ClassicPreferences
ClassicPreferences is a dubious program that can perform a multitude of intrusive actions when installed on the users' Mac systems. Applications of this type are rarely downloaded and installed willingly. That is why they are being spread via underhanded methods, such as bundling and fake installers predominantly. The goal is to avoid attracting the attention of the user towards the fact that an intruder application will be deployed to their Mac computers. The reliance on such deceptive behavior classifies these apps as PUPs (Potentially Unwanted Programs).
Once inside the system, ClassicPreferences will begin to monetize its presence. The application is equipped with both adware and browser hijacker capabilities. In practice, this means that it can deliver intrusive advertisements while also taking control over the user's Web browser to promote a sponsored address. The generated advertising materials can appear in numerous forms - pop-ups, banners, in-text links and more. Furthermore, the PUP may inject its advertisements into the sites viewed by the user, creating the impression that they originate from there.
As for the browser hijacker function, it will assert control over the homepage, new tab page, and the default search engine, and force all three settings to now open the promoted addresses. In the vast majority of cases, these browser hijackers are tasked with generating artificial traffic towards a fake search engine. ClassicPreferences is not an exception, as the search engine it promotes lacks the ability to deliver any results. Instead, it redirects the user's search queries through the legitimate search.yahoo.com engine.
Another worrisome aspect commonly associated with a PUP is the fact that it can be spying on the user's browsing activities. These dubious applications could be transmitting information about the sites visited by the user or the conducted searches continuously. In addition, numerous device details also can be uploaded to the remote server of the PUP's operators.
