Potentially unwanted

Software that may be legitimate, but may also be unwanted

The term 'potentially unwanted' is commonly used to refer to software with potentially malicious, intrusive, fraudulent or simply irritating or timewasting properties. It covers a wide range of items commonly detected by security products, particularly in corporate settings, which cannot definitively be identified as dangerous, but the presence of which administrators may wish to be alerted to.

Adware and spyware applications, tools useful to hackers such as packet sniffers and port scanners, joke programs, chat software and even games are labelled by some products as potentially unwanted, despite having legitimate (in some cases stretching the term somewhat) uses. Different products use slight variations in terminology, so the 'potentially unwanted' may be followed by 'application', 'program' or 'software' (to form PUA, PUP, PUS), while others may use more exact references for different sub-divisions of the class, such as 'Hacker Tool', 'Risk Tool', or simply refer to them as 'Program'. In most cases default actions on encountering such items are likely to be less severe, and administrators may be able to deactivate such detection entirely or, if a stricter policy is in force, automatically remove all or some such items when discovered.

Quick Links

Poll
The Japanese government is reported to have commissioned a 'defensive virus'. Is 'defensive' malware ever a good idea?
Yes
No
I don't know
Leave a comment
View 10 comments

99 Subscription Promo

Virus Bulletin
In this month's magazine:
  • Living the meme
  • If Svar is the answer...
  • Static analysis of mobile malware
  • And the devil is six: the security consequences of the switch to IPv6
  • Behind enemy lines: reporting from the CCC 28C3 Congress
Virus Bulletin 02 2012
Subscribe now!

Virus Bulletin currently has 224,162 registered users.