Website operators rely on the "fine print" to serve unwanted applications

Mar 8, 2012 13:36 GMT  ·  By

A number of websites that offer software trick unsuspecting users into installing toolbars and other unwanted applications. Avast revealed its intentions of appointing downloads originating from these types of sites as being malware.

Last week the German government issued a law against the Internet scammers that dupe users into subscribing to paid services while trying to download applications that are supposedly free.

Until this law is extended to cover sites that bundle their products with unsolicited toolbars and other features Avast decided to catalogue these downloads as malware.

“We at AVAST wish that the law against internet scammers and subscription traps would be extended. An end user neither wants his account to be hacked nor does he want his PC to be equipped with dubious toolbars using fictitious facts, and which henceforth provide him with unwanted ads and pass on his Facebook data,” Avast’s Thomas Wespel writes.

A perfect example of a site that relies on such schemes to serve undesired content is winload.de. If users download an application before verifying the checkboxes above the Download button, they end up with a toolbar that allows the operator to change the default search engine in the Internet browser and change the homepage.

But that’s not all. Once the toolbar is installed its operators are permitted to install updates on the affected PC, send notifications to the user, collect location-based data, add a different “page not found” functionality, and even collect information from the internaut’s social network account.

Of course, the customer is warned that the toolbar will be installed, but not with a message written in big, red letters that pops up on the screen. Instead he/she is notified with a piece of text written somewhere above the Download button.

Even worse, before being informed by Avast, the “fine print” was displayed somewhere under the Download button.

These types of scams don’t target only German users, instead this is a perfect example of a situation that can happen to anyone worldwide.

This is why, until state authorities decide to do something about this phenomenon, internauts are advised to take a minute and verify all the checkboxes on a download page before rushing to get the application.

Update. Because of the comments posted by our readers we've asked Avast representatives to provide a statement regarding the fact that Google Chrome is installed along with the free version of the antivirus software.

Here is a statement from the comapny's CTO, Ondrej Vlcek:

We have been giving users the opportunity to install Chrome for several years now.

First, we like the Chrome browser as a light, secure, and fast browser. We even use elements of Chromium in our SafeZone option in the premium avast! Internet Security. This is clearly not crapware.

Secondly, we are paid by Google for distributing Chrome. This is not a hidden secret.

What is important to point out is that this is an "opt-out" choice - it is not mandatory and it is not forced on the user. Unclick the boxes and you will not download Chrome. And, a personal note from me.

I just upgraded from avast! 6 to 7 on a my wife's computer so I personally encountered this as a double opt-out choice: first to download Chrome (or not) and second to select it as the main browser (or not).