FrameFox: Nominated for the Most Aggressive EULA

[Jack]

Content source

https://blog.malwarebytes.org/security-threat/2015/11/framefox-nominated-for-the-most-aggressive-eula/

Sometimes, you need to read between the lines when going over an End-user license agreement (EULA), but FrameFox (aka Duquu) has passed that stage. They must rely on the fact that nobody ever reads them anyway.

EULA

The EULA for FrameFox can be found at www[dot]framefox[dot]com/#/terms if you can reach it. I have to point that out since Malwarebytes Ant-Malware Premiuim’s web protection blocks that domain. What immediately jumped out was this snippet:



Uninstallation and Disabling Methods


The User acknowledges and agrees that as some third-party applications do not allow FrameFox’s software install or run correctly, the User explicitly consents to FrameFox having rights in its sole discretion to in listed below but not limited to:


block, uninstall or change a third-party applications and files on the User’s computer which FrameFox finds incompatible with its software;

That is a direct threat to any anti-malware or other protection software trying to remove FrameFox from the user’s computer. They will remove you first if they get the chance. It goes on to list in which ways it allows itself to go about this:

• disable third-party application updates;
• disable startup programs in computer operating systems;
• modify DNS (Domain Name System) on the local system;

And then goes on to deny all liability for these actions. This is yet another example of adware that has the potential to leave the victims computer open to worse infections. So far I have not seen any examples of software that they choose to disable, but we are always curious to hear these from you.


Read more: FrameFox: Nominated for the Most Aggressive EULA

 

[Anupam]

For me it's a malware with EULA