|
 Badware Behavior |
|
| Reserves right to continue charging user after uninstallation (Unacceptable uninstallation) |
|
| Fails to uninstall components, links, and executable (Unacceptable uninstallation) |
|
| Installs peer-to-peer file-sharing client (Deceptive installation) |
| Installs payment system (Deceptive installation) |
| Bundled software runs at Windows startup (Modifies other software) |
| Bad or Undisclosed Behavior |
| Reserves right to continue charging user after uninstallation |
|
According to Movieland's website and MediaPipe's EULA (End User License Agreement),
Movieland reserves the right to continue to charge the user even if he has uninstalled the
software. MediaPipe requires the user to visit a website to cancel the "trial obligation."
|
| Fails to uninstall components, links, and executable |
|
After uninstallation of the MediaPipe Download Manager, an executable remains which can be
used to reinstall the application. The bundled components itbill.exe (a payment system) and
mpp2pl.exe (a peer-to-peer file-sharing client) are also are not removed. These components
have no stand-alone value apart from the Download Manager. Finally, links to the Movieland
website and Movieland terms of service are left on the desktop.
|
| Installs peer-to-peer file-sharing client |
|
MediaPipe is bundled with mpp2pl.exe, a peer-to-peer file-sharing client, which is capable
of using the user�s bandwidth without notification. This executable�s configuration files point
at p2pnetworks.net, which is currently shut down, so we could not verify whether or not
bandwidth is actually used. This bundling is mentioned in the EULA, but is not clearly
disclosed to the user during the installation process.
|
| Installs payment system |
|
MediaPipe is bundled with itbill.exe, a payment system, which appears to be responsible for
popping up requests for payment. This is disclosed in the EULA, and the behavior is mentioned
on the website, but is not clearly disclosed to the user during the installation process.
|
| Bundled software runs at Windows startup |
|
MediaPipe automatically adds bundled software (itbill.exe, a payment system, and mpp2pl.exe, a
peer-to-peer file-sharing client) to the Windows startup. These additions are not disclosed to the
user during the installation process.
|
| Recommendations |
| We recommend that Net Publican, the producer of MediaPipe, do the following: |
- Terminate any "trial obligation" automatically when the Download Manager is uninstalled.
- Remove bundled applications with no stand-alone value (itbill.exe and mpp2pl.exe) when the Download Manager is uninstalled.
- Remove all executables and links when the Download Manager is uninstalled.
- Clearly disclose to the user during installation that MediaPipe is bundled with software that may create popups and use excessive bandwidth.
- Disclose to the user during installation that bundled software will automatically launch at Windows startup.
|
|
We currently recommend that users do not install the version of MediaPipe that we
tested, unless the user is comfortable with the level of risk we identify or until the
application is updated consistent with the recommendations in this report.
|
|
|
|
