Login:
Password:

Group: AOL 9.0 Uses Malware Tactics

By Ed Oswald, BetaNews

August 29, 2006, 3:10 PM

AOL is being accused of using malware-like tactics to install software unbeknownst to users when they install AOL 9.0, the company's latest version of its online service software. The charge was made by StopBadware.org, a coalition between Berkman Center for Internet and Society at Harvard Law School and the Oxford Internet Institute of Oxford University.

"AOL plainly does not belong in the same category as the all-too-prevalent, garden variety badware providers. But the free version of AOL 9.0 that we tested, in our view, does not live up to the company's rich legacy," Berkman Center executive director John Palfrey said.

StopBadware.org found eight separate instances where AOL 9.0 used questionable methods to either install software or make changes to a user's computer. Among them is additional software installed without permission including the AOL Toolbar to Internet Explorer, forced actions during installation, the addition of buttons and favorites to IE, and the failure to uninstall software completely.

In its response to the StopBadware charges, AOL explained that its failure to uninstall completely was a known flaw in the uninstaller in which two executable files remain, even after the computer is restarted. The company was taking steps to address it, including issuing a patch to remedy the problem, it said.

It should be noted that AOL 9.0 has been available since 2003, with the latest update coming in November 2004.

AOL was also taking steps to address other issues brought up by the report, it told the non-profit group. Palfrey said the group was very impressed by AOL's quick response and its commitment to address problems that StopBadware found objectionable.

"What we are calling on AOL to do today is to honor that trust by telling users exactly what they're putting on their computers, give users an easy way to opt out of having so many programs installed and running after download, and ensure that users can uninstall all the applications they don't want on their computers," he said.

Add a Comment (34 Comments)

BetaNews reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic. Foul language and personal attacks will not be tolerated.

Name (required):

E-mail (required):

Enter Your Comment:

By Doctor K

edited Dec 25, 2007 - 12:01 AM

I have a newly purchased HP Pavillion. Prior to this I have been using Dell for over 15 years. As part of the Vista installed software, AOL was on the hard drive which I would never use in a million years. Nevertheless, when I attempted to uninstall over 10 times, I discovered it was STILL on my Hard Drive.....

After viewing my hard drive with hidden files and extensions visible, I discovered that there
are Gigabytes of useless AOL data on my hard drive in the form of database files and other junk, however, I don't know if I delete them if there are any consequences.

Any comments on how to purge these files safely.

Thank you,

Doctor K

Score: 0

By TomA102210

posted Aug 31, 2006 - 1:33 PM

AOL is dead in the water!

---------------------------------------------
Quite the contrary. They're doing quite nicely.

Score: 0

By KSzostek

posted Aug 30, 2006 - 8:56 PM

AOL is dead in the water!

Score: 0

By cranbers

posted Aug 30, 2006 - 8:27 PM

Yeah I have noticed this ever since 9.0 came out however long ago that was. talk about annoying, you have to go to add/remove and get rid of it all. Why is the sol screen savor installed by default? Do they think people are stupid and won't be able to do a custom install? Let's just assume all our users are dumb, which seems to be true. We can't offer anything that is as confusing as a custom install.

Also I love the fact that after you tell it to create a new account, you can't back out of it. You have to ctrl alt del and end task to get rid of aol and retry.

These are just the many reasons why aol is going downhill fast. They suck, what more can you say. Also the free version of aol doesn't have chat rooms anymore, want to tell me the point of aol now then? making internet buddies was the only reason I ever used it and well, it is completely useless now.

Score: 0

By macbuiltt

edited Aug 29, 2006 - 4:48 PM

No surprise to me. Had to have a friend rebuild my system a year or so ago. Told me then it was because of all the stuff AOL had installed.

Score: 0

By PC Rat

edited Aug 30, 2006 - 2:48 AM

...

Who would've thought that AOL would
do something like ~this~ ?

...

The Computer Rodent

...

Score: 0

By RootWebGod

edited Aug 30, 2006 - 6:01 AM

It would seem you love to spam your rodent droppings via signature around here.

It would also seem I'd rather troll than be of any use tonight. ;)

Score: 0

By foxfyre

posted Aug 29, 2006 - 10:56 PM

"The uninstall flaw relates to the November 2004 upgrade"

Since BetaNews has experienced a bug disallowing replies and edits (funny how that is not news!!!) I am replying here...

So the uninstall flaw is from November 2004! And they are responding swiftly now, almost 23 months later instead of, I retract my comment. They are indeed responding VERY quickly to a KNOWN bug!!

Pardon me as I saddle my very trustworthy snail "Lightning" and ride off in swift pursuit of a solution!

...23 months, 35+ months...who cares!? After EITHER delay, the point has been MISSED!

Score: 0

By The MAZZTer

edited Aug 30, 2006 - 9:00 AM

Uninstall flaws are not news. Most uninstall routines are not rigorously tested because the company is either going to be arrogant enough to believe you'd never want to uninstall their product, or apathetic enough to not care what state your computer is left in when you DO.

This is why I like to use NSIS in my prjects, the uninstaller is generated, for the most part, automatically with minimal scripting. Less room for error.

Score: 0

By RootWebGod

edited Aug 30, 2006 - 6:00 AM

Replies work just fine. Go "fix your sh-it" as we say around here. :)

Score: 0

By foxfyre

posted Aug 30, 2006 - 12:32 PM

Let me go v e r y s l o w l y this time for those not quite so swooft here.

First, there HAS been an intermittent site problem regarding replying and editing. If you are ignorant of it - well, you are ignorant and obviously your sh!t is working, as you represent it exceptionally well.

Secondly, my point was and still is, whether it is ~2 years or ~3 years, taking that long to respond to a problem that has been known for that long (as some have pointed out - ONLY since Nov 2004!!!) is TOO freaking long!

Score: 0

By dhjdhj

posted Aug 30, 2006 - 10:27 AM

Well, there's SOMETHING wrong. If I click on Post Reply, I get the following error message:

Error 404: Not Found
The requested URL /article//1156876704?do=reply&reply_to=396291 was not found.

Not the DOUBLE slash after the 'article' folder.

I had to manually edit that slash out so I can reply.

However, I then reloaded the page and now the Post works fine. So I'm a little baffled as to what happened and why.

Is it possible that there was some javascript being used and an incorrect version was in my cache? I'm using Firefox on Mac OS X

Score: 0

By Jordanr05

posted Aug 30, 2006 - 10:35 AM

Nope i'm using IE7 on XP and am getting the same screwy error as you - sometimes it works tho.....weird.

Score: 0

By PC_Tool

posted Aug 30, 2006 - 12:26 PM

I tested this in IE, Opera, and Firefox. (I didn't test K-meleon or Mozilla since if it's broke in firefox...)

Get the error frequently in all browsers. Closing the tab / window / etc and going back tot he topic via the main page fixes it quite often for me, but sometimes it takes several attempts.

Waiting works well also. If you get it, wait 10 minutes. If your comment was *really* that important....try again. ;)

Score: 0

By dhjdhj

posted Aug 30, 2006 - 12:54 PM

Or just edit the URL to delete one of the slashes

Score: 0

By PC_Tool

edited Aug 30, 2006 - 2:36 PM

D'oh!

To tell the truth, I never even glanced at the URL. Feeling a bit lazy today...

Heh (Hey fewt!)

Score: 0

By Jordanr05

edited Aug 30, 2006 - 10:36 AM

I for one am going on the record to say I LOVE USING AOL 9.0. It's fast, secure, and full of amazing features. So what if it doesn't uninstall everything and leaves your computer slow as a** - that's what formats are for. You guys are just a bunch of whiners that can't handle how amazing the AOL experience truly is.

. .
. .
. .
. .
. .
. .
. .
. .
. .
Note - I'm just playin' AOL is the biggest POS ever created. If you use this software i'm going to run over your dog.

Score: 0

By RootWebGod

posted Aug 30, 2006 - 5:57 AM

So you are very plain; okay.

I realize you meant playin'.

Score: 0

By Jordanr05

posted Aug 30, 2006 - 10:36 AM

LOL slow day?

I fixed it of course ;)

Score: 0

By PC_Tool

posted Aug 30, 2006 - 12:27 PM

Thus making his comment completely irrelevant, you insensitive jerk!

;P

How'd you like it if I made all of your comments irrelevant?

...oh, wait...

*grins*

Score: 0

By Ramhound

posted Aug 29, 2006 - 5:17 PM

Is this actually something recently posted?

I am confused how this couldn't have been reported till 2 years later.

Score: 0

By foxfyre

posted Aug 29, 2006 - 4:35 PM

"AOL explained that its failure to uninstall completely was a KNOWN FLAW in the uninstaller in which two executable files remain, even after the computer is restarted. The company was taking steps to address it...

"It should be noted that AOL 9.0 has been available SINCE 2003, with the latest update coming in November 2004."

"...Palfrey said the group was very impressed by AOL's QUICK RESPONSE and its commitment to address problems..."

If the version has been out since 2003, and the flaws have been known, and they are being so quick to respond to them...how does one respond in a slow manner?

Score: 0

By simonw

posted Aug 29, 2006 - 5:33 PM

The uninstall flaw relates to the November 2004 upgrade

Score: 0

By ZenWarrior

posted Aug 29, 2006 - 4:21 PM

I'm shocked! Shocked to find "badware" in AOL! ("Here are your winnings, sir.") Sorry, kbsoftware. I couldn't resist the "Casablanca" paraphrase.

Jeesh, I cannot believe this is being reported only now. I've been hand-cleaning registries after AOL uninstallations for years. That someone of note has only just noticed is the truly shocking news here.

So let's see. AOL is busted for not canceling users' accounts. AOL is [finally] "busted" for malware. AOL is busted for releasing users' search data, enabling one individual to actually be identified. No wonder AOL is going bust! And, it's no wonder they're now having to give their junk away.

Score: 0

By sophist_dreams

posted Aug 29, 2006 - 4:18 PM

AOL puts bad things on your computer........ This is news?

Score: 0

By falconfox

posted Aug 29, 2006 - 4:09 PM

This is rediculous. I just read the report and i am just glad that i don't use AOL software. I hope AOL fixes these problems becuase that is just dishonest.

Score: 0

By kbsoftware

posted Aug 29, 2006 - 4:09 PM

I'm shocked, I'm surprised, I can't believe it
Note the sarcasm :)

AOL sucks worst then a $5 hooker.

But at least if you have enough of the AOL cd's you can build a lamp with them
http://www.teamhackaday....um/viewtopic.php?t=1551

So at least they were useful for something lol

Score: 0

By Cyklone

posted Aug 29, 2006 - 9:55 PM

Hmm... I have actually had a damn nice suck from a $5 wh***!

I think AOL sucks worse than a 50ยข wh***!!

Score: 0

By sanawar

posted Aug 29, 2006 - 8:59 PM

I agree 100%. The success AOL had once upon a time just went to their heads!

Score: 0

By jbaltz69

posted Aug 29, 2006 - 3:55 PM

AOL sucks and has sucked since the mid 90's. If you still use it, you should be ashamed.

Score: 0

By TomA102210

edited Aug 31, 2006 - 1:41 PM

AOL sucks and has sucked since the mid 90's. If you still use it, you should be ashamed.
-----------------------------------------------
Please tell us why? I bet you can't put up one cogent argument. Saying anything sucks doesen't say anything intelligent much less worthwhile. Proud AOL subscriber here.

Score: 0

By spiked

posted Aug 29, 2006 - 3:51 PM

I think we should use "crapware" to refer to software which doesn't actually have malicious intent but throws a bunch of crap on your system either carelessly or thoughtlessly. Although AOL should be slapped silly, this isn't a criminal act. Save "malware" for the criminals who are trying to steal your identity.

Score: 0

By splitsec

posted Aug 30, 2006 - 10:43 AM

Spiked: They didn't use "malware" the name of the coalition is "stopBadware.org" and I think we can all agree that AOL is BAD, and not just because of the flaws mentioned in the article.

The only thing I have found worse than a machine installed with AOL, is one that has AOL and RealPlayer installed. They should just include the format command in the install package to save people time.

Also, I agree, responding to a known issue from November 2004 now is NOT a quick response. What this does show is that legit companies (did I just call AOL legit? Sorry.) will react to the negative publicity that is generated from this stuff. Unfortunately there are a LOT more fly by night operations who couldn't give a crap, and thus are installing this s**t on people's machines in the first place.

Score: 0