|
 Badware Behavior |
|
| Exiting application requires multiple, non-obvious steps (Interferes with computer use) |
|
| Fails to uninstall executable (Unacceptable uninstallation) |
|
| Launches automatically after reboot and scans computer (Interferes with computer use) |
|
| Bad or Undisclosed Behavior |
| Exiting application requires multiple, non-obvious steps |
|
The main application window for SpyAxe contains no "Exit" or "Quit" button. Moreover, the
"Delete Spyware" button that appears after a scan (and which a user might reasonably expect
would allow one to delete spyware and exit the application when done) asks the user to register
and pay, and does not allow the user to exit the application without doing so. The only way to
exit SpyAxe without paying for it to click the "X" button in the right-hand corner of the application
window. When the "X" is clicked, the program minimizes to the system tray. The user must
then right-click the icon, and choose "Exit". The user is then prompted with a final "Are you sure?"
alert box before he can completely quit the application. SpyAxe automatically runs again after
the computer is restarted.
|
| Fails to uninstall executable |
|
When removing SpyAxe via the bundled uninstaller or the Windows uninstaller, an executable
remains which can be used to reinstall the application.
|
| Launches automatically after reboot and scans computer |
|
SpyAxe launches automatically after every reboot and then scans the user's computer.
scan leads to a nag screen which prompts the user to purchase the full version. This automatic
launching and scanning is not disclosed to the user during the installation process.
|
| Recommendations |
| We recommend that the producers of the SpyAxe do the following: |
- Provide an "Exit" or "Quit" function from the main application window, so that a user can quit the application normally without being constantly nagged to buy the program.
- Completely remove all executables during uninstallation.
- Disclose to the user that the program will launch automatically after each reboot and scan the user's computer.
- Disclose to the user that the program will be added to the Windows startup folder.
- At download and installation time, clearly label both the trial and full versions of the software as such and define what functions are disabled in the trial version (e.g. that it does not remove badware).
|
|
We currently recommend that users do not install the version of SpyAxe that we tested,
unless the user is comfortable with the level of risk we identify or until the application
is updated consistent with the recommendations in this report.
|
|
|
|
