AOL antivirus software slammed by consumer advocates

Robert McMillan   Today’s Top Stories   or  Other Spam, Malware and Vulnerabilities Stories  

The Secure Web Gateway. Mission Critical For Business Client Security Podcast IT Leadership Strategy: How to Provide World-Class Help Desk Support Malicious Software Defense: Have we moved beyond the need for anti-virus and spyware protection software? Understanding PCI DSS Compliance State of Internet Security Series: Protecting the Perimeter Computerworld Report- Large Enterprises Pay More for IPAM Computerworld Technology Briefing: Intelligent Users Use Business Intelligence Virtual Reality Sign up to receive Spam, Malware and Vulnerabilities Resource Alerts

August 18, 2006 (IDG News Service) -- Just days after posting details of searches made by hundreds of thousands of subscribers, AOL LLC is in hot water again with consumer advocates. This time the issue is with the company's Active Virus Shield antivirus software, released last week.

At issue is the software's licensing agreement, which authorizes AOL to gather and share data on how the software is being used and permits AOL and its affiliates to send e-mail to users. "If you go through the installation, just as any normal user would, there is not the slightest hint of any advertising functionality or data gathering of any kind," said Eric Howes, director of malware research at anti-spyware vendor Sunbelt Software Inc.

Active Virus Shield uses Kaspersky Lab Ltd.'s well-regarded antivirus software and comes with an optional security toolbar that blocks pop-up ads and manages passwords. The software is available free to anyone who wishes to download it.

Although security experts, including Howes, say that Active Virus Shield does not behave in a malicious fashion or serve up unwanted ads, some are concerned that the product's end-user license agreement (EULA) would allow AOL to send spam or serve up adware at some point in the future. "If it actually does any of the things stated in the EULA, we would actually flag it as spyware," said Christina Olson, a project manager at Stopbadware.org.

The Active Virus Shield agreement gives AOL much broader rights to collect information and then to share that information with third parties than typical EULAs, observers said.

A prohibition against blocking ads also caught Olson's attention. "If you have any ad-blocking software up, you're basically violating their EULA, which is ridiculous," she said.

After being contacted by IDG News, AOL said it now plans to alter the licensing agreement. "We are updating the EULA to address any concerns," said Andrew Weinstein, a company spokesman. "We are reserving the right solely to send periodic marketing e-mails that users will have the choice to opt out of."

Adding to AOL's troubles is the fact Active Virus Shield's security toolbar is based on a product with a questionable reputation. An earlier version of this software, known as the Softomate toolbar, is flagged as adware by Kaspersky's own antivirus products.

"We don't use the earlier code because it was used by a malware provider," Weinstein said. "That's why Kaspersky looks for it."

While AOL's toolbar is not considered to be adware, observers say that AOL, which prides itself as a fierce opponent of adware and spyware, could have based its own toolbar on a better product. "I don't understand how a legitimate company like AOL provides software that can be classified as rogue," said Aviv Raff, a security researcher based in Israel.

Continued...
1 | 2 | NEXT  

Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.

Print this Story

Send Us Feedback

E-mail this Story

Digg this Story

Slashdot this Story

"The Payment Card Industry Data Security Standard (PCI DSS) being pushed by the major credit card companies has probably done..." Read more... "At this big apparel company, there's a data upload every night from factories to HQ. But one morning, this pilot..." Read more... Read more Security posts or See all Blogs

Microsoft's Web site overwhelmed by would-be Windows 7 downloaders FAQ: How to get the Windows 7 beta Google: Chrome in 'never-ending' beta More top stories...

Review: Windows 7 Beta 1 shows off new task bar, more UI goodies Elgan: Palm and Sony out-Apple Apple Memory card standard could provide up to 2TB on an SD card

The 9 hottest skills for '09 The downturn has softened the IT talent market but done little to weaken demand for SAP, .Net and other technical skills. Fast fixes for common PC problems Every computer user hits a speed bump now and then. Here are some speedy, simple solutions to hardware, software, network, Internet and mobile-device crises. Apple's 5 biggest moments in 2008 From the iPhone 3G to 'unibody' MacBooks, 2008 was a standout year for Apple. Hands-on Linux: New distro versions push the envelope We've got reviews and videos of the new Ubuntu 8.10, Fedora 10 and openSUSE 11.1. Windows 7 Get the latest news, reviews and more about Microsoft's newest desktop operating system More Continuing Coverage Windows 7 Voting Technology Google's Chrome browser Economy in turmoil: Latest news and tips iPhone 3G Bill Gates moves on Windows Vista A to Z Mac A to Z 2008 Salary Survey Find wage data for 50 IT job titles. More Special Reports 2009 Premier 100 IT Leaders 2008 Premier 100 IT Leaders 2007 Premier 100 IT Leaders 2008 Best Places to Work in IT 2007 Best Places to Work in IT 2008 Salary Survey 2007 Salary Survey 2006 Salary Survey 2008 IT Forecast 2007 IT Forecast 40 Years of Computerworld Top 12 Green-IT Users The FAQs About Going Green IT Schools to Watch iPhone: One Year Later Global Mobile Your Next Data Center Management: Reinventing IT Stop Data Leaks Web 2.0 Security Surviving Disasters Managing Storage Virtualization The Lean Storage Machine Storage on Trial Can Web 2.0 Save BI? Bypass These BI Potholes All Zones Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone The Enterprise Search Zone Software as a Service Zone The Security Zone See your link here

The Secure Web Gateway. Mission Critical For Business The Secure Web Gateway. Mission Critical For Business View this on demand webcast, compliments of Ironport, now! Go to the webcast  Managing Mobile Data with Endpoint Security for Laptops Download this white paper now, compliments of Computerworld and Absolute Software. (Source: Absolute Software) A NetworkWorld survey of IT professionals found that only 1 in 100 employees consistently follow data security policy. This paper outlines endpoint security for laptops that restricts data access beyond encryption to safeguard against insider threats and user error.Read this whitepaper to learn lessons from recent data breaches, limitations of traditional data security, and how to remotely wipe out data and monitor computers that go off the network. Download this executive briefing  Creating a green data center to help reduce energy costs and gain a competitive advantage Download this new white paper today! (Source: VMware) With today's rapid IT growth, companies are looking to consolidate datacenter operations to achieve space and cost savings. And as energy costs continue to rise, datacenter efficiency becomes even more important. This IBM report details how companies are reducing energy usage and costs to gain a completive advantage. Download this white paper  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. Learn how Xythos and Microsoft enable customers to benefit from the best of both approaches to document management and collaboration. NetApp and VMware Virtual Infrastructure 3 Storage Best Practices Environmental Sustainability and Networking View more whitepapers

• Microsoft's Web site overwhelmed by would-be Windows 7 downloaders
• Review: Windows 7 Beta 1 shows off new task bar, more UI goodies
• FAQ: How to get the Windows 7 beta
• More top stories