OpenDNS Says Google-Dell Browser Tool is Spyware

PetManimal writes "David Ulevitch, the founder of OpenDNS, claims that Google and Dell have placed 'spyware' on Dell computers. Ulevitch made the claim based on his observation of the behavior of the Google Toolbar and homepage that comes preinstalled on IE in new Dell machines. He says that a browser redirector sends users who enter nonexistent URLs to a Dell-branded page loaded with Google ads. Another observer, Danny Sullivan, says that this is a different result than what happens on PCs without the redirector. However, the original article notes that Ulevitch has a vested interest in the results of mistyped URLs."

Instructions to Remove

Anyone who's looking for a way to remove this, Dell's support site [dell.com] gives these instructions:

To uninstall the Google URL Assistant, perform the following steps:

1. Click Start and select Control Panel.
The Control Panel window appears.
2. Select Add or Remove Programs.
The Add or Remove Programs window appears.
3. Select Remove a Program.
The Add or Remove Programs utility window appears.
4. Click to highlight the URL Assistant program and click Remove.
5. Follow the instructions on the screen to complete the removal process.

However, a user on the bottom of one of the links reports a way to disable it (but leave it on your machine) if you want to keep it:

In Internet Explorer, click on Tools,Internet Options,Programs, Manage Add-ons. Look for the CBrowserHelperObject published by Dell, then disable it.

Personally, I've bought two computers from Dell a long time ago and the first thing I did, like a good little Slashdotter, was format it and install a real operating system. When my friend bought a Dell, I brought a case of beer over and we took his Windows install disc and we re-installed Windows. Why? Well, just because of all the crap software like this that somehow magically is installed on a new box. If I recall, he had a 30 day trial version of Norton Antivirus, a trial version of Nero, quicktime crap, one of the most heinous media applications I've ever witnessed (due to his sound card) & to top it all off they had some 30 startup entries in msconfig--over half of which I couldn't tell what they were!

Now I work for a fortune 500 company and guess what we do with every box we get from Dell? Re-image it.

Now, for the 99% other Dell customers, this is just purely unfortunate because I'm not so naive to expect everyone to know how or why they should take the above actions. I hope that all the virus scanning apps (HiJackThis, Lavasoft's Adaware, etc) get this thing because Adaware is about the most useful thing I can show my family how to use frequently enough to keep the computer protected.

This sounds a lot like something the old Gateways would do. Huh, I never would have thought Dell would reach that level but, well, here we are. The important thing is to factor this in when you're thinking about a new computer. Hopefully some competition will spring up for Dell and, you know, quality of the software (not just the hardware) will start to matter for Dell.

Re:Instructions to Remove

Dell Windows computers come with a program that updates some of the Dell crapware. I've heard this updater has recently starting installing new crapware without user confirmation.

Re:Instructions to Remove

hen my friend bought a Dell, I brought a case of beer over and we took his Windows install disc and we re-installed Windows.

i with you on the rest of the post, but as a good little Slashdotter you should know that the friend buys the beer.

Re:Instructions to Remove

i with you on the rest of the post, but as a good little Slashdotter you should know that the friend buys the beer.

Computers are the new automotives. I used to work with my dad on cars when I was younger and we used to drink beer while replacing someone's break pads/cylinders, changing their oil or rotating their tires. Sometimes we'd get daring and tighten someone's serpentine belt pulley.

Haggling over who buys the beer when it's a prime excuse for some guys to just sit around and shoot the shit isn't worth it. I'll buy the beer and I'll make sure it's something you've never had ... like a variant of Leinenkugal's or a nice Belgium White Wheat brew, you know something exotic. These days, a case of beer is a trivial amount of money for me but not for all my friends.

Computers are the new excuse to sit around and "bond" as corny as that sounds--like fishing or camping. Enjoy the excuse to stop and upgrade someone's ram, it'll make you feel useful. I'll bring the beer since I'm the one getting something out of the deal. If you haven't seen a friend in years, call them up and talk to them. If you want to hang out, ask them if their computer's running alright and offer to come over and help them out with the problems, everybody has them.

America has become too centered on who pays for what, I say relax and enjoy life before you die.

OT eldavojohn

Re:Instructions to Remove

"Now I work for a fortune 500 company and guess what we do with every box we get from Dell? Re-image it. "

If you are buying a bunch of boxes I heard you can send Dell your preferred image, and they'll image all of them for you.

This crapware matters because...

... not all users know how or what to uninstall - and some of it is virtually uninstallable.
By way of example; my Grandmother got a Dell. She's 80 odd, but can use a browser, email, etc. Her Dell was great - but she couldn't wo rk out why she wasn't able to receive emails. Time and again, she, or her friends would, with or without telephone support - would configure Outlook Express correctly - only to find that that it kept changing the POP3 server URL. I gave her remote assistance - and could swear it was working; but every time she told me it wasn't owrking, sure enough - the POP3 details had changed. Eventually, I tracked it down to McAfee which had a year's subscription to anti-virus; but 30 days' subscription to an entirely unnecessary spam blocker. A bug in their spam blocker meant that it correctly diverted all attempted POP3 connections to itself; but then screwed up the address of the actual POP3 box and couldn't actually connect. Of course, it only inserted itself at boot time - so every time I'd fixed it by remote desktop it looked great; till Gran rebooted...
I disabled this - but only after Gran had basically been emailless for 3 weeks. Lo and behold! On day 30 - it suddenly prevented here using email again - this time because its license had expired - so it refused to allow her to use her email app - even without it! Cue - Add/Remove Programs. Only it wouldn't allow itself to be removed because its AntiVirus companion was running... it took me hours to clear out this crap. And yet - without me doing it; Gran couldn't get her email, first because of their sloppy coding - and then because of their "license expiry" hijack.
That's why crapware preinstall should be banned. By all means - include a CD or a link to a website where I can choose to download trials - but preinstalling them is outrageous. Imagine if a car came with a pre-installed alarm system which wouldn't let you drive the car without getting out your credit card or a screwdriver?

Can you really blame google

This seems like junk that Dell have installed to make some cash one the side. If firefox bundled the same dns hijacker then who would you blame? Firefox or google?

Just because google make the tool doesn't mean its their fault that it is installed by default in a spywareish fashion.

When I work on a Dell ...

... the first thing I do for my clients is either clean up all that crap or reinstall the OS (depending on which one will be faster and cheaper for them). I doubt Dell installs this kind of sh!t (and all that other crapware) on the computers their employees use ... Google probably doesn't either.

Obligatory Google Reality Check

Google is a publicly traded company and as such here's what's important to them.....

Making money for their stockholders.

That means doing things like creating spyware if it helps their bottom line. The mantra of "Do no evil" becomes null and void once you become a publicly traded company. They should change their motto to "We do less evil than everyone else".

Google is going to do what is best in their corporate interest. Surprised? Don't be. It's business

Re:Obligatory Google Reality Check

Some would argue that doing no evil will prevent alienating consumers and customers, and thereby keeps the bottom line from dropping.

OpenDNS is bummed

The issue here is that Google / Dell beat OpenDNS to the punch. Both accomplish the same purpose: when a user types a malformed URL into the address bar, they get an "enhanced" experience.

OpenDNS is bummed that Google figured out a way to make money off the proposition. OpenDNS should have thought of that first.

OpenDNS is not open

Dell is "monetizing" mistyped URL traffic, like OpenDNS. The customer has a choice which DNS server he uses and which preinstalled software he gets with a new computer (by choosing different vendors). Both do the same, for the same purpose. If I had to choose between the two, I'd choose Dell. At least they don't fly under a false flag, like OpenDNS, which only claims to be Open for marketing purposes.

Kinda fitting

http://www.iwebtool.com/domain_lookup?domain=www.g oogle.com [iwebtool.com]

Age of domain 9 year(s), 9 month(s) and 9 day(s) - Online since: 15-Sep-1997

P.S. Roll your monitor 180 degrees.

Re:Kinda fitting

Some may say that was coincidence. Well here's the creepy part:

Take the number of days Google have public (2321), multiply by the number of Chinese people imprisoned thanks to Google (7), multiply by the number of web pages that Google indexes (11,029,291,583), divide by Nostradamus' number that he foretold would mark the beginning of the end (10,392), and round to the nearest 6 (6 as in 666). Now simply base64 encode the number, and you get DLOeVFT0501l==, rearrange the letters and you get "D0LOTSOFeV1l".

This has nothing to do with Google toolbar...

... Or at least _not only_ The same behaviour happens on my company issued Dell D820. It comes loaded with IE6 and NO Google toolbar and yet when I mistype a URL I do not end up at the MSN search page like on any other IE installation! Instead IE redirects me to a Dell branded Google search page full of Google commercials.

Claim is complete FUD

The gist of the 'Spyware' claim comes from OpenDNS claiming the error redirecting service from Google

has no clear name and is very hard to uninstall

Complete FUD. The service is called "Browser Address Error Redirector" - which is a completely accurate and clear name for the service, and to remove it, you uninstall it from the Add/Remove Programs dialogue, as you would any regular peice of software.

I'm sure slashdot denizens will have a good time discussing how useless the bundled software and trialware that comes with Dell computers is, and how the sensible thing to do is reinstall from scratch, but that's been the case for a while. There is zero story here.

Re:Claim is complete FUD

"Browser Address Error Redirector"

yea do you HONESTLY think that you average Joe user would uninstall a program with such a scary name? thats if they even understand 1 of the 4 words in that name!

Re:Claim is complete FUD

Are you being sarcastic?

Browser - "What's a browser? You mean, like, the internet?"

Address - You are telling me that people who can't tell difference between a search bar and an address bar know what an internet address is?

Error - Sounds scary...

Redirector - "Redi-what?" (I very much doubt average user knows what's a redirect, you can as well tell them it polynormificalizes their antroendoretarterons, it does the same effect)

Re:Claim is complete FUD

Wrong.

It's highly unusual for a piece of software to not mention who put it there. Look at your other Google software you have installed. Do you have "Desktop" installed or do you have "Google Desktop?" Does it say "Toolbar" or does it say "Google Toolbar?"

Oh wait, I know what kind of software hides things like that... software that is trying to be opaque and hidden.

-davidu

Re:Claim is complete FUD

How about "Google Website Address Assistant"? I don't know about you, but my add/remove programs list gets very long very fast, and something that fits into an alphabetical scheme with a clear indication of who put it there seems better than what they're using.

Re:Claim is complete FUD

I recently purchased a Dell M2010 and noticed this "problem". It bugged me but I found no obvious way to shut it off, including the add/remove programs suggestion mentioned in the article. After reading this article I did a little more poking around and discovered that Dell is now utilizing a browser add-on called CBrowser Helper Object (or something close to that) to perform this functionality, which I promptly disabled. The point is this is not an obvious fix and Dell shouldn't be doing it anyway. PC manufacturers need to really stop loading the system up with crapware and silly little "branded experiences". I have utility programs on my Dell that basically mimic the basic functionality for some things already available in Windows. The biggest difference is Dell has their programmers "design" hideous interfaces that make absolutely no sense whatsoever and redirect the user to these utilities at every chance, just to get in yet another "branded experience". My experience thus far has been great computer, now how can I go about obtaining another clean copy of Windows Vista Ultimate to replace the shit Dell installed.

Not spyware

The fact that it sends you to a custom page if you make a URL typo does not mean it is spyware. That's a visible change, and you would be hard-pressed not to notice the effects of the software, or the fact that it sends you to a Dell branded page.

Since Dell ships it to you that way, you have no meaningful opportunity to establish an expectation that the Dell system behave differently. I.E. Since the software "comes that way" for you, it's not as if the software made a change to your computer without your permission.

So not only is it not spyware, it's not malware, or software that secretly modified your system without authorization (because, you see, your system came that way in the first place).

Don't Be Evil (unless the shareholders say so)

Google is beholden to capitalism. No longer a private organization, its board can be sued for making decisions that negatively impact the value of the stock.

Google's motto should now be "Don't be evil, unless it increases our stock price."

Face it geeks, your idols have jumped the shark.

Charter do it too

When I got broadband from Charter they changed my 404 settings to go to some Charter-specific search page and I had to go through some hyperlinked hoops to change it back to just plain old 404. I didn't look to see if they were earning from the pages.

Decrapifier

Lifehacker recently had an article on a piece of software called the PC Decrapifier [lifehacker.com]. I haven't tried it, but it seems relevant to this thread.

Re:Decrapifier

Ran this on my Father-in-Laws spanky new Dell. Clean as a baby's bottom after doing so. Dunno if this specific piece of software was on this system tho (did this over Christmas). But, a VERY good piece of software whether it's a Dell, HP, Sony or other manufacturer to take your system back to the way it was before they got their hands on it :-)

a way to test

This claim may very well be FUD but there is a way for people to test. Just download a network packet capture program and look at the traffic being sent. I did this myself and didn't see anything untoward being sent nor did I see any gibberish traffic to indicate encryption. But, that isn't to say that I didn't miss anything when scanning the log of the output. Basically, anything offered by a for profit company for free, really is not. If the service were entirely gifted, the company would rapidly drift into the red. Also, read the EULA. I get scared by long convoluted statements which can be subjected to interpretation. I do like Dell hardware but the first thing I do when I get my dell is to delete the partitions, re-partition, and format the HDD. I recommend everyone doing the same.

Decrapify it

If you don't want to reinstal: http://www.pcdecrapifier.com/ [pcdecrapifier.com] My mother in law bought one. Now I am used to your anti-virus no longer getting updated if you don't pay. But when her spamkiller expired, her email stopped working . And I can assure you there is NO WAY she would have been able to fix that herself without paying.

David Ulevitch is a hipocrite

Using OpenDNS redirects mistyped URLs to their own site.

http://www.opendns.com/faq/#how_does_opendns_make_ money [opendns.com]

How does OpenDNS make money?

OpenDNS makes money by offering clearly labeled advertisements alongside organic search results when the domain entered is not valid and not a typo we can fix. OpenDNS will provide additional services on top of its enhanced DNS service, and some of them may cost money. Speedy, reliable DNS will always be free.

Now, to be fair I use OpenDNS at home, but I find it hard to take this kind of warning from a person who makes money the same way.

Re:David Ulevitch is a hipocrite

Their product seems to use e.g. resolver1.opendns.com (208.67.222.222).
If I use that as my DNS, and do a lookup for www.google.com, I get
redirected to a CNAME of google.navigation.opendns.com.
What's up with that? DNS hijacking, anyone?

OpenDNS uses javascript for its spyware

they track everything you do on their "guide" from what links you click on, when you exit the page, uses hidden iframes, the list goes on all 50+kb of script to help you just like Verisigns sitefinder helped,
what they do deserve credit for is convincing people clever enough to change their DNS settings that somehow breaking DNS in exchange for seeing adverts is a worthwhile tradeoff, just like spyware/adware convinces a user that viewing adverts for getting weather is somehow a good thing.

perhaps they should team up with new.net as they do the same just using a binary to help change those pesky dns settings

here's how to stop their crap

add this to your hosts file
127.0.0.1 guide.opendns.com

shortcuts?

anyone know if this breaks open dns's "shortcut" capability? if it does then it could be classed as malware.

So did Google actually write this?

I'm wondering who actually developed the software. Was it Google who developed it for Dell, or was it Dell who developed it internally and called it the "Google URL Assistant" because it redirects traffic to serve up Google ads which I presume it gets a cut off of. It's not clear if the name of the app means it was written by Google or if it just refers to what service Dell is redirecting to.

Hi, I wrote that post...

Hi guys,

Yesterday I got a lot of feedback from people who just assumed I was biased and an underdog out to complain about Google. This is not what it's about!

Here's what I mean:

Use the smell test. Does what Google is doing smell bad? Is it giving users a good experience?
Compare:

• http://www.google.com/hws/dell/afe?hl=en&s=http:// microsoft.xom [google.com]
• http://www.google.com/hws/gateway/afe?hl=en&s=http ://microsoft.xom [google.com]
• http://www.google.com/hws/sony/afe?hl=en&s=http:// microsoft.xom [google.com]
• http://www.google.com/hws/emachines/afe?hl=en&s=ht tp://microsoft.xom [google.com]
• 
  with
  
• http://www.google.com/search?hl=en&q=microsoft.xom &btnG=Google+Search [google.com]

(and if you want to see ours)

• http://guide.opendns.com/?url=microsoft.xom [opendns.com]

If you just compare what google is doing to their own users you'll see that they are showing a terrible experience to the users who are Locked-In versus the users who have the choice to use any search service.

Thanks,

davidu

Re:Hi, I wrote that post...

Okay so you have showed that some people dislike the results that google provides to is BRANDED websites. First off how much of that is Google and how much is the BRAND? Second what you describe IS NOT SPYWARE!! Where did that claim come from?

Re:Hi, I wrote that post...

Thanks for responding to this, but claiming that your monetized URL typo page is better than Google's hardly justifies your claims of spyware or lock-in. Every discussion of this article has been filled with stories of people who have removed the browser redirection. Let's face it, the sort of people that aren't afraid to use custom DNS servers usually also aren't afraid to remove programs from their computer. In fact, it seems like you used a lot of inflammatory language to mask what boils down to a simple advertisement.

And lost in all this is the fact that you seem to be redirecting google.com to your own servers. I really liked OpenDNS when it was just a DNS server, please trust your users to be able to follow instructions and stop intercepting their google queries.

Same as Microsoft?

Internet Explorer has always redirected you to Microsofts homepage in some way, why shouldn't Dell/Google be allowed to do the same?

That is why...

when I consult with my customers on Dell purchases, I advise them to bring it to my shop to work on first thing. I boot it up, go through the setup for them, and remove Google desktop / toolbar (why IE7 has pop up blockers, anti phishing, and a search bar, and Firefox has all that and more) and then towards the bottom of a fresh Dells add remove programs list is "Search Assistant." Remove it, because an end user doesn't need the extra junk installed.

Deceptive article!

Setting aside the fact that using IE at all is the best way to get infected with spyware in general[1], the alternative to Dell's site is NOT Google's normal page.

The only way to get to Google's page from Internet Explorer in its default configuration is to explicitly go to google.com, and with the redirector in place you still get to the regular google home page if you do that.

If you open up Internet Explorer without the redirector and type a "keyword" into it, you normally end up on Microsoft's search engine.

Given the alternative of going to MSN.com or a Dell-branded google.com, I know which one I prefer.

[1] If you care you should be using Firefox which (for all its flaws) has a design that's many times more secure than IE...

Google/Dellbar also overrides company Intranet

I had to do some network setups of new Dell machines with the toolbar preinstalled. The redirector was actually a huge headache because it overrode the instructions issued when a machine was attached to the server. So instead of automatically redirecting users to the company's intranet, they found themselves getting sent to the Google/Dell custom page. Definitely did a number on my trust of Google.

Just another Arugment...

Just another argument...
for FireFox.

Way too many typosquatters

Way too many people are into typosquatting now. From OpenDNS to the "toolbar" guys to the guy who paid off the government of Cameroon (try anything in ".cm"), there can now be several layers of typosquatting between the user and the actual domain. At least we got Network Solutions to back off from their attempt.

Search may be coming apart. There are too many people trying to "game" the search systems now. "Search engine optimization" used to be viewed as evil and was done by low-rent operations. Now we have publicly held companies (Marchex [marchex.com], ticker symbol MCHX) formed just to create dummy domains. Collactive [collactive.com], the Digg spammer, just got venture capital from Sequoia Ventures. Computer vendors load up their preinstalled machines with unwanted "toolbars", which, as this article mentions, produce mostly user-hostile information. All the sources of information which drive search engines, from inbound links to user ratings, are now being spammed by sizable companies. It's a big change from the situation two years ago, when the troublemakers were all little guys with limited resources.

It's going to get worse before it gets better.

End of all problems

Just format drive C:. No more of this 'spyware' business you Windows users speak of.

Always hated Google

Google plans to take over the internet like Wal-Mart took over retail. You cant easily boycott it, its everywhere, everyone uses it, and it kills smaller competitors like human vs. ants. And its based on capitalism, which Bit-Torrent users everywhere grimace at.

Ummm... pot, kettle?

I use OpenDNS at home, because I find it faster than my ISP DNS, and I don't really mind the siteminder-like tricks they play with mis-typed URLs for two reasons - first, I find their search results to be accurate (I think they mus be powered by Yahoo or Google). Second, I installed them *myself*, and I cna uninstall them myself.

But seriously - this Dell/Google thing is the EXACT same idea. It is easy to uninstall and I can see no one hiding it's existance. If OpenDNS has any complaints about it it is just because they were not chosen for the factory install!