ShadowWhisperer / BlockLists

DNS Block Lists
260 stars 32 forks source link

FP on driversupport.com #169

Open denbatch opened 1 week ago

denbatch commented 1 week ago

Hello: we're a consumer safety certification company (AppEsteem Corporation -- https://appesteem.com), and we've been certifying the DriverSupport/Asurvio apps for several years now (you can find the certified versions of their apps listed on https://customer.appesteem.com/certified).

Can you please remove driversupport.com from your list, or give us some information about why they're on the list, so we can work with them to clean up? We'd really appreciate it!

Thanks, Dennis Batchelder President AppEsteem Corporation

BTW: you may want to check out our Deceptor feed (https://customer.appesteem.com/deceptors) to find other bad actors to add to your list :-) We'd be happy to work with you, and share with you our free APIs for both our certified and Deceptor lists.

ShadowWhisperer commented 1 week ago

Hey, thank you for reaching out.

I have DriverSupport classified as both Riskware and PUP (Potentially Unwanted Program).

It was manually added to the list. I have seen it installed many times, where the customer "claims" they did not install it.

I cannot confirm if it is bundled with other software, if the customer doesn't know what they are doing, or if it’s installed by remote scammers. *I run a computer repair shop. (Primarily business, but also walk-ins)

I see Malwarebytes also classifies it as "Snake Oil". I agree. Completely unnecessary/waste of system resources.

https://www.malwarebytes.com/blog/detections/pup-optional-driversupport

Associated Domains (I've seen)

accountportal.driversupport.com
aloha.driversupport.com
apps.driversupport.com
cdn2.driversupport.com
cdn.driversupport.com
download.driversupport.com
dsone-fn.driversupport.com
dsone-web.driversupport.com
front.driversupport.com
poll2.driversupport.com
secure.driversupport.com

Similar: https://github.com/ShadowWhisperer/BlockLists/issues/136