I agree with everything you've written! All I wanted to make clear was that what Sourceforge is installing on people's systems is not on the same level as Duqu

I agree with everything you've written! All I wanted to make clear was that what Sourceforge is installing on people's systems is not on the same level as Duqu, for example. I get what you're saying regarding "if we just call it all malware, people will get upset when companies install it", but I see that as a dishonesty to the public. In the computer security industry, it's very tempting to sell fear -- it's immensely effective as a sales pitch, but it's not honest. We can do better, I think.