The latest of these include crapware such as InstallBrain via softologic.com, softologicsa.com, AirInstaller via getsoftsfree.com and noyapps.com, AMonetize from emule.com/amoninst.com and of course, Babylon and Delta, amongst many others.
Whilst some of these do indeed, now have at least a landing page to inform you of what's going on, and the adware company name displayed on the advert itself (though to date, only around 3-4 of those companies, are doing this, the rest don't, presumably because they don't want you knowing).
The vast majority of these adverts are so beyond misleading that I keep having to remind myself this is "normal" (I know, I know - I already knew that). Surprise surprise, when they get themselves blacklisted for this activity, they're very quick to "reach out" (though rarely do these actually result in the misleading and unethical activities actually ceasing), or in some cases, send legal threats because you had the ordasity to do what is right to protect internet users.
To make matters worse, some of these not also use fake "Download" and "Plugin required" adverts (and I use the word fake, because they quite blatantly are, with both the wording and position/style of them, deliberately intended to mislead you into believing they actually are "required", or are going to actually take you to the download you wanted);
They also employ Firefox FlashPlayer "warnings";
And fake Chrome sites;
Sadly, this is just the tip of a rather large iceburg, where misleading and highly unethical adverts are concerned. Over the last week or two, I've noticed an extremely large proportion of adverts on Facebook, are for counterfeit apparel sites;
All of this of course, is before we get to the scummy snakeoil that is PerformerSoft and its ilk (i.e. 99.9% of "system cleaners" and every single "registry cleaner"), and the fond of misleading, MyPCBackup (FYI, on the subject of backups though, you should always ensure you've got at least 3 backups of a machine - 1 local, 1 local on an external drive (disconnected when not backing up) and 1 remotely stored (and I don't mean so-called "clouds" either! (unless you've encrypted the backup with something like TrueCrypt first)) and their ilk (I could go on, but don't want to be accused of rambling ....).
Why am I bothering to write about this? Well for starters, it's one of my pet peeves as it deliberately misleads people into believing they're going to get something they're clearly not, and in other cases, outright scams people and/or infects their machines, all the while, the ad networks and companies involved, are more than happy to let this activity continue - money talks louder than ethics it seems (yep, doesn't surprise me either).
If you'd like to help those less able, please do point these things out to them, advise them to keep as far away from them as possible. I'd also strongly advise blacklisting the offending sites responsible, and where appropriate, their IPs too. Just some of those you'll want to block (see hpHosts for a more complete listing, along with the corresponding IPs) include;
*.mediaget.com
*.download-instantly.com
*.nyoapps.com
*.softologic.com
*.metainstaller.com
*.imesh.com
*.ilivid.com
*.free2nstllr.com
*.circu.me
*.dwnldit.com
*.airinstaller.com
*.emule.com
*.amoninst.com
*.emulestore.com
*.movieseach.com
*.popker.com
*.pastdate.com
*.sotfball.com
*.motocrose.com
*.popertoys.com
*.torrentts.com
*.barcaelona.com
*.homaphones.com
*.micoscopes.com
... and ANYTHING that comes bundled with Delta crapware, Babylon crapware, or remotely resembling RelevantKnowledge (despite the Truste [1] claims, sorry chaps, where "certifications" and such go, Truste are about as trusted as a polition in a brothel), it is NOT clean, it is NOT good for your machine, and YOU DO NOT WANT IT!), amongst others.
Just a word of warning when blocking IPs, there's a few of the larger outfits using CDNs such as Akamai and Amazon, to serve the actual installers an such themselves, as much as I'd love to suggest blocking the CDNs too, sadly, doing so isn't viable as there's also alot of legit sites/companies that also use them and doing so would block those too (including blocking the likes of security software updates, Microsoft updates etc etc).
I'd also strongly urge you either lock down your machine, or install WinPatrol (will notify you as soon as something tries adding a toolbar, adding a startup item, changing file associations, changing a browsers homepage/search engine, amongst many other things.);
If you've not already, also consider installing Malwarebytes AntiMalware*;
http://www.malwarebytes.org [3]
I'd also strongly recommend uninstalling anything with Adobe's name on it, along with Java, and of course, disabling ActiveX in your browser, HTML in your emails, but annoyingly, few will actually take notice of thise as their emails look "prettier" or they are using games or some such rubbish on the likes of Facebook.
* I must note, for the purposes of full disclosure, that I am a contractor for Malwarebytes. I have not however (and will not!) link you through an affiliate URL! (yep, not fond of those either, never have been).
Links
- ^ Truste (truste.com)
- ^ WinPatrol (www.winpatrol.com)
- ^ Malwarebytes AntiMalware (www.malwarebytes.org)
No comments:
Post a Comment