SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Potentially unwanted program</title>

</head>

Potentially unwanted program

</h1>

</header>

A potentially unwanted program (PUP) or potentially unwanted application (PUA) is software that a user may perceive as unwanted or unnecessary. It is used as a subjective tagging criterion by security and parental control products. Such software may use an implementation that can compromise privacy or weaken the computer's security. Companies often bundle a wanted program download with a wrapper application and may offer to install an unwanted application, and in some cases without providing a clear opt-out method. Antivirus companies define the software bundled as potentially unwanted programs<a href="#cite_note-PUP_Criteria-1">[1]</a><a href="#cite_note-2">[2]</a> which can include software that displays <a href="Adware" title="Adware">intrusive advertising</a> (adware), or tracks the user's Internet usage to sell information to advertisers (<a href="Spyware" title="Spyware">spyware</a>), injects its own advertising into web pages that a user looks at, or uses premium SMS services to rack up charges for the user.<a href="#cite_note-3">[3]</a><a href="#cite_note-PUP_Criteria-1">[1]</a> A growing number of open-source software projects have expressed dismay at third-party websites wrapping their downloads with unwanted bundles, without the project's knowledge or consent. Nearly every third-party free download site bundles their downloads with potentially unwanted software.<a href="#cite_note-emisoft1-4">[4]</a> The practice is widely considered unethical because it violates the security interests of users without their informed consent. Some unwanted software bundles install a <a href="Root_certificate" title="Root certificate">root certificate</a> on a user's device, which allows hackers to intercept private data such as banking details, without a browser giving security warnings. The <a href="United_States_Department_of_Homeland_Security" title="United States Department of Homeland Security">United States Department of Homeland Security</a> has advised removing an insecure root certificate, because they make computers vulnerable to serious <a href="Cyberattack" title="Cyberattack">cyberattacks</a>.<a href="#cite_note-reutersdhs-5">[5]</a> Software developers and security experts recommend that people always download the latest version from the official project website, or a trusted package manager or app store.

<div class="mw-heading mw-heading2"><h2 id="Origins">Origins</h2></div>

Historically, the first big companies working with potentially unwanted programs for creating revenue came up in the US in the mid-2000s, such as <a href="Zango_(company)" title="Zango (company)">Zango</a>. These activities declined after the companies were investigated, and in some cases indicted, by authorities for invasive and harmful installs.<a href="#cite_note-6">[6]</a>

<div class="mw-heading mw-heading3"><h3 id="Download_Valley">Download Valley</h3></div>

A major industry, dedicated to creating revenue by foisting potentially unwanted programs, has grown among the Israeli software industry and is frequently referred to as <a href="Download_Valley" title="Download Valley">Download Valley</a>. These companies are responsible for a large part of the download and install tools,<a href="#cite_note-7">[7]</a> which place unwanted, additional software on users' systems.<a href="#cite_note-8">[8]</a><a href="#cite_note-9">[9]</a><a href="#cite_note-10">[10]</a>

<div class="mw-heading mw-heading2"><h2 id="Unwanted_programs">Unwanted programs</h2></div>

Unwanted programs have increased in recent years, and one study in 2014 classified unwanted programs as comprising 24.77% of total <a href="Malware" title="Malware">malware</a> infections.<a href="#cite_note-11">[11]</a> This malware includes adware according to <a href="Google" title="Google">Google</a>.<a href="#cite_note-12">[12]</a><a href="#cite_note-13">[13]</a>

Many programs include unwanted browser add-ons that track which websites a user goes to in order to sell this information to advertisers, or add advertising into web pages.<a href="#cite_note-malwarebytes-14">[14]</a> Five percent of computer browser visits to Google-owned websites are altered by computer programs that inject their own ads into pages.<a href="#cite_note-15">[15]</a><a href="#cite_note-16">[16]</a><a href="#cite_note-17">[17]</a> Researchers have identified 50,870 Google Chrome extensions and 34,407 programs that inject ads. Thirty-eight percent of extensions and 17 percent of programs were catalogued as <a href="Malware" title="Malware">malicious software</a>, the rest being potentially unwanted <a href="Adware" title="Adware">adware</a>-type applications. Some Google Chrome extension developers have sold extensions they made to third-party companies who silently push unwanted updates that incorporate previously non-existent adware into the extensions.<a href="#cite_note-ars-adwareacquire-18">[18]</a><a href="#cite_note-wsj-chromeads-19">[19]</a><a href="#cite_note-20">[20]</a>

<div class="mw-heading mw-heading3"><h3 id="Local_proxies">Local proxies</h3></div>

<a href="Spyware" title="Spyware">Spyware</a> programs install a <a href="Proxy_server" title="Proxy server">proxy server</a> on a person's computer that monitors all web traffic passing through it, tracking user interests to build up a profile and sell that profile to advertisers.

<div class="mw-heading mw-heading4"><h4 id="Superfish">Superfish</h4></div>

<a href="Superfish" title="Superfish">Superfish</a> is an advertising injector that creates its own <a href="Root_certificate" title="Root certificate">root certificate</a> in a computer operating system, allowing the tool to inject advertising into encrypted Google search pages and track the history of a user's search queries.

In February 2015, the <a href="United_States_Department_of_Homeland_Security" title="United States Department of Homeland Security">United States Department of Homeland Security</a> advised uninstalling Superfish and its associated <a href="Root_certificate" title="Root certificate">root certificate</a> from <a href="Lenovo" title="Lenovo">Lenovo</a> computers, because they make computers vulnerable to serious cyberattacks, including interception of passwords and sensitive data being transmitted through browsers.<a href="#cite_note-reutersdhs-5">[5]</a><a href="#cite_note-:0-21">[21]</a> <a href="Heinz_Heise" class="mw-redirect" title="Heinz Heise">Heise Security</a> revealed that the Superfish certificate is included in bundled downloads with a number of applications from companies including <a href="SAY_Media" title="SAY Media">SAY Media</a> and <a href="Lavasoft" title="Lavasoft">Lavasoft</a>'s <a href="Ad-Aware" class="mw-redirect" title="Ad-Aware">Ad-Aware Web Companion</a>.<a href="#cite_note-22">[22]</a>

<div class="mw-heading mw-heading3"><h3 id="Browser_hijacking">Browser hijacking</h3></div>

Many companies use <a href="Browser_hijacking" title="Browser hijacking">browser hijacking</a> to modify a user's home page and search page, to force Internet hits to a particular website and make money from advertisers. Some companies steal the cookies in a user's browser, <a href="Session_hijacking" title="Session hijacking">hijacking</a> their connections to websites they are logged into, and performing actions using their account, without the user's knowledge or consent (like installing Android apps).

<div class="mw-heading mw-heading3"><h3 id="Fraudulent_dialer">Fraudulent dialer</h3></div>

Users with <a href="Dial-up_Internet_access" title="Dial-up Internet access">dial-up Internet access</a> use modems in their computer to connect to the Internet, and these have been targeted by fraudulent applications that used <a href="Software_security_vulnerability" class="mw-redirect" title="Software security vulnerability">security holes</a> in the <a href="Operating_system" title="Operating system">operating system</a> to dial premium numbers.

Many <a href="Android_(operating_system)" title="Android (operating system)">Android</a> devices are targeted by malware that use <a href="Premium_SMS" class="mw-redirect" title="Premium SMS">premium SMS</a> services to rack up charges for users.<a href="#cite_note-23">[23]</a><a href="#cite_note-24">[24]</a><a href="#cite_note-25">[25]</a>

<div class="mw-heading mw-heading3"><h3 id="Unwanted_not_by_the_user">Unwanted not by the user</h3></div>

A few classes of software are usually installed knowingly by the user and do not show any automated abusive behavior. However, the Enterprise controlling the computer or the antivirus vendor may consider the program unwanted due to the activities they allow.

<a href="Peer-to-peer_file_sharing" title="Peer-to-peer file sharing">Peer-to-peer file sharing</a> programs are sometimes labelled as PUA and deleted due to their alleged links to piracy. In March 2021, Windows Defender started removing <a href="UTorrent" class="mw-redirect" title="UTorrent">uTorrent</a> and <a href="QBittorrent" title="QBittorrent">qBittorrent</a>, causing widespread user confusion. Microsoft has since updated the PUA database to flag torrent clients on enterprise installations only.<a href="#cite_note-26">[26]</a>

<a href="Keygens" class="mw-redirect" title="Keygens">Keygens</a> not tainted by actual malware are also commonly tagged as PUA due to piracy.<a href="#cite_note-msir13-27">[27]</a>

<div class="mw-heading mw-heading2"><h2 id="Third_party_websites">Third party websites</h2></div>

In 2015, research by <a href="Emsisoft_Ltd." class="mw-redirect" title="Emsisoft Ltd.">Emsisoft</a> suggested that all free download providers bundled their downloads with potentially unwanted software, and that Download.com was the worst offender.<a href="#cite_note-emisoft1-4">[4]</a> Lowell Heddings expressed dismay that "Sadly, even on Google all the top results for most open source and freeware are just ads for really terrible sites that are bundling crapware, <a href="Adware" title="Adware">adware</a>, and <a href="Malware" title="Malware">malware</a> on top of the installer."<a href="#cite_note-howtogeek-28">[28]</a>

<div class="mw-heading mw-heading3"><h3 id="Download.com">Download.com</h3></div>

In December 2011 <a href="Gordon_Lyon" title="Gordon Lyon">Gordon Lyon</a> published his strong dislike of the way <a href="Download.com" class="mw-redirect" title="Download.com">Download.com</a> had started bundling <a href="Malware#Grayware" title="Malware">grayware</a> with their installation managers and concerns over the bundled software, causing many people to spread the post on social networks, and a few dozen media reports. The main problem is the confusion between Download.com-offered content<a href="#cite_note-29">[29]</a><a href="#cite_note-insecure-30">[30]</a> and software offered by original authors; the accusations included deception as well as copyright and trademark violation.<a href="#cite_note-insecure-30">[30]</a>

In 2014, <a href="The_Register" title="The Register">The Register</a> and <a href="US-CERT" class="mw-redirect" title="US-CERT">US-CERT</a> warned that via Download.com's "<a href="Bloatware" class="mw-redirect" title="Bloatware">foistware</a>", an "attacker may be able to download and execute arbitrary code".<a href="#cite_note-31">[31]</a>

<div class="mw-heading mw-heading3"><h3 id="Sourceforge">Sourceforge</h3></div>

Many <a href="Open-source_software" title="Open-source software">open-source software</a> developers have expressed frustration and dismay that their work is being packaged by companies that profit from their work by using <a href="Search_advertising" title="Search advertising">search advertising</a> to occupy the first result on a search page. Increasingly, these pages are offering bundled installers that include unwanted software, and confuse users by presenting the bundled software as an official download page endorsed by the open source project.

As of early 2016 this is no longer the case.<a href="#cite_note-32">[32]</a> Ownership of SourceForge transferred to SourceForge Media, LLC, a subsidiary of BIZX, LLC (BIZX).<a href="#cite_note-33">[33]</a> After the sale they removed the DevShare program, which means bundled installers are no longer available.

In November 2013, <a href="GIMP" title="GIMP">GIMP</a>, a free image manipulation program, removed its download from <a href="SourceForge" title="SourceForge">SourceForge</a>, citing misleading download buttons that can potentially confuse customers, as well as SourceForge's own <a href="Windows_Installer" title="Windows Installer">Windows installer</a>, which bundles third-party offers. In a statement, GIMP called SourceForge a once "useful and trustworthy place to develop and host FLOSS applications" that now faces "a problem with the ads they allow on their sites ..."<a href="#cite_note-Register:_Gimp_departs_SourceForge-34">[34]</a> In May 2015, the GIMP for Windows SourceForge project was transferred to the ownership of the "SourceForge Editorial Staff" account and adware downloads were re-enabled.<a href="#cite_note-ars-gimpwindowssf-35">[35]</a> The same happened to the developers of <a href="Nmap" title="Nmap">nmap</a>.<a href="#cite_note-auto-36">[36]</a><a href="#cite_note-auto1-37">[37]</a>

In May 2015 SourceForge took control of projects which had migrated to other hosting sites and replaced the project downloads with adware-laden downloads.<a href="#cite_note-38">[38]</a>

<a href="Gordon_Lyon" title="Gordon Lyon">Gordon Lyon</a> has lost control of the <a href="Nmap" title="Nmap">Nmap</a> <a href="SourceForge" title="SourceForge">SourceForge</a> page, with SourceForge taking over the project's page. Lyon stated "So far they seem to be providing just the official Nmap files (as long as

you don't click on the fake download buttons) and we haven't caught them

trojaning Nmap the way they did with GIMP. But we certainly don't trust

them one bit! Sourceforge is pulling the same scheme that CNet

Download.com tried back when they started circling the drain".<a href="#cite_note-auto-36">[36]</a><a href="#cite_note-auto1-37">[37]</a>

<div class="mw-heading mw-heading4"><h4 id="VLC_media_player">VLC media player</h4></div>

<a href="VideoLAN" title="VideoLAN">VideoLAN</a> has expressed dismay that users searching for their product see search advertising from websites that offer "bundled" downloads that include <a href="Malware#Grayware" title="Malware">unwanted programs</a>, while VideoLAN lacks resources to sue the many companies abusing their trademarks.<a href="#cite_note-howtogeek-28">[28]</a><a href="#cite_note-39">[39]</a><a href="#cite_note-40">[40]</a><a href="#cite_note-41">[41]</a><a href="#cite_note-42">[42]</a>

<ul><li><a href="Conduit_toolbar" title="Conduit toolbar">Conduit toolbar</a></li>

<li><a href="Pre-installed_software" title="Pre-installed software">Pre-installed software</a></li>

<li><a href="Shovelware" title="Shovelware">Shovelware</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist reflist-columns references-column-width" style="column-width: 30em;">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.malwarebytes.org/pup/">"PUP Criteria"</a>. Malwarebytes. Retrieved 13 February 2015.</cite>

</li>

<li id="cite_note-2"><a href="#cite_ref-2">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://arstechnica.com/security/2009/12/av-comparatives-picks-eight-antipua-winners/">"Rating the best anti-malware solutions"</a>. Arstechnica. 15 December 2009. Retrieved 28 January 2014.</cite>

</li>

<li id="cite_note-3"><a href="#cite_ref-3">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://about-threats.trendmicro.com/us/archive/grayware/GENERIC_GRAYWARE">"Threat Encyclopedia – Generic Grayware"</a>. Trend Micro. Retrieved 27 November 2012.</cite>

</li>

<li id="cite_note-emisoft1-4">^ <a href="#cite_ref-emisoft1_4-0">a</a> <a href="#cite_ref-emisoft1_4-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://blog.emsisoft.com/2015/03/11/mind-the-pup-top-download-portals-to-avoid/">"Mind the PUP: Top download portals to avoid"</a>. EMSISOFT. March 11, 2015. Retrieved May 4, 2015.</cite>

</li>

<li id="cite_note-reutersdhs-5">^ <a href="#cite_ref-reutersdhs_5-0">a</a> <a href="#cite_ref-reutersdhs_5-1">b</a> <cite class="citation news cs1"><a rel="nofollow" class="external text" href="https://www.reuters.com/article/us-lenovo-cybersecurity-dhs-idUSKBN0LO21U20150220">"U.S. government urges Lenovo customers to remove Superfish software"</a>. Reuters. February 20, 2015. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20150220205408/http://www.reuters.com/article/2015/02/20/us-lenovo-cybersecurity-dhs-idUSKBN0LO21U20150220">Archived</a> from the original on February 20, 2015. Retrieved February 20, 2015.</cite>

</li>

<li id="cite_note-6"><a href="#cite_ref-6">^</a> <a rel="nofollow" class="external text" href="http://archive.omgn.com/nexus/?p=637">CDT Files Complaints Against Major Adware Distributor (archived)</a> January 27, 2006

</li>

<li id="cite_note-7"><a href="#cite_ref-7">^</a> <a rel="nofollow" class="external text" href="http://www.calcalist.co.il/internet/articles/0,7340,L-3600064,00.html">3. IronSource, Downloads Ltd</a> Calcalist, Assaf Gilad. April 15, 2013

</li>

<li id="cite_note-8"><a href="#cite_ref-8">^</a> <cite id="CITEREFAppelberg2014" class="citation news cs1">Appelberg, Shelly (8 August 2014). <a rel="nofollow" class="external text" href="http://www.haaretz.com/israel-news/business/.premium-1.609256">"Israel's Download Valley Companies See Hard Times Ahead"</a>. Haaretz.</cite>

</li>

<li id="cite_note-9"><a href="#cite_ref-9">^</a> <cite id="CITEREFHirschauge2014" class="citation news cs1">Hirschauge, Orr (15 May 2014). <a rel="nofollow" class="external text" href="https://www.wsj.com/articles/SB10001424052702304547704579563281761548844">"Conduit Diversifies Away From 'Download Valley'"</a>. Wall Street Journal.</cite>

</li>

<li id="cite_note-10"><a href="#cite_ref-10">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.geektime.com/2015/01/18/meet-israels-low-profile-unicorn-ironsource/">"Meet Israel's low-profile unicorn: ironSource"</a>. 18 January 2015.</cite>

</li>

<li id="cite_note-11"><a href="#cite_ref-11">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://blog.emsisoft.com/2015/02/26/62-of-the-top-50-download-com-applications-bundle-toolbars-and-other-pups/">"62% of the Top 50 Download.com applications bundle toolbars and other PUPs"</a>. EMSISOFT blog. 26 Feb 2015.</cite>

</li>

<li id="cite_note-12"><a href="#cite_ref-12">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://adage.com/article/digital/google-ad-injection-affecting-millions/305321/">"Google Investigation: Ad Injection Is Infesting Millions of Devices"</a>. adage.com. 4 August 2016.</cite>

</li>

<li id="cite_note-13"><a href="#cite_ref-13">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://research.google.com/pubs/pub43346.html">"Google Research"</a>. 2015.</cite>

</li>

<li id="cite_note-malwarebytes-14"><a href="#cite_ref-malwarebytes_14-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.malwarebytes.org/pup/">"Malwarebytes Potentially Unwanted Program Criteria"</a>. <a href="Malwarebytes" title="Malwarebytes">Malwarebytes</a>.</cite>

</li>

<li id="cite_note-15"><a href="#cite_ref-15">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20150605041757/https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/43346.pdf">"Ad Injection at Scale: Assessing Deceptive Advertisement Modifications"</a> (PDF). Archived from <a rel="nofollow" class="external text" href="https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/43346.pdf">the original</a> (PDF) on 2015-06-05. Retrieved 2015-06-03.</cite>

</li>

<li id="cite_note-16"><a href="#cite_ref-16">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.pcworld.com/article/2920012/superfish-injects-ads-in-one-in-25-google-page-views.html">"Superfish injects ads into 5 percent of all Google page views"</a>. PCWorld. 2015-05-07. Retrieved 2016-07-04.</cite>

</li>

<li id="cite_note-17"><a href="#cite_ref-17">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.cio.com.au/article/574450/superfish-injects-ads-one-25-google-page-views/">"Superfish injects ads in one in 25 Google page views"</a>. CIO. 2015-05-07. Retrieved 2016-07-04.</cite>

</li>

<li id="cite_note-ars-adwareacquire-18"><a href="#cite_ref-ars-adwareacquire_18-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://arstechnica.com/security/2014/01/malware-vendors-buy-chrome-extensions-to-send-adware-filled-updates/">"Adware vendors buy Chrome Extensions to send ad- and malware-filled updates"</a>. Ars Technica. 17 January 2014. Retrieved 20 January 2014.</cite>

</li>

<li id="cite_note-wsj-chromeads-19"><a href="#cite_ref-wsj-chromeads_19-0">^</a> <cite id="CITEREFWinkler2014" class="citation news cs1">Winkler, Rolfe (19 January 2014). <a rel="nofollow" class="external text" href="https://blogs.wsj.com/digits/2014/01/19/google-removes-two-chrome-extensions-amid-ad-uproar/">"Google Removes Two Chrome Extensions Amid Ad Uproar"</a>. Wall Street Journal. Retrieved 20 January 2014.</cite>

</li>

<li id="cite_note-20"><a href="#cite_ref-20">^</a> <cite id="CITEREFBruce_Schneier2014" class="citation web cs1">Bruce Schneier (21 Jan 2014). <a rel="nofollow" class="external text" href="https://www.schneier.com/blog/archives/2014/01/adware_vendors.html">"Adware Vendors Buy and Abuse Chrome Extensions"</a>.</cite>

</li>

<li id="cite_note-:0-21"><a href="#cite_ref-:0_21-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.us-cert.gov/ncas/alerts/TA15-051A">"Alert: Lenovo "Superfish" Adware Vulnerable to HTTPS Spoofing"</a>. United States Computer Emergency Readiness Team. February 20, 2015. Retrieved February 20, 2015.</cite>

</li>

<li id="cite_note-22"><a href="#cite_ref-22">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://heise.de/-2557619">"Gefährliche Adware: Mehr als ein Dutzend Anwendungen verbreiten Superfish-Zertifikat"</a> [Dangerous Aware: More than a Dozen Applications spreading Superfish Certificate]. <a href="Heinz_Heise" class="mw-redirect" title="Heinz Heise">Heise Security</a>. February 24, 2015. Retrieved May 5, 2015.</cite>

</li>

<li id="cite_note-23"><a href="#cite_ref-23">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.scmagazine.com/android-trojan-sends-premium-sms-messages-targets-us-users-for-first-time/article/343953/">"Android trojan sends premium SMS messages, targets U.S. users for first time"</a>. SC Magazine.</cite>

</li>

<li id="cite_note-24"><a href="#cite_ref-24">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.pandasecurity.com/mediacenter/malware/new-malware-attack-through-google-play/">"New malware attack through Google Play"</a>. MediaCenter Panda Security. 13 February 2014.</cite>

</li>

<li id="cite_note-25"><a href="#cite_ref-25">^</a> <cite id="CITEREFSwati_Khandelwal2014" class="citation web cs1">Swati Khandelwal (15 February 2014). <a rel="nofollow" class="external text" href="http://thehackernews.com/2014/02/android-Malware-subscription-premium-SMS-Services.html">"300000 Android Devices infected by Premium SMS-Sending Malware"</a>. The Hacker News - Biggest Information Security Channel.</cite>

</li>

<li id="cite_note-26"><a href="#cite_ref-26">^</a> <cite id="CITEREFVan_der_Sar2021" class="citation web cs1">Van der Sar, Ernesto (March 18, 2021). <a rel="nofollow" class="external text" href="https://archive.today/20210728145339/https://torrentfreak.com/utorrent-continues-to-be-flagged-as-severe-threat-and-its-not-alone-210318/">"uTorrent Continues to be Flagged as 'Severe Threat' and It's Not alone"</a>. TorrentFreak. Archived from <a rel="nofollow" class="external text" href="https://torrentfreak.com/utorrent-continues-to-be-flagged-as-severe-threat-and-its-not-alone-210318/">the original</a> on 2021-07-28. Retrieved 1 August 2021.</cite>

</li>

<li id="cite_note-msir13-27"><a href="#cite_ref-msir13_27-0">^</a> <a rel="nofollow" class="external text" href="http://download.microsoft.com/download/C/1/F/C1F6A2B2-F45F-45F7-B788-32D2CCA48D29/Microsoft_Security_Intelligence_Report_Volume_13_English.pdf">Microsoft Security Intelligence Report Volume 13, p14</a>

</li>

<li id="cite_note-howtogeek-28">^ <a href="#cite_ref-howtogeek_28-0">a</a> <a href="#cite_ref-howtogeek_28-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/">"Yes, Every Freeware Download Site is Serving Crapware (Here's the Proof)"</a>. HowToGeek.com. 21 Jan 2015. <q>Sadly, even on Google all the top results for most open source and freeware are just ads for really terrible sites that are bundling crapware, adware, and malware on top of the installer. Most geeks will know that they shouldn't click on the ads, but obviously enough people are clicking those ads for them to be able to afford to pay the high per-click prices for Google AdWords.</q></cite>

</li>

<li id="cite_note-29"><a href="#cite_ref-29">^</a> <cite id="CITEREFBrian_Krebs2011" class="citation web cs1"><a href="Brian_Krebs" title="Brian Krebs">Brian Krebs</a> (2011-12-06). <a rel="nofollow" class="external text" href="http://krebsonsecurity.com/2011/12/download-com-bundling-toolbars-trojans/">"Download.com Bundling Toolbars, Trojans?"</a>. Krebs on security. Retrieved 2015-05-04.</cite>

</li>

<li id="cite_note-insecure-30">^ <a href="#cite_ref-insecure_30-0">a</a> <a href="#cite_ref-insecure_30-1">b</a> <cite id="CITEREFGordon_Lyon2012" class="citation web cs1"><a href="Gordon_Lyon" title="Gordon Lyon">Gordon Lyon</a> (2012-06-27). <a rel="nofollow" class="external text" href="http://insecure.org/news/download-com-fiasco.html#exec">"Download.com Caught Adding Malware to Nmap & Other Software"</a>. Retrieved 2015-05-04. <q>we suggest avoiding CNET Download.com entirely</q></cite>

</li>

<li id="cite_note-31"><a href="#cite_ref-31">^</a> <cite id="CITEREFDarren_Pauli2014" class="citation web cs1">Darren Pauli (2014-07-08). <a rel="nofollow" class="external text" href="https://www.theregister.co.uk/2014/07/08/download_wrappers_spruiked_vulnerable_avg_tool_cert_us_warns/">"Insecure AVG search tool shoved down users' throats, says US CERT"</a>. The Register. Retrieved 2015-05-04. <q>Sneaky 'foistware' downloads install things you never asked for</q></cite>

</li>

<li id="cite_note-32"><a href="#cite_ref-32">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://sourceforge.net/blog/sourceforge-acquisition-and-future-plans/">"SourceForge Acquisition and Future Plans | SourceForge Community Blog"</a>. sourceforge.net. 10 February 2016. Retrieved 2016-07-29.</cite>

</li>

<li id="cite_note-33"><a href="#cite_ref-33">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://fossforce.com/2016/01/sourceforge-and-slashdot-have-been-sold/">"SourceForge and Slashdot Have Been Sold | FOSS Force"</a>. 2016-01-29. Retrieved 2016-07-29.</cite>

</li>

<li id="cite_note-Register:_Gimp_departs_SourceForge-34"><a href="#cite_ref-Register:_Gimp_departs_SourceForge_34-0">^</a> <cite id="CITEREFSharwood2013" class="citation news cs1">Sharwood, Simon (November 8, 2013). <a rel="nofollow" class="external text" href="https://www.theregister.co.uk/2013/11/08/gimp_dumps_sourceforge_over_dodgy_ads_and_installer/">"GIMP flees SourceForge over dodgy ads and installer"</a>. The Register. Retrieved November 21, 2013.</cite>

</li>

<li id="cite_note-ars-gimpwindowssf-35"><a href="#cite_ref-ars-gimpwindowssf_35-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://arstechnica.com/information-technology/2015/06/sourceforge-locked-in-projects-of-fleeing-users-cashed-in-on-malvertising/">"SourceForge locked in projects of fleeing users, cashed in on malvertising"</a>. Ars Technica. Retrieved 2 June 2015.</cite>

</li>

<li id="cite_note-auto-36">^ <a href="#cite_ref-auto_36-0">a</a> <a href="#cite_ref-auto_36-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://seclists.org/nmap-dev/2015/q2/194">"Sourceforge Hijacks the Nmap Sourceforge Account"</a>. Seclists.org. 3 June 2015.</cite>

</li>

<li id="cite_note-auto1-37">^ <a href="#cite_ref-auto1_37-0">a</a> <a href="#cite_ref-auto1_37-1">b</a> <cite id="CITEREFSean_Gallagher2015" class="citation web cs1">Sean Gallagher (4 June 2015). <a rel="nofollow" class="external text" href="https://arstechnica.com/information-technology/2015/06/black-mirror-sourceforge-has-now-siezed-nmap-audit-tool-project/">"Black "mirror": SourceForge has now seized Nmap audit tool project"</a>. Ars Technica.</cite>

</li>

<li id="cite_note-38"><a href="#cite_ref-38">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/">"SourceForge grabs GIMP for Windows' account, wraps installer in bundle-pushing adware [Updated]"</a>. Retrieved 2015-05-30.</cite>

</li>

<li id="cite_note-39"><a href="#cite_ref-39">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://blog.l0cal.com/2011/07/07/these-companies-that-mislead-our-users/">"These companies that mislead our users"</a>. 7 Jul 2011.</cite>

</li>

<li id="cite_note-40"><a href="#cite_ref-40">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20170323152644/http://www.geek.com/news/vlc-media-player-suffering-in-face-of-crapware-and-uncaring-google-1400411/">"VLC media player suffering in face of crapware and uncaring Google"</a>. Geek.com. 7 Jul 2011. Archived from <a rel="nofollow" class="external text" href="http://www.geek.com/news/vlc-media-player-suffering-in-face-of-crapware-and-uncaring-google-1400411/">the original</a> on 23 March 2017. Retrieved 3 June 2015.</cite>

</li>

<li id="cite_note-41"><a href="#cite_ref-41">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://news.softpedia.com/news/VideoLAN-Calls-Out-for-Help-to-Protect-Users-from-VLC-Scams-211896.shtml">"VideoLAN Calls Out for Help to Protect Users from VLC Scams"</a>. 16 Jul 2011.</cite>

</li>

<li id="cite_note-42"><a href="#cite_ref-42">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://forum.videolan.org/viewtopic.php?f=14&t=86774">"Adware in new installer"</a>. The VideoLAN forums.</cite>

</li>

</ol></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Software_distribution163" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Software_distribution163" style="font-size:114%;margin:0 4em"><a href="Software_distribution" title="Software distribution">Software distribution</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Software_license" title="Software license">Licenses</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Beerware" title="Beerware">Beerware</a></li>

<li><a href="Floating_licensing" title="Floating licensing">Floating licensing</a></li>

<li><a href="Free_and_open-source_software" title="Free and open-source software">Free and open-source</a>

<li><a href="Open-source_software" title="Open-source software">Open source</a></li></ul></li>

<li><a href="Freely_redistributable_software" title="Freely redistributable software">Freely redistributable</a></li>

<li><a href="License-free_software" title="License-free software">License-free</a></li>

<li><a href="Proprietary_software" title="Proprietary software">Proprietary</a></li>

<li><a href="Public-domain_software" title="Public-domain software">Public domain</a></li>

<li><a href="Source-available_software" title="Source-available software">Source-available</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Compensation models</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Adware" title="Adware">Adware</a></li>

<li><a href="Commercial_software" title="Commercial software">Commercial software</a>

<ul><li><a href="Retail_software" title="Retail software">Retail software</a></li></ul></li>

<li><a href="Crippleware" title="Crippleware">Crippleware</a></li>

<li><a href="Crowdfunding" title="Crowdfunding">Crowdfunding</a></li>

<li><a href="Freemium" title="Freemium">Freemium</a></li>

<li><a href="Freeware" title="Freeware">Freeware</a></li>

<ul><li><a href="Careware" title="Careware">Careware</a></li>

<li><a href="Donationware" title="Donationware">Donationware</a></li></ul></li>

<li><a href="Open-core_model" title="Open-core model">Open-core model</a></li>

<li><a href="Postcardware" class="mw-redirect" title="Postcardware">Postcardware</a></li>

<li><a href="Shareware" title="Shareware">Shareware</a>

<ul><li><a href="Nagware" class="mw-redirect" title="Nagware">Nagware</a></li></ul></li>

<li><a href="Trialware" class="mw-redirect" title="Trialware">Trialware</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Delivery methods</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Digital_distribution" title="Digital distribution">Digital distribution</a></li>

<li><a href="File_sharing" title="File sharing">File sharing</a></li>

<li><a href="On-premises_software" title="On-premises software">On-premises</a></li>

<li><a href="Pre-installed_software" title="Pre-installed software">Pre-installed</a></li>

<li><a href="Product_bundling" title="Product bundling">Product bundling</a></li>

<li><a href="Retail_software" title="Retail software">Retail software</a></li>

<li><a href="Sneakernet" title="Sneakernet">Sneakernet</a></li>

<li><a href="Software_as_a_service" title="Software as a service">Software as a service</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Deceptive and/or illicit</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Unwanted_software_bundling" class="mw-redirect" title="Unwanted software bundling">Unwanted software bundling</a></li>

<li><a href="Malware" title="Malware">Malware</a>

<ul><li><a href="Infostealer" title="Infostealer">Infostealer</a></li>

<li><a href="Ransomware" title="Ransomware">Ransomware</a></li>

<li><a href="Spyware" title="Spyware">Spyware</a></li>

<li><a href="Trojan_horse_(computing)" title="Trojan horse (computing)">Trojan horse</a></li>

<li><a href="Scareware" title="Scareware">Scareware</a></li>

<li><a href="Shovelware" title="Shovelware">Shovelware</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Software_release_life_cycle" title="Software release life cycle">Software release life cycle</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Abandonware" title="Abandonware">Abandonware</a></li>

<li><a href="Long-term_support" title="Long-term support">Long-term support</a></li>

<li><a href="Software_maintenance" title="Software maintenance">Software maintenance</a></li>

<li><a href="Software_maintainer" title="Software maintainer">Software maintainer</a></li>

<li><a href="Software_publisher" title="Software publisher">Software publisher</a></li>

<li><a href="Vaporware" title="Vaporware">Vaporware</a>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Copy_protection" title="Copy protection">Copy protection</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Digital_rights_management" title="Digital rights management">Digital rights management</a></li>

<li><a href="Software_protection_dongle" title="Software protection dongle">Software protection dongle</a></li>

<li><a href="License_manager" class="mw-redirect" title="License manager">License manager</a></li>

<li><a href="Product_activation" title="Product activation">Product activation</a></li>

<li><a href="Product_key" title="Product key">Product key</a></li>

<li><a href="Software_copyright" title="Software copyright">Software copyright</a></li>

<li><a href="Software_license_server" title="Software license server">Software license server</a></li>

<li><a href="Software_patent" title="Software patent">Software patent</a></li>

<li><a href="Torrent_poisoning" title="Torrent poisoning">Torrent poisoning</a></li></ul>

</div></td></tr></tbody></table></div>

<div class="navbox-styles"></div><div role="navigation" class="navbox" aria-labelledby="Malware_topics109" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Malware_topics109" style="font-size:114%;margin:0 4em"><a href="Malware" title="Malware">Malware</a> topics</div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Infectious malware</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Comparison_of_computer_viruses" title="Comparison of computer viruses">Comparison of computer viruses</a></li>

<li><a href="Computer_virus" title="Computer virus">Computer virus</a></li>

<li><a href="Computer_worm" title="Computer worm">Computer worm</a></li>

<li><a href="List_of_computer_worms" title="List of computer worms">List of computer worms</a></li>

<li><a href="Timeline_of_computer_viruses_and_worms" title="Timeline of computer viruses and worms">Timeline of computer viruses and worms</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Concealment</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Backdoor_(computing)" title="Backdoor (computing)">Backdoor</a></li>

<li><a href="Clickjacking" title="Clickjacking">Clickjacking</a></li>

<li><a href="Man-in-the-browser" title="Man-in-the-browser">Man-in-the-browser</a></li>

<li><a href="Man-in-the-middle_attack" title="Man-in-the-middle attack">Man-in-the-middle</a></li>

<li><a href="Rootkit" title="Rootkit">Rootkit</a></li>

<li><a href="Trojan_horse_(computing)" title="Trojan horse (computing)">Trojan horse</a></li>

<li><a href="Zombie_(computing)" title="Zombie (computing)">Zombie computer</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Malware for profit</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Adware" title="Adware">Adware</a></li>

<li><a href="Botnet" title="Botnet">Botnet</a></li>

<li><a href="Crimeware" title="Crimeware">Crimeware</a></li>

<li><a href="Fleeceware" title="Fleeceware">Fleeceware</a></li>

<li><a href="Form_grabbing" title="Form grabbing">Form grabbing</a></li>

<li><a href="Dialer#Fraudulent_dialer" title="Dialer">Fraudulent dialer</a></li>

<li><a href="Infostealer" title="Infostealer">Infostealer</a></li>

<li><a href="Keystroke_logging" title="Keystroke logging">Keystroke logging</a></li>

<li><a href="Internet_bot#Malicious_purposes" title="Internet bot">Malbot</a></li>

<li><a href="Privacy-invasive_software" class="mw-redirect" title="Privacy-invasive software">Privacy-invasive software</a></li>

<li><a href="Ransomware" title="Ransomware">Ransomware</a></li>

<li><a href="Rogue_security_software" title="Rogue security software">Rogue security software</a></li>

<li><a href="Scareware" title="Scareware">Scareware</a></li>

<li><a href="Spyware" title="Spyware">Spyware</a></li>

<li><a href="Web_threat" title="Web threat">Web threats</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">By operating system</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li>Android malware</li>

<li>Classic Mac OS viruses</li>

<li>iOS malware</li>

<li><a href="Linux_malware" title="Linux malware">Linux malware</a></li>

<li>MacOS malware</li>

<li><a href="Macro_virus" title="Macro virus">Macro virus</a></li>

<li><a href="Mobile_malware" title="Mobile malware">Mobile malware</a></li>

<li><a href="Palm_OS_viruses" title="Palm OS viruses">Palm OS viruses</a></li>

<li><a href="HyperCard_viruses" class="mw-redirect" title="HyperCard viruses">HyperCard viruses</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Protection</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Anti-keylogger" title="Anti-keylogger">Anti-keylogger</a></li>

<li><a href="Antivirus_software" title="Antivirus software">Antivirus software</a></li>

<li><a href="Browser_security" title="Browser security">Browser security</a></li>

<li><a href="Data_loss_prevention_software" title="Data loss prevention software">Data loss prevention software</a></li>

<li><a href="Defensive_computing" title="Defensive computing">Defensive computing</a></li>

<li><a href="Firewall_(computing)" title="Firewall (computing)">Firewall</a></li>

<li><a href="Internet_security" title="Internet security">Internet security</a></li>

<li><a href="Intrusion_detection_system" title="Intrusion detection system">Intrusion detection system</a></li>

<li><a href="Mobile_security" title="Mobile security">Mobile security</a></li>

<li><a href="Network_security" title="Network security">Network security</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Countermeasures</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Computer_and_network_surveillance" title="Computer and network surveillance">Computer and network surveillance</a></li>

<li><a href="Honeypot_(computing)" title="Honeypot (computing)">Honeypot</a></li>

<li><a href="Operation%3A_Bot_Roast" title="Operation: Bot Roast">Operation: Bot Roast</a></li></ul>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-08-06" href="https://en.wikipedia.org/wiki/?title=Potentially_unwanted_program&oldid=1304523325">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>