{"id":4616,"date":"2018-08-27T07:50:10","date_gmt":"2018-08-27T12:50:10","guid":{"rendered":"http:\/\/blog.zoha-islands.com\/?p=4616"},"modified":"2018-08-27T07:50:10","modified_gmt":"2018-08-27T12:50:10","slug":"secret-foistware-blocker-in-windows-10","status":"publish","type":"post","link":"https:\/\/zoha-islands.com\/blog\/secret-foistware-blocker-in-windows-10\/","title":{"rendered":"Secret Foistware Blocker in Windows 10"},"content":{"rendered":"<p>Defender, the security software built into Windows 10, has a hidden setting that will block installation of programs that try to install themselves during another program\u2019s installation. This feature is the answer to one of my most fervent tech prayers! I also have a solution for people still using Windows 7 or 8. Here&#8217;s what you need to know&#8230;<\/p>\n<h2>How to Block Unwanted Software<\/h2>\n<p>When I download and install a \u201cfree\u201d program, I need the concentration of a brain surgeon. That\u2019s because many free programs try all sorts of tricks to install other programs that come along with the free program\u2019s installation file. I\u2019m sure you know what I am talking about, but here is a clear-cut example:<\/p>\n<p>The installer app of ImgBurn, a free optical disk burning program contains \u201cInstallCore,\u201d a program that tries to install additional software on your PC as you click through the ImgBurn installation screens. The PUA (Potentially Unwanted Apps) may or may not be things that you want or need. InstallCore inserts into ImgBurn\u2019s installation screens tiny check-boxes already checked, which purportedly represents your conscious decision to allow the PUAs to be installed. <span id=\"ezoic-pub-ad-placeholder-111\" class=\"ezoic-adpicker-ad\"><\/span><\/p>\n<p>This dirty trick works on many people who don\u2019t pay close attention to all of the tiny print, icons, check-boxes, \u201cInstall\u201d buttons, and other distractions that appear during the installation of ImgBurn, and many other freebies. The more unwanted &#8220;foistware&#8221; that gets installed, the more money the authors of the software make. It\u2019s an evil, underhanded tactic that should be stopped.<\/p>\n<p>I&#8217;ve been warning folks about foistware for at least 5 years, but the problem is not going away. So it&#8217;s up to you to be aware, diligent, and equipped with the proper tools to prevent the installation of unwanted (and potentially malicious) software on your computer.<\/p>\n<p>If you have Windows 10, you can configure Windows 10 Defender to block most apps that try to install themselves during another app\u2019s installation. With this option enabled, you will (for example) get ImgBurn and nothing else. You can start ImgBurn\u2019s installer and not have to watch it like a hawk, reading every character and inspecting every box or button that appears.<span id=\"ezoic-pub-ad-placeholder-117\" class=\"ezoic-adpicker-ad\"><\/span><\/p>\n<p>The trick is a registry modification. If the thought of tinkering with your system\u2019s registry dismays you, I have you covered with a .REG file that automatically does the necessary without error.<\/p>\n<p>If you know how to use the REGEDIT registry editing utility, open it and navigate to this key:<\/p>\n<p><b>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows Defender<img decoding=\"async\" loading=\"lazy\" class=\" wp-image-4623 alignright\" src=\"http:\/\/blog.zoha-islands.com\/wp-content\/uploads\/2018\/08\/windows-defender-300x134.jpg\" alt=\"\" width=\"421\" height=\"188\" srcset=\"https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/windows-defender-300x134.jpg 300w, https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/windows-defender-1024x458.jpg 1024w, https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/windows-defender-768x344.jpg 768w, https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/windows-defender.jpg 1200w\" sizes=\"(max-width: 421px) 100vw, 421px\" \/><\/b><\/p>\n<p>Under <b>Windows Defender<\/b> create a new DWORD named <b>PUAProtection<\/b> (if it does not yet exist). Set the value of <b>PUAProtection<\/b> to <b>1<\/b> to enable blocking of Potentially Unwanted Apps (PUA). (A value of <b>0<\/b> will disable blocking.)<\/p>\n<p>Reboot the computer to let the changes take effect. If you don\u2019t want to mess with REGEDIT, just right-click to download this .reg file, and then click &#8220;Save link as&#8230;&#8221; <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/windows-defender-antivirus\/detect-block-potentially-unwanted-apps-windows-defender-antivirus\" target=\"_blank\" rel=\"noopener\">Enable_Windows_Defender_PUA_protection.reg<\/a>.<\/p>\n<p>After downloading the .reg file, double-click it to apply the registry changes. Then restart the computer to let the changes take effect.<\/p>\n<h2>Pass the Caveat, Please <img decoding=\"async\" loading=\"lazy\" class=\"alignleft wp-image-4622\" src=\"http:\/\/blog.zoha-islands.com\/wp-content\/uploads\/2018\/08\/junkware-300x169.jpg\" alt=\"\" width=\"399\" height=\"225\" srcset=\"https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/junkware-300x169.jpg 300w, https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/junkware-768x433.jpg 768w, https:\/\/zoha-islands.com\/blog\/wp-content\/uploads\/2018\/08\/junkware.jpg 852w\" sizes=\"(max-width: 399px) 100vw, 399px\" \/><\/h2>\n<p>Microsoft\u2019s tech support note on this obscure feature of Defender explains that blocked apps are placed in the quarantine section so they won&#8217;t run. BUT\u2026 there are some exceptions.<\/p>\n<p>The tech support note goes on to say: &#8220;PUAs are blocked when a user attempts to download or install the detected file, and if the file meets one of the following conditions: The file is being scanned from the browser; The file is in a folder with &#8220;downloads&#8221; in the path; The file is in a folder with &#8220;temp&#8221; in the path; The file is on the user&#8217;s Desktop; The file does not meet one of these conditions and is not under %programfiles%, %appdata%, or %windows%. &#8221;<\/p>\n<p>So if a PUA is a new one that Defender does not yet know about, or if it is not in any of the locations specified above, it will slip past this PUAProtection. But PUAProtection should catch most of the pesky toolbars, weather apps, and other junkware that useful free apps try to foist onto users.<\/p>\n<p><b>Also important to note<\/b> is that Defender defers to any third-party anti-malware program you may be running, so <u>this junkware protection is inoperative unless Defender is your only security suite.<\/u><\/p>\n<h2>Another Option to Block Foistware<\/h2>\n<p>SO\u2026 if you&#8217;re not running Windows 10, or you don&#8217;t feel like fiddling with your Windows registry, or you are running Windows 10 with a third-party security tool such as AVG, Avast, Avira, Bitdefender, etc., then you will need another tool to block unwanted software. A nifty free service called <a href=\"https:\/\/ninite.com\/\" target=\"_blank\" rel=\"noopener\">Ninite<\/a>, which makes it easy to safely install new software, and keep it all up to date.<\/p>\n<p>Ninite lets you choose from a menu of about 100 popular free software titles (including ImgBurn), bundles them up into a single download, and installs them with a single click. Ninite will automatically say no to toolbars and extra junk, and will not bother you with any questions during the installations. It also skips any reboot requests from installers. For security, Ninite downloads each app from the publisher&#8217;s official site, and verifies the digital signatures.<\/p>\n<p>Have a Great Week from all of us at ZI!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Defender, the security software built into Windows 10, has a hidden setting that will block installation of programs that try to install themselves during another program\u2019s installation. This feature is the answer to one of my most fervent tech prayers! I also have a solution for people still using Windows 7 or 8. Here&#8217;s what &hellip; <a href=\"https:\/\/zoha-islands.com\/blog\/secret-foistware-blocker-in-windows-10\/\" class=\"more-link\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":4620,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"_links":{"self":[{"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/posts\/4616"}],"collection":[{"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/comments?post=4616"}],"version-history":[{"count":0,"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/posts\/4616\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/media\/4620"}],"wp:attachment":[{"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/media?parent=4616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/categories?post=4616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zoha-islands.com\/blog\/wp-json\/wp\/v2\/tags?post=4616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}