LOGO

Freeware Download Sites & Crapware: Proof and Risks

January 21, 2015
Freeware Download Sites & Crapware: Proof and Risks

The Pervasive Issue of Crapware in Freeware Downloads

Following our report on the implications of installing the ten most popular applications from CNET Downloads, a significant portion of the feedback received centered around the recommendation to utilize trustworthy download sources.

However, a comprehensive search revealed that a truly clean freeware download site, entirely devoid of crapware or adware, is currently unattainable.

Our Investigation and Findings

Our investigation demonstrated that every freeware download site examined listed some form of bundled software. While certain platforms attempt to mitigate this by notifying users about bundled items, these alerts prove insufficient.

User behavior consistently shows that the details of these offers are largely ignored, mirroring the tendency to bypass reading installer agreements.

Deceptive Installer Tactics

Many installers employ deliberately misleading tactics. These include dynamically repositioning buttons, altering text, and even disguising bundled software offers as terms and conditions agreements.

Such practices extend to browser hijacking, ad insertion, and the utilization of concealed services leveraging complex APIs.

A recent trend involves distributing deceptive imitations of Google Chrome, pre-packaged with unwanted adware.

A Review of Top Download Sites

We will now present a detailed overview of leading download sites, illustrating the extent of bundled adware and undesirable software.

It's important to acknowledge that nearly all platforms participate in this practice to some degree, with the most egregious offenders adding custom installation wrappers to ensure unwanted software is installed.

Notably, this analysis excludes Ninite, which we actively recommend, as it functions as a software installation service specifically designed to bypass crapware.

The True Cost of "Free" Software

The reality is that freeware is rarely genuinely free. We are all, in effect, paying for it through exposure to unwanted software and potentially compromised system security.

Key Takeaways

  • No freeware download site is completely free of bundled software.
  • Installers often employ deceptive tactics to trick users into accepting unwanted programs.
  • Ninite provides a reliable alternative for installing software without crapware.
  • Users should be aware that "free" software often comes at a hidden cost.

Download.com / CNET Downloads

Further elaboration isn't strictly necessary, given our prior coverage of the issues associated with downloading software from this platform. However, a review of their practices proved to be a revealing exploration of undesirable software distribution tactics.

Download.com and CNET Downloads continue to be prominent sources of bundled, unwanted programs. They consistently lead in the provision of such "crapware" alongside legitimate software.

Bundled Nonsense

The site maintains its position as a leading distributor of unwanted software. This practice involves including additional programs during the installation process, often without clear user consent.

Speculation suggests that Download.com may even contend with other controversial figures for recognition as a source of significant user frustration. Comparisons have been made to personalities known for unpopularity.

It is important to note that this assessment focuses solely on the practice of bundling unwanted software and does not represent a judgment on the individuals mentioned in the original text.

Tucows

The Tucows website represents a significant detriment to users and warrants removal from online access. Its practices are demonstrably more harmful than those found on Download.com, a site already known for problematic software distribution.

A review of their most popular downloads reveals a preponderance of deceptive and fraudulent applications. These programs falsely report system errors, even on newly installed operating systems, employing scare tactics to induce users into unnecessary actions.

Concerning Practices

Beyond the malicious software itself, Tucows employs a proprietary wrapper that further compromises user experience. This wrapper redirects browser activity, injects unwanted advertisements, and facilitates the installation of additional unwanted programs.

Such behavior is deeply irresponsible and deserving of censure. It is possible that Tucows will now contend with Download.com for the distinction of being the most problematic software download portal.

Users are strongly advised to avoid downloading software from Tucows due to the high risk of malware infection and system instability.

The consistent distribution of crapware and the aggressive tactics employed by Tucows necessitate a critical reassessment of its continued operation.

FileHippo

As anticipated, the initial download from FileHippo contained unwanted bundled software and the undesirable Ask toolbar.

Subsequent screens attempted to install additional programs, including a Search App and a weather utility.

Further attempts were made to install a deceptive, fraudulent registry cleaner, mirroring tactics observed on Download.com. This resulted in four instances of potentially unwanted programs from a single download!

Bundled Software and User Experience

The installation process was deliberately confusing. The arrangement of buttons and their labels were altered on each screen.

This required users to carefully read and deselect pre-checked options, with the process varying on every page.

Such tactics aim to mislead users into unintentionally installing unwanted software.

Concerns Regarding Software Distribution

The prevalence of bundled software raises concerns about the integrity of freeware download sites.

The consistent inclusion of unwanted programs suggests a pattern of deceptive practices.

Users should exercise caution and carefully review all installation screens to avoid installing unwanted applications.

It is frustrating that a straightforward download could be complicated by multiple attempts to install adware and potentially harmful software.

Softpedia

Numerous users suggested Softpedia as a reliable source for software downloads. A test involving the Unlocker program, accessed via their homepage, quickly revealed an attempt to install the Delta Toolbar. This toolbar was presented as a means to enhance browsing and search functionality.

It should be noted that a disclaimer regarding ad support is present, albeit located at the very bottom of the download page. This disclaimer advises caution during the installation process. However, the expectation that users meticulously read every detail before downloading desired applications is unrealistic.

Copyright Information

The page displays a copyright notice for 2015, reserving all rights. This information, while present, doesn't negate the initial experience of encountering potentially unwanted software offers.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-5.jpg

Interestingly, the attempted installation of the Delta Toolbar was unsuccessful. Further investigation into the toolbar’s functionality and potential drawbacks was therefore prevented.

Despite the failed installation, the incident highlights a common practice among freeware download sites. Users should exercise vigilance and carefully review installation options to avoid unwanted software.

SnapFiles

SnapFiles distinguishes itself by displaying a warning prominently during the download process. However, like many other freeware download sites, it still bundles unwanted applications with its software.

During testing, numerous instances of potentially unwanted programs were installed alongside the intended application. A particularly concerning addition was "Safer Browser," a program masquerading as Google Chrome.

Safer Browser: A Deceptive Application

“Safer Browser” is essentially a modified version of Chrome, but it redirects users’ homepage and search queries to Yahoo. Forcing users to utilize the Yahoo search engine can be considered a malicious practice.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-7.jpg

A recent trend observed is the creation of counterfeit Chrome browsers. These imitations are frequently bundled with adware, posing a risk to users.

These deceptive practices highlight the need for caution when downloading software from freeware websites. Users should carefully review all installation steps and opt-out of any bundled software offers.

The inclusion of programs like “Safer Browser” demonstrates a concerning pattern of misleading users and compromising their browsing experience.

FreewareFiles: A Review

The FreewareFiles website operates in an unusual manner. Rather than hosting downloads directly, it primarily functions as a directory, providing links to download locations on other platforms.

This approach presents a significant challenge regarding quality control. Since FreewareFiles doesn't directly manage the files, they lack the ability to guarantee the integrity of the downloads.

Potential Risks

A key concern is the possibility of linked sites substituting legitimate software installers with those containing crapware. This poses a security risk to users.

Furthermore, a substantial portion of the offered downloads lack traditional installers.

Download Format Issues

Many files are distributed as formats like .JAR or .XPI. While not inherently malicious, this can create usability issues for less technically inclined users.

Although not every download is bundled with unwanted software, the site's format and linking structure don't prioritize a streamlined, user-friendly experience.

In essence, while FreewareFiles offers access to a variety of software, its reliance on external links introduces vulnerabilities and potential inconveniences for its users.

NoNags: A Review of Software Downloads

NoNags is a platform offering software downloads, with a particular focus on providing downloads free of spyware and adware. However, this assurance is primarily extended to its paid subscribers.

Users who do not have a paid membership are directed to download software from the original source websites. These sources are frequently known to include unwanted software bundled with legitimate programs – often referred to as "crapware."

Efforts to Maintain Clean Downloads

It is noteworthy that NoNags actively monitors its download links. They remove links to software that has begun distributing unwanted programs.

Despite these efforts, instances of software bundling crapware can still be found on the platform.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-9.jpg

Membership and Alternatives

A paid membership to NoNags provides access to freeware that has been vetted for spyware. This offers a degree of security against potentially harmful software.

Alternatively, investing in high-quality, paid software is a viable option. This directly supports software developers and reduces the risk of encountering bundled unwanted programs.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-10.jpg

Choosing paid software can be a beneficial approach for both security and supporting the software development community.

SourceForge

Update: Following the publication of this article, SourceForge underwent a change in ownership. The new management discontinued the DevShare program detailed below. This article remains available for historical context, as the previously described practices are no longer in effect.

SourceForge has, unfortunately, begun employing tactics similar to other freeware download sites, distributing software with unwanted bundled applications through a program called DevShare. Fortunately, participation in DevShare is voluntary; project maintainers must explicitly consent to its use. It is also encouraging that not all projects have chosen to participate.

Bundled Software Concerns

The developers of FileZilla, for example, have elected to include bundled advertisements with their software. This decision appears to contradict the principles often associated with the open source community.

SourceForge asserts that they screen bundled offers to exclude malicious software. However, the line defining what constitutes "malware" can be subjective and open to interpretation.

The installation process also exhibits unusual behavior, accessing browser cookies from all installed browsers. The reason for this data access remains unclear.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-12.jpg

The presence of "Installer Enabled" on a SourceForge download page indicates that users may encounter bundled software during installation.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-13.jpg

It’s worth noting that the initial screenshot was captured some time ago. At the time of this writing, the installer did not display any active offers. However, it is possible this is due to the testing environment being a virtual machine.

Further testing is ongoing to determine the consistency of these findings.

MajorGeeks

A significant number of users contacted us to advocate for MajorGeeks as a reliable download source. We anticipated this site would be an exception to the practice of bundling unwanted software. Unfortunately, this proved incorrect.

Upon downloading a screensaver, we discovered the inclusion of four undesirable programs. These included adware components such as ShopperPro and BoBrowser, which are known to commandeer system resources.

Bundleware Identification

It is important to note that MajorGeeks does provide information regarding bundled software. Items containing such additions are labeled with a "Bundleware" license.

A warning in red text is also present within the item's description, indicating the presence of adware. However, similar to Softpedia, this notice is positioned far down the page, potentially overlooked by users.

yes-every-freeware-download-site-is-serving-crapware-heres-the-proof-15.jpg

Discussion with the Owner

We engaged in a conversation with the owner of MajorGeeks regarding this issue. He explained that restricting listings to only freeware without bundled software would severely limit the available downloads.

Consequently, the site would likely be forced to cease operations. He emphasized their practice of marking items containing bundled software and including a notice at the bottom of the page.

While we believe the notice could be larger and more conspicuous, we acknowledge the owner’s effort to act responsibly. Furthermore, every file uploaded to the site undergoes thorough testing before being made available.

Prioritize Official Downloads

A frequent point raised by readers concerned the importance of obtaining software directly from the official source. It’s widely understood that search engines like Google are commonly utilized for locating software.

However, this approach can unfortunately lead to undesirable outcomes.

The reality is that even when using Google, the prominent search results for many open-source and freeware programs often direct users to websites riddled with unwanted software, including crapware, adware, and malware.

While experienced users may avoid clicking on advertisements, the continued profitability of these ads demonstrates that a significant number of individuals are still susceptible to them.

Mitigating Download Risks

If downloading freeware is unavoidable, it’s advisable to consider the potential consequences. Alternatively, users should diligently locate the legitimate website, bypassing the advertisements.

Another protective measure involves testing the software within a virtual machine environment before installation. Furthermore, supporting developers by purchasing software or exploring alternative operating systems like OS X or Linux are viable options.

As previously highlighted, the cost of "free" software is often the user's own data and privacy. Remember, when a product is offered without charge, you become the product.

#freeware#crapware#malware#download sites#unwanted software#software bundling