ConfigProgress

ConfigProgress is classified as a PUP (Potentially Unwanted Program) that is targeted towards Apple, and more specifically, Mac users. The application relies on dubious distribution methods to spread itself, as users rarely download such products willingly. The two most common method abused by PUPs is attaching their installation to the installation process of another more popular freeware app or hiding inside fake software installers/updates. ConfigProgress has been observed to use fake Adobe Flash Player updates for proliferation. 

Once inside the user's computer, ConfigProgress will begin to perform the functions of both adware and a browser hijacker. The adware capabilities will start to generate unwanted and intrusive advertising materials that can even begin to overlay the content of the legitimate websites visited by the user. The advertising materials can take different forms - pop-ups, banners, surveys, coupons, etc. While ConfigProgress itself doesn't represent a threat to the computer, clicking on any of the presented ads could take users to unsafe third-party websites, representing a significant security risk. 

The browser hijacker functionality, on the other hand, will establish control over certain browser settings - the homepage, new page tab, and the default search engine. The goal is to set all of them to open a promoted address, usually that of a fake search engine. These engines lack the ability to produce search results on their own and instead take the search queries of the user and redirect them to a legitimate engine such as Yahoo, Google or Bing. Another option is to start a redirect chain that goes through several dubious search engines before reaching the legitimate one. Various advertisements and sponsored links can be injected into the list of search results. 

PUPs also can possess data-harvesting capabilities. The user's browsing activities could be monitored, logged, and then uploaded to remote servers. The collected information may include the browsing history, search history, clicked URLs, IP address, geolocation, ISP (Internet Service Provider) and more. 

Users should check their computers for suspicious applications that could be PUPs in disguise routinely and remove them as soon as possible.