Skip to main content
Answer

Installers containing PUAs need option to run anyway

  • June 9, 2015
  • 5 replies
  • 41 views

So many software installers contain PUAs these days. Advanced installation and declining to install PUAs should be an option without having to turn off Webroot protection to do the installation! My biggest fear is that I'll forget to turn Webroot back on afterward. That's a much bigger risk than most PUAs themselves!

Best answer by Dermot7

Hello Solano, I would not turn off WSA to install anything and wouldn't recommend doing so.
 
Here are some references regarding their detection and removal, and ideas from Community members etc.  
 
Your questions and opinions are welcome. Thanks.
 
     https://community.webroot.com/t5/Techie-KB/How-to-Remove-Potentially-Unwanted-Applications/ta-p/40744
 
    Webroot's position on PUA - Webroot Community    
 
  https://community.webroot.com/t5/Ideas-Exchange/Block-All-Bundled-Software/idi-p/156643
 
   https://community.webroot.com/t5/Ideas-Exchange/Better-Smarter-PUA-detection-quot-PUAs-the-real-problem-quot/idi-p/81227

5 replies

Dermot7
Gold VIP
Forum|alt.badge.img+3
  • Gold VIP
  • Answer
  • June 10, 2015
Hello Solano, I would not turn off WSA to install anything and wouldn't recommend doing so.
 
Here are some references regarding their detection and removal, and ideas from Community members etc.  
 
Your questions and opinions are welcome. Thanks.
 
     https://community.webroot.com/t5/Techie-KB/How-to-Remove-Potentially-Unwanted-Applications/ta-p/40744
 
    Webroot's position on PUA - Webroot Community    
 
  https://community.webroot.com/t5/Ideas-Exchange/Block-All-Bundled-Software/idi-p/156643
 
   https://community.webroot.com/t5/Ideas-Exchange/Better-Smarter-PUA-detection-quot-PUAs-the-real-problem-quot/idi-p/81227

  • Author
  • New Voice
  • June 10, 2015
You miss my point. You make it necessary to disable Webroot by not offering an option to run the installer anyway. Sure, click-happy users who suck down binaries all day and don't use advanced install options (or use them carelessly) can end up with a browser toolbar or something they didn't want, if you allow them to go ahead with such an installer after identifying the potential issue. But please understand that it's ONLY just that--a *potential* issue. Whereas the kind of vulnerability that might result from Webroot being disabled is a clear and present danger that must be avoided. You cannot safely and absolutely protect people from themselves, because in doing so, you create a situation that promotes even more dangerous workarounds.

Please consider the value of identifying PUPs, and warning users, an even defaulting to blocking the installer, but providing an option to assume the risk and install anyway. When I turn off Webroot to get around the lack of such an option, I'm doing MUCH worse than that! Please work with me here. I really need some of the freeware I've installed lately, and couldn't afford the commercial alternatives. I hate toolbars, and other PUPs as much as anybody, but I prefer vigilance to tyranny, whether it be from AV applications or governments.

DanP
Forum|alt.badge.img+35
  • OpenText Employee
  • June 10, 2015
@ wrote:
You miss my point. You make it necessary to disable Webroot by not offering an option to run the installer anyway. Sure, click-happy users who suck down binaries all day and don't use advanced install options (or use them carelessly) can end up with a browser toolbar or something they didn't want, if you allow them to go ahead with such an installer after identifying the potential issue. But please understand that it's ONLY just that--a *potential* issue. Whereas the kind of vulnerability that might result from Webroot being disabled is a clear and present danger that must be avoided. You cannot safely and absolutely protect people from themselves, because in doing so, you create a situation that promotes even more dangerous workarounds.

Please consider the value of identifying PUPs, and warning users, an even defaulting to blocking the installer, but providing an option to assume the risk and install anyway. When I turn off Webroot to get around the lack of such an option, I'm doing MUCH worse than that! Please work with me here. I really need some of the freeware I've installed lately, and couldn't afford the commercial alternatives. I hate toolbars, and other PUPs as much as anybody, but I prefer vigilance to tyranny, whether it be from AV applications or governments.
The installers from the official product download pages usually do not contain bundled PUAs. Sometimes you may have to find the correct link though (FileZilla comes to mind.) In cases where the only installers available include bundled PUAs you can restore the detected files from Quarantine and install the app - there is no need to shut down WSA. 
 
-Dan

  • Author
  • New Voice
  • June 11, 2015
Restoring the file from Quarantine would be fine. I'm new to Webroot, and haven't found the quarantine manager. I'll nose around some more, and consult the online help if I can't find it. Thanks!

RetiredTripleHelix
Gold VIP
Forum|alt.badge.img+56