feature called MountSpace which reported every image you mounted to an online server. Even if you declined the feature, it was still active without your permission.
http://www.neowin.ne...ted-last-summer

Edited by Xinok, 16 February 2012 - 06:07.



#2 Riggers

Riggers

    Neowinian

  • 1,083 posts
  • Joined: 03-March 08

Posted 05 June 2011 - 12:33

Nice work Xinok, i recently installed Foxit 5 and like you mentioned unchecked the Ask toolbar boxes (as was the case in previous versions) then during install i was alerted to the AskToolbar checker making an outgoing connection. I knew something wasn`t right but carried on, i was like proper :angry: when the toolbar showed up in the browser.
Wasn`t a problem as i just re-imaged from a recent back up, but boy have i lost faith in Foxit. This is not something you should do to potential customers, fair enough if the option to not install is there (these companies pay big money to be included in installers, thus help with development hopefully!) but to downright trick people is out of order.
Needless to say i`m am trying out other pdf options...

#3 Copernic

Copernic

    Neowinian Senior

  • 3,782 posts
  • Joined: 03-September 04

Posted 06 June 2011 - 23:46

Great guide, Xinok!

#4 CelticWhisper

CelticWhisper

    We've met before, haven't we?

  • 1,946 posts
  • Joined: 10-January 07
  • Location: Your house. As a matter of fact, I'm there right now.

Posted 07 June 2011 - 13:06

Thanks for this. I script a lot of my installers in my custom XP source and one test run wound up with "Dealio Toolbar" installed. I was seeing red, half at myself for not having caught it and half for the marketroid bottom-feeders who buried that installer in there to begin with. I think it installed alongside a disc-burning tool but I'm not sure yet.

What ****es me off is that unattended installs offer no way that I know of to cut the worthlessware (hear me advertisers? You and everything you do are all worthless. Yes, you. And yes, everything, really. Go die.) out and just leave the core program itself. Makes it a lot harder to do up some effortless automated installs.

#5 Dan~

Dan~

    Neowinian Senior

  • 2,669 posts
  • Joined: 21-May 03

Posted 10 June 2011 - 07:33

This is why for unknown software which I wish to install I put it on my VM machine. Looking at those examples above look very sneekly, the sly buggers.

#6 alexalex

alexalex

    Neowinian Senior

  • 2,377 posts
  • Joined: 25-February 11

Posted 26 June 2011 - 09:44

Thanks for this. Ed Bott calls these applications Foistware ; http://www.neowin.ne...-hall-of-shame/

#7 MidnightDevil

MidnightDevil

    Resident Evil

  • 2,182 posts
  • Joined: 30-June 04
  • Location: Hell!

Posted 07 July 2011 - 12:31

Nice one, some of them are very tricky and get a lot of experienced users distracted. Thank's.

#8 OP +Xinok

Xinok

    Resident Reresident

  • 3,498 posts
  • Joined: 28-May 04
  • Location: Shikaka
  • OS: Windows 7 x64
  • Phone: Galaxy S3

Posted 12 November 2011 - 22:34

So I recently came across an installer that was so bad, I felt the need to post it. I was looking for a desktop application for Facebook chat, so I wouldn't have to keep my web browser open. What resulted is the horror you see below.

Immediately after launching the installer, I'm greeted with the first box I must uncheck. Not only that, but if you read the text, it installs a mandatory background process which calls home.
First.png

Next, I had to choose custom installation and uncheck three boxes.
Second.png

That isn't all! Next, I'm presented with this screen in which you must check Decline, not accept.
Third.png

Now that I've avoided all that, I continue to install and launch the program. As if all the crap in the installer wasn't enough, they also implement an ad into the interface.
Fourth.png

Okay... so I'll just login and see if this program was worth the trouble...
Fifth.png

At this point, I stop, clear the sandbox, and check Facebook to make sure it hadn't made any changes to my account.

#9 1941

1941

    Banned

  • 18,175 posts
  • Joined: 17-July 06

Posted 12 November 2011 - 22:43

Great Tut!

#10 Jesse11

Jesse11

    Neowinian

  • 12 posts
  • Joined: 29-November 11

Posted 29 November 2011 - 12:05

Great guide, Xinok! thank you very much.

#11 suprNOVA

suprNOVA

    devSquad

  • 865 posts
  • Joined: 05-July 10
  • Location: Vancouver, Canada
  • OS: Windows 7/8
  • Phone: Galaxy Note III

Posted 09 December 2011 - 18:20

Good guide to put up for those who didn't know this. Figured this out a couple years ago but suprised that people didn't know about this still!

#12 Rudy

Rudy

    Neowinian Senior

  • 22,434 posts
  • Joined: 30-September 01
  • Location: Ottawa, On

Posted 09 December 2011 - 18:28

Wow....the state of adware in Windows is way worst then when I left it

#13 suprNOVA

suprNOVA

    devSquad

  • 865 posts
  • Joined: 05-July 10
  • Location: Vancouver, Canada
  • OS: Windows 7/8
  • Phone: Galaxy Note III

Posted 13 December 2011 - 19:58

Yeah, every single program I install nowadays has some sort of Adware in it. :/

#14 OP +Xinok

Xinok

    Resident Reresident

  • 3,498 posts
  • Joined: 28-May 04
  • Location: Shikaka
  • OS: Windows 7 x64
  • Phone: Galaxy S3

Posted 13 December 2011 - 20:59

Also avoid downloading anything from cnet :p

Good point, I added two examples to the guide. :p

#15 +warwagon

warwagon

    Only you can prevent forest fires.

  • 26,762 posts
  • Joined: 30-November 01
  • Location: Iowa

Posted 09 September 2013 - 14:11

The worst one (I don't have a picture of it) for the AVG toolbar where the checkmark is INSIDE the paragraph!