Page 1 of 1

Can someone please explain why this is being promoted

Posted: Sun Oct 09, 2016 4:48 pm
by kukla
Ad appears at https://noscript.net/ "PC slowing you down?" Comes from UniBlue, already noted here as highly dubious.

Image

Virus Total results for the .exe file to install. Looks really bad:

Image

Re: Can someone please explain why this is being promoted

Posted: Sun Oct 09, 2016 5:32 pm
by barbaz
Yeah, because those guys are sponsoring Giorgio, that's why.

Haven't we been over this before? -
viewtopic.php?f=7&t=19911

viewtopic.php?f=14&t=17368
viewtopic.php?p=82736#p82736

BTW you might want to fix that UA string, it's very obviously spoofed.

Code: Select all

Mozilla/5.0 (Windows NT 6.0; WOW64; rv49.0) Gecko/20100101 Firefox/45.0

Re: Can someone please explain why this is being promoted

Posted: Sun Oct 09, 2016 5:35 pm
by barbaz
Moving to Metaforum.

Re: Can someone please explain why this is being promoted

Posted: Sun Oct 09, 2016 6:11 pm
by kukla
First, I'm happy to see that the UniBlue Machanic is no longer being promoted. Those kinds of cleaners are not needed on a Mac, and often end up "cleaning," as in damaging or removing, important data and files. But don't want to get back into that one again.
English
No, it's not a trojan but a false positive due to some antivirus engines flagging optimization/cleanup programs as potential unwanted ones because they're often side-installed by other freeware programs in non-obvious way, and user discover having a software they didn't ask for when they're nagged because the trial period is expired. This is obviously not NoScript's case, because it doesn't install anything.
viewtopic.php?p=82736#p82736

So the idea is this program is only getting flagged as PUA or PUP by all these A-V because it's often installed without the user's knowledge by other not very ethical programs, and that Windows cleaning program itself contains nothing nefarious?

I only temporarily changed the User Agent, which you noticed is obviously spoofed, in order to see for myself just what was going on. Not interested in trolling or starting any flames. Glad to have the clarification.

Re: Can someone please explain why this is being promoted

Posted: Sun Oct 09, 2016 6:15 pm
by barbaz
kukla wrote:So the idea is this program is only getting flagged as PUA or PUP by all these A-V because it's often installed without the user's knowledge by other not very ethical programs, and that Windows cleaning program itself contains nothing nefarious?

Bingo. 8-)