[KB2629] Potentially unwanted applications and potentially unwanted content

Potentially unwanted applications

A potentially unwanted application is a program that contains adware, installs toolbars, or has other unclear objectives. In some situations, a user may feel that the benefits of a potentially unwanted application outweigh the risks. For this reason, ESET assigns such applications a lower-risk category compared to other types of malicious software, such as trojans or worms.

While installing your ESET product, you can decide whether to enable the detection of potentially unwanted applications.

• You can select the check boxes next to Enable ESET LiveGrid® feedback system and Enable detection of potentially unwanted applications before proceeding with the installation
• You can click Allow all and continue (recommended)
  
   

  

You can modify the potentially unwanted application configuration settings in your program settings at any time. Configure ESET products to detect or ignore unwanted, unsafe and suspicious applications.

Warning – Potentially unwanted application found

When a potentially unwanted application is detected, you will be able to decide which action to take. Review the warning and click Advanced options.

A potentially unwanted application has been found online (download)

These options will be shown when you try to download a potentially unwanted application from a website. Review descriptions for the warning options:

• Disconnect: This option ends the action and prevents the potentially unwanted application from entering your system.
• Ignore: This option enables a potentially unwanted application to enter your system.
• the Clean option for notifications for a file on disk.
• Copy to Quarantine: This option is pre-selected by default. We recommend leaving this option selected.
• Exclude signature from detection: To allow all files identified by a specific detection name (signature) to run on your computer in the future without interruption (from existing files or web downloads), select the check box next to Exclude signature from detection and click Ignore. If additional detection windows with an identical detection name are displayed immediately afterward, click Ignore to close them (any additional windows are related to a detection that occurred before you excluded the signature from detection). 

A potentially unwanted application has already been downloaded (file on a disk)

These options will be shown when you already have a potentially unwanted application on your disk. Review descriptions for the warning options: 

• Clean: This option will remove the potentially unwanted application from your system.
• Ignore: This option allows a potentially unwanted application to remain on your system.
• Copy to Quarantine: This option is pre-selected by default. We recommend leaving this option selected.
• Exclude from detection: To allow the detected file that is already on the computer to run without interruption in the future, select the check box next to Exclude from detection and click Ignore.
• Exclude signature from detection: To allow all files identified by a specific detection name (signature) to run on your computer in the future without interruption (from existing files or web downloads), select the check box next to Exclude signature from detection and click Ignore.

Potentially unwanted applications

Software wrappers

A software wrapper is a special type of application modification that is used by some file-hosting websites. It is a third-party tool that installs the program you intended to download but adds additional software, such as toolbars or adware.

The additional software may change your web browser’s home page and search settings. Also, file-hosting websites often do not notify the software vendor or download recipient that modifications are made, and often hide options to opt out.

For these reasons, ESET classifies software wrappers as potentially unwanted applications that allow users to accept the download.

Registry cleaners

Registry cleaners suggest that the Windows registry database requires regular maintenance or cleaning. Using a registry cleaner might introduce some risks to your computer system.

Additionally, some registry cleaners make unqualified, unverifiable, or otherwise unsupportable claims about their benefits or generate misleading reports about a computer system based on "free scan" results. These misleading claims and reports seek to persuade you to purchase a full version or subscription, usually without allowing you to evaluate the registry cleaner before payment.

For these reasons, ESET classifies such programs as PUA and allows you to allow or block them.

Potentially Unwanted Content

If potentially unwanted application detection is enabled in your ESET product, websites that have a reputation for promoting PUAs or that have a reputation for misleading users into performing actions that might have negative implications on their system or browsing experience will be blocked as potentially unwanted content.

If you receive a notification that a website you are attempting to visit is categorized as potentially unwanted content, you can click Go back to navigate away from the blocked web page or click Ignore and continue to allow the site to load.