| Bad or Undisclosed Behavior |
| Displays pop-up ads and makes distracting auditory alerts |
|
Approximately every ten to twenty minutes, WinAntiSpyware 2006 (Unregistered Version) displays "WinAntiSpyware 2006 (Unregistered Version) Alert" pop-ups that are essentially advertisements for the full version of WinAntiSpyware 2006. These pop-up warnings open in separate windows and some of them make siren noises, thereby disrupting the user's ability to use their computer. WinAntiSpyware 2006 (Unregistered Version) does not inform users during installation that it will display these pop-up alarms.
|
| Makes exaggerated claims of system vulnerability |
|
WinAntiSpyware 2006 (Unregistered Version) uses alarmist language and deceptive tactics to scare users into upgrading to the full version of its software. The software claims "Spyware detected!" and "Spyware infection found!", and warns of "critical SPYWARE objects" over a few tracking cookies that are considered to be harmless. Additional warnings shown after a system scan state that "The threats found on your computer are very likely to create further problems if not fixed immediately, such as: Aggressive advertising popups; Slow web page loading and browser crashes; Hackers can steal your Credit Card details; Violate your privacy during Web surfing; Your local and online passwords stolen." The sense of exaggeration is heightened by the audio alarm associated with the alerts. In order to "clean" the computer, the user must register WinAntiSpyware 2006, which entails purchasing the full version of the software.
|
| Downloads updates without user's consent |
|
WinAntiSpyware 2006 (Unregistered Version) automatically downloads updates regularly on the user's computer without the user's consent. This automatic updating is not disclosed to the user at any time -- whether during the initial installation of WinAntiSpyware 2006 or as the individual updates occur. There is also no option given to the user to stop these updates from happening. The user is given no information on what these updates are or what purpose they serve.
|
| Automatically runs on startup |
|
WinAntiSpyware 2006 (Unregistered Version) automatically runs in the systems tray on startup. The application does not inform users that it will run on startup, and has no setting to allow users to disable this function.
|
| Recommendations |
| We recommend that the producers of WinAntiSpyware 2006 (Unregistered Version) do the following: |
- Stop making exaggerated claims of system vulnerability.
- Disclose to the user during installation that WinAntiSpyware 2006 (Unregistered Version) will be launching periodic pop-ups and auditory alarms and make it clear how frequent those alarms will be.
- Inform the user during installation that WinAntiSpyware 2006 will automatically run on startup, or provide the user with the option not to run the software on startup.
- Clearly disclose to the user when updates are available and ask for their consent before continuing with the update.
|
|
We currently recommend that users do not install the version of WinAntiSpyware 2006 that we tested,
unless the user is comfortable with the level of risk we identify or until the application
is updated consistent with the recommendations in this report.
|
|
|
Badware Behavior