Here is a PUP, but not the four-legged kind that some of you may have as pets.  No, this PUP is one you can do without, but unfortunately they sometimes ‘stick’ to freeware (see Definition) and installs without your permission.  These are unwanted programs that you don’t need and don’t want in your device.

How do these programs install without your permission or knowledge?  It’s because when you download freeware, you do not read the agreements or the installation process thoroughly.  Movie players, peer-to-peer downloading clients and other media-related applications that are freely distributed may have PUP and adware added to them.

PUPs are not malware, but they have characteristics that may make it undesirable and may pose a risk.  Why is this so?  Simply because some PUPs containspyware (see Definition) and keyloggers (see Definition), dialers (see Definition) and other software that can gather personal information that could lead to identity theft.  They may also cause other security issues for your PC, such as displaying potentially-dangerous pop-ups. In other words, it may result in buggy software, unsecure web pages that can be compromised and used for malicious purposes, and possibly exposing the user to malware.

You can minimize the exposure to PUPs by not downloading applications from websites other than their official and trustworthy sources.

Some sub-categories of PUPs include browsers add-on, web search enhancers, emoticon (smiley face) packages and adware. Here are some symptoms and issues that may arise from having PUPs.

• They may hinder your computer’s operating system’s performance due to the PUP launching itself and functioning automatically
• Pop-up windows of advertisements are displayed
• Keystrokes and other information may be monitored continuously.
• Some PUPs may not include an uninstall option or may not uninstall themselves completely.

There are several techniques that companies may use to get you to download PUPs.  One way is to offer multiple installations options.  Though the standard or default option is usually recommended, it is usually the custom or advanced option that is PUP-free.  Sometimes the PUP is automatically included in the installation.  You will have to uncheck the boxes to opt-out of the PUP.  (see image on the right)

Recommendation

1. Be vigilant.  Ask yourself if you really need that freeware.  If it is really necessary, download only from trusted websites.
2. Customize.  When downloading a program, choose custom installation.
3. Opt-out.  Some freeware programs will automatically include PUPs such as free browser add-on.  It may have a box that is checked to install the browse add-on. Uncheck it.
4. End user license agreement.  Read the fine print as it may have a clause about PUPs.
5. Security software.  Have a security solution such as an antivirus or antimalware software installed.   They can frequently remove PUPs.

Definition

1. Freeware – computer software that is available for use without charge. 
2. Spyware – software or technology that enables a user to gather information about a person or an organization without their knowledge and transmit such information to another entity with their knowledge.
3. Keyloggers – software program or hardware device that records all keystrokes on a computer.  It may be used as a surveillance tool or covertly as a spyware.
4. Dialers – in IT security context, it is a malicious program that installs itself onto a computer and attempts to dial telephone numbers, often incurring expensive phone bills for the unsuspecting victim.

Source

1. McAfee blog
2. Spyware Remove
3. Image source: gust MEES blog