One of my assistants recently alerted me to a new (new to me, anyway) source of PUPs (Potentially Unwanted Programs).
In fact, it was new enough that I didnât pay close enough attention while investigating it, and almost ended up installing software I didnât want or need.
Letâs use this as an opportunity to review what you need to look for when downloading software or software updates.
Become a Patron of Ask Leo! and go ad-free!
PUPs as a business model
PUPs represent a way for software vendors to make money when you download and install their programs. In fact, for free software, it can be a significant source of revenue â itâs part of what allows free software to be free.
Vendors often get paid for each download, or each install, of whatever extra software they might get you to install along with theirs.
PUPs work because theyâre sneaky. The vendors wonât admit to this â theyâll say the options are there for you to make whatever choices you want. In a sense, theyâre right, but there are several issues that make them appear less than completely above-board.
- The software being offered is typically unrelated to the software youâre downloading and installing.
- The option to install the unrelated software is explicitly hidden in some way. Perhaps itâs an option that requires scrolling down (most people donât), or itâs hidden in a set of âAdvancedâ or âCustomâ options that most people never see.
- The option to install the unrelated software is passively hidden by making the other options that people are looking for â like an âInstallâ button â bigger and more eye-catching. In their quest to just get things done, people gloss over whatâs on the screen and just click the big button to move on.
- The option to install the unrelated software defaults to âyesâ. Unless the user reads carefully and unchecks a box, the software is installed.
As a result, itâs very easy to install software you donât need and donât want.
Thereâs nothing âpotentiallyâ unwanted about it.
The latest: choices before you even download
Downloading an update to Adobe Flash from the Adobe website, I was presented with this screen:
In my rush to install the update, I just clicked the âInstall nowâ button. I was surprised when two additional installations were queued in addition to the Flash update.
So, I looked closer.
In the center of the screen were two very non-descript checkboxes in a section labeled âOptional offersâ. They were checked by default.
I had âacceptedâ two PUPs before even starting the download. Iâd not seen that before.
Traditional PUPs happen on install
More commonly, PUPs are installed after the download, when you run the downloaded installation or setup program.
The setup program typically encourages you to select the âDefaultâ or âMost commonâ options to make installation easier. Unfortunately, it makes the installation process easier for them. Buried in the options you bypassed are checkboxes for similar âoptional offersâ that are almost always enabled by default.
The default is to install PUPs whether you want them or not.
Vigilance is required
My experience was particularly frustrating because:
- It was a mainstream component: Adobe Flash.
- I was downloading it directly from the vendorâs site, not via some third party download site.
- It was an update, not a new install.
In the past, those factors could be relied on to be a sign of safety; a sign that perhaps we didnât need to be quite as vigilant.
Clearly, thatâs not the case. Vigilance is always required.
- Only download directly from the original vendor.
- Check for options before the download.
- Check for options during the install.
- Never choose Default; always choose Custom or Advanced or whatever else it might be called.
To be clear, this is certainly not limited to Adobe or Adobe Flash. Many software downloads suffer from this type of tack-on revenue opportunity.
Vendors do this because it works. Vigilance, and making explicit choices of our own, is how we avoid installing programs we never really wanted in the first place.
Do this
Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.
I'll see you there!
Podcast audio
More for Patrons of Ask Leo!
Silver-level patrons have access to this related video from The Ask Leo! Video Library.
  A New Source of Potentially Unwanted Programs
This has always been an issue with Adobe. Itâs just natural for me to uncheck anything there when I update Flash, Reader, or anything else from Adobe.
Iâm very surprised that you havenât noticed this before. Adobe has been using the exact same tactics for a couple of years, as has Oracle/Java. Maybe you should check for PUPs :P
I was going to say the exact same thing. 9 times out of 10 there are always offers in plain sight (occassionally I get no offers). I actually donât mind the way Adobe does it because they put the offers front and centre. Itâs easy to see them and uncheck them, rather than the vendors who hide them.
Iâve always noted after the download, never before. But then ⊠I donât download Adobe that often. :-) (And, no, no PUPs here â even though I came close.)
Do you or Leo have a reccomended program to check for PUPâs please? I have (Stupid Me) always trusted Adobe. More wary with pretty well every other free software but have not worried about updates either. Thanks, Chris
The benign ones like the ones installed by Adobe can be removed via the Programs and Features in the Control Panel. This article deals with the sneaker kind of Unwanted Programs and has some recommended software.
JAVA Updates â You can disable the PUPs Oracle attempts to suck you into via the settings for JAVA. Open the JAVA Control Panel and select the âAdvancedâ tab. Scroll down to the bottom section, âMiscellaneousâ where you can check the box for âSuppress sponsor offers when installing or updating Java.â That will stop the PUPs â but after youâve installed a new version of Java, you would be prudent to make sure this box is still checked. Sometimes it gets unchecked (gee, I wonder how that happens).
Daniel â Good info on the JAVA updates. We have 12 pcâs which require frequent updates to run our business application software and many times I have had to remove unwanted toolbars from someone who went too fast on the updating. Iâve just instructed everyone to make the change on their control panel . Thanks!
Good advice about Java, but unless you are using an app that needs Java, itâs even safer to uninstall Java completely. Very few websites require it anymore.
Thanks for the hint.
This isnât new for Adobe but usually it was Google Chrome or the toolbar that was bundled. The other thing you should look out for is when they give you a choice and then, letâs call it in a sub-menu, a couple more choices. The first one is usually for the software the second one might to change your Home page, for example. You uncheck the first one and the one or two bottom options remain checked and grayed out now uncheckable. The solution Check the first one again, uncheck the bottom options first, then uncheck the main option or first one. Or start unchecking from the bottom up.
Terry, thanks for that â a really useful addition to Leoâs article. I knew about Adobeâs tricks but hadnât come across the one you mention â definitely one to look out for, many thanks!
HA
Your welcome but the sub-menu thing was for PUPs in general. I didnât mean to apply that Adobe was doing it.
Leo â try unchecky.com it takes those sneaky checks out so you donât forget .works for me
jimd
I totally agree with Jimd. Was recommended it by my local âguruâ and it hasnât failed yet â â â but whatâs more itâs even picked up PUPs so well hidden that even âcustom installâ didnât show the options.
IMHO this program ought to be installed as default on all new PCsâŠâŠâŠ..
If you set it to auto update you never see the optional offers. That is why I set mine to never check for updates. I like to see what is going on before and during downloads. I canât say auto update will install the optional offers, Itâs a risk Iâm not willing to taking.
Another thing with downloading from Adobe is that that particular portion to uncheck the PUPs is the last to load, so if you donât wait that second or two then you could end up with these PUPS. As commentator, Terry Hollett noted Adobe has also had Googles Chrome there, just wondering if this accounts the large lead Chrome has as opposed to other Browsers?
I installed unchecky.com It removes most of the check marks on install software. It has been working well for several months.
And I totally agree with HARVEY MELTZER. I Was recommended it by my local âguruâ and it hasnât failed yet â â â but whatâs more itâs even picked up PUPs so well hidden that even âcustom installâ didnât show the options.
IMHO this program ought to be installed as default on all new PCsâŠâŠâŠ..
Thatâs different, I usually see one for Chrome and Google Toolbar. Toolbars are generally useless and so is Chrome to me so they get the boot.
Not only that, the stated download size is bloated considerably by that extra stuff and you already spend 2 or three minutes installing Flash as it is when you could be doing something else. I never let Flash install automatically as well, it always has to alert me to a new version.
THATâS one more way to avoid PUPs, never let them automatically update.
Adobe goes one sneaky step further: The send out updates that are not really updates â they are nothing more than a vehicle for installation of McAfee Security Scan. If you let them, they will send you an update every week.
This sort of stuff just disgusts me, that companies like Adobe and Oracle that used to be true leaders and innovators now behave like shysters and hoodlums. I hate the whole âopt outâ requirement which applies to everything anymore, instead of âopt inâ. If I really want something I will request it, should not be the other way around. What a concept huh?
Thank goodness Java has become pretty irrelevant and un-needed, I look forward to the day when the same is true for Flash Player.
I donât understand users who try to justify this kind of behavior by companies. If enough pressure were brought to bear on companies who participate in this sort of thing they would have to change the way they operate. But instead, it just keeps getting worse.
Iâve been checking, double-checking and trriple-checking any free software installers for PUPs ever since the time I inadvertently installed that pesky McAfee Security Scan with Adobe Flash Player. (Like many other contributors to this thread, I had failed to âscroll downâ and check for âchecksâ against unrequested installers).
Now, I already had an AV application installed, and the McAfee Security Scan caused all kinds of problems and conflicts with it. Not only that, it was impossible to uninstall it. When I tried to uninstall, I would get endless uninstall failures and error messages, and, in the end, (not having a recent enough image backup [yes, Leo, I know, I know],) I had to do a complete reformat and fresh install of Windows.
Wherever possible, I now use Revo Uninstaller to perform all installations and uninstallations⊠Oh⊠and yes, I now do more frequent image backups, too!
I recently upgraded Flash in Firefox to 23.0.0.207 and once again noticed these two checked items listed in your article. Iâve seen this before and have gotten use to unchecking them. Many recommendations for Unchecky.com. Thanks Leo for your helpful and instructive article. CNET⊠aka Download.com claims to have cleaned up their site and act by cutting out PUPâs previously bundled with apps that people download. Google store apps are said to be contaminated or so they say. Ditto the same for Microsoft Store. Caveat emptor everyoneâŠ..let the buyer beware!
As a matter of interest, has anyone found an effective substitute for Adobe Flash Player?
I have looked in the past without success.
The effective solutions would have to be implemented by the websites which include Flash content. If a site has Flash content, that content would have to be viewed using Flash. An effective alternative is to uninstall Flash and forgo any content which is Flash based. It might turn out you wonât miss it so much. Steve Jobs banned Flash from running on iPhones and iPads, so lots of sites have switched to alternatives.
There is no substitute. Thereâs no equivalent that will read Flash files. The only alternative is to visit only sites that donât actually use Flash to begin with.
Hi Leo,
I have a suggestion for a new term: âManure Spreaderâ. The term âCrapware â has been used for several years. (Anyone who is not familiar with the term crapware should do an internet search for the term). For example, Techrepublic dot com states: â unwanted commercial software that is installed without the userâs full knowledge, consent, and understanding, and that primarily serves the interests of commercial parties associated with the âcrapware,â not the end users on whose systems those unwanted applications are installed.â
My definition of a âManure Spreader is, âsoftware which you do regularly use and which updates often. You always need to do a custom install of the update so you can uncheck the crapware download.â As your discussion has shown, a good example of a manure spreader is Adobe Flash which always will install McAfee if you donât uncheck the McAfee download box.
Actually, crapware is different from foistware or PUPs. Crapware are programs which come preinstalled on your computer where foistware or PUPs come along with other programs you install. Crapware is a kind of Unwanted Program, so the terms are sometimes used interchangeably, but incorrectly. And the end results are similar, programs you donât want on your computer.
Both your timely article and my own recent experience confirm increasing vigilance is needed to avoid PUPs. Even the Windows 10 install was another example where it paid to decline the âRecommendedâ installation and, instead, check the âCustomâ option. I did, and UNchecked everything because it wasnât needed. Iâve also removed unwanted apps included in Microsoft âupdatesâ since then.
BTW, the same cautions apply to smartphones. To help avoid PUPs/bloat, take a look at the relatively uncluttered offerings from Moto. Unlike most manufacturers, they donât load down their phones with âstuffâ that canât be removed.
Recently I decided to purge my hard drive and re-install the operating system (VISTA) disc that came with my Toshiba laptop. I was amazed by the number of PUPâs that came along with it. Two questions: where can I get a clean install disc? Secondly, I am now being asked to âupdateâ my system. There is a list of security patches that go back to 2009. If I install the most recent and forget the rest, will this take care of things?
Thatâs why I have Unchecky. It will notify you if a download has PUPs and unchecks downloading them.
A warning about Adobe: Since the install malware checkboxes are on the website and not part of the installation program, Unchecky isnât able to âseeâ the boxes and prevent installation. You still have to do it manually. Unchecky is good, but I would still recommend vigilance in case some vendors figured out how to bypass it like Adobe did.