Which of the following is an example of an application publisher including undisclosed additional software in an installation package?

A Potentially Unwanted Program (PUP), also known as a Potentially Unwanted Application (PUA), is the correct term for undisclosed additional software included in an installation package. PUPs are often bundled with legitimate, desired software and installed without the user's explicit or clear consent. While not always malicious in the same way as a virus, they can cause performance issues, display intrusive ads, or compromise privacy. Common examples include browser toolbars, adware, and system optimizers.

A. A virus is malware that self-replicates by infecting other files or programs. This is a specific behavior not described by the general bundling of unwanted software.

B. Ransomware is a type of malware that encrypts a user's files and demands payment for their release. It is a distinct and highly malicious threat.

D. A Trojan is malware that is disguised as legitimate software. In this case, the primary software is legitimate, but it contains additional, unwanted software.

1. Microsoft Corporation. (2023). Potentially unwanted applications (PUA). Microsoft Learn. Retrieved from learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/detect-block-pua. (This document defines PUAs as "a category of software that can cause your machine to run slowly, display unexpected ads, or at worst, install other software which may be more harmful or annoying").

2. Stallings, W. (2019). Computer Security: Principles and Practice (4th ed.). Pearson. (Chapter 6, "Malicious Software," distinguishes between different malware types, defining PUPs as software bundled with legitimate programs). This is a widely used university textbook.

3. National Institute of Standards and Technology (NIST). (n.d.). Glossary - Potentially Unwanted Program. Retrieved from csrc.nist.gov/glossary/term/potentiallyunwantedprogram. (NIST provides a formal definition consistent with the scenario).