Can someone please explain why this is being promoted

Discussion about the board itself, forums organization and site bugs.
Post Reply
kukla
Senior Member
Posts: 317
Joined: Mon May 04, 2009 12:08 am

Can someone please explain why this is being promoted

Post by kukla »

Ad appears at https://noscript.net/ "PC slowing you down?" Comes from UniBlue, already noted here as highly dubious.

Image

Virus Total results for the .exe file to install. Looks really bad:

Image
Mozilla/5.0 (Windows NT 6.0; WOW64; rv49.0) Gecko/20100101 Firefox/45.0
barbaz
Senior Member
Posts: 10938
Joined: Sat Aug 03, 2013 5:45 pm

Re: Can someone please explain why this is being promoted

Post by barbaz »

Yeah, because those guys are sponsoring Giorgio, that's why.

Haven't we been over this before? -
viewtopic.php?f=7&t=19911

viewtopic.php?f=14&t=17368
viewtopic.php?p=82736#p82736

BTW you might want to fix that UA string, it's very obviously spoofed.

Code: Select all

Mozilla/5.0 (Windows NT 6.0; WOW64; rv49.0) Gecko/20100101 Firefox/45.0
*Always* check the changelogs BEFORE updating that important software!
-
barbaz
Senior Member
Posts: 10938
Joined: Sat Aug 03, 2013 5:45 pm

Re: Can someone please explain why this is being promoted

Post by barbaz »

Moving to Metaforum.
*Always* check the changelogs BEFORE updating that important software!
-
kukla
Senior Member
Posts: 317
Joined: Mon May 04, 2009 12:08 am

Re: Can someone please explain why this is being promoted

Post by kukla »

First, I'm happy to see that the UniBlue Machanic is no longer being promoted. Those kinds of cleaners are not needed on a Mac, and often end up "cleaning," as in damaging or removing, important data and files. But don't want to get back into that one again.
English
No, it's not a trojan but a false positive due to some antivirus engines flagging optimization/cleanup programs as potential unwanted ones because they're often side-installed by other freeware programs in non-obvious way, and user discover having a software they didn't ask for when they're nagged because the trial period is expired. This is obviously not NoScript's case, because it doesn't install anything.
viewtopic.php?p=82736#p82736
So the idea is this program is only getting flagged as PUA or PUP by all these A-V because it's often installed without the user's knowledge by other not very ethical programs, and that Windows cleaning program itself contains nothing nefarious?

I only temporarily changed the User Agent, which you noticed is obviously spoofed, in order to see for myself just what was going on. Not interested in trolling or starting any flames. Glad to have the clarification.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:45.0) Gecko/20100101 Firefox/45.0
barbaz
Senior Member
Posts: 10938
Joined: Sat Aug 03, 2013 5:45 pm

Re: Can someone please explain why this is being promoted

Post by barbaz »

kukla wrote:So the idea is this program is only getting flagged as PUA or PUP by all these A-V because it's often installed without the user's knowledge by other not very ethical programs, and that Windows cleaning program itself contains nothing nefarious?
Bingo. 8-)
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply