Jump to content
IObit Forum
Top Free Driver Updater Tools Best 25 PC Optimization Software Best 22 Antimalware Best 22 Uninstaller Software IObit Coupons & Discount Offers PC Optimizer Mac Boost Advice IObit Coupons A Good Utility Program From IObit IObit Promo Codes IObit Coupon Codes IObit Coupons and Deals FAQs Driver Booster Pro Review

Rogue/Misleading/Scareware that are not false positive


Recommended Posts

Recently, we found that there are many Rouge/Misleading program on the internet, they often use Google Adwords, Yahoo Overture to place an ad then bring user to their website.

 

Some user even paid for those software. Unfortunately it's not false positive, but they are rogueware.

 

There are 2 programs like what I said above, they are "Registry Easy" and "Registry Winner".

 

First, Registry Easy is the clone of known rogueware "Registry Great", please check the following page:

 

http://www.411-spyware.com/remove-registry-great-v5-0

 

http://www.spywaredetector.net/spywa...ry%20Great.htm

 

http://www.pcthreat.com/parasitebyid-6838en.html

 

And there is a page that tell us how to remove Regstry Easy:

 

http://www.scanspyware.net/info/RegistryEasy.htm

 

http://www.spywaredetector.net/spyware_encyclopedia/images/RegistryGreat.gif

 

http://www.registryeasy.com/images/SHOTS/shots_scan_finish.gif

 

So, we can confirm that Registry Great is a fake registry cleaner, it gives misleading result to goad user to purchase it. Full of the fake error and alarm, it's a rogueware.

 

From the screenshot and the file MD5 result, you can see that Registry Easy is just Registry Great! And these 2 products are made by the same author. They changed the name and the image, they are cloned products!

 

This is the proof why we think Registry Easy is Rogueware.

Link to comment
Share on other sites

Others:

 

"Registry Winner"

 

http://www.registrywinner.com/screenshots_img/rw_small.gif

 

"Registry Victor"

 

http://www.registryvictor.com/images/mainface.gif

 

From the digital sinature and file info, we can see that they are one product with different name and a little change of the UI.

 

 

And more like "Fix Tool"

 

http://www.symantec.com/content/en/us/global/images/threat_writeups/2009-041715-3450-99.1.jpg

 

and "Perfect Optimizer"

 

http://perfectoptimizer.com/images/Screenshots/0.jpg

 

These cloned programs report false or exaggerated errors on the computer. Then the user is prompted to pay for a full license of the application in order to remove the threats.

Link to comment
Share on other sites

  • 1 month later...

Here is the reason why they should be deleted.

 

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-041715-3450-99&tabid=2

 

The program reports false or exaggerated errors on the computer, the user is then prompted to pay for a full license of the application in order to remove the threats.

 

Cheat user for money, isn't it a threat? The first generation of threat is Virus that just damage computer, delete data. Then the second generation is Spywre, Adware that generate money from popup and advertisement. And the third generation of threat is rogueware, those program goal user to purchase, they use Google Adwords, Yahoo Overture to spam their product and then goal user to purchase their rogueware. That's the reason why more and more Antivirus product report them as threats. Registry Easy used to be clean, but now Symantec, NOD32, Kap and ect all detected it as threat.

Link to comment
Share on other sites

The reason is not similar but rogue. I listed the similar products is to show you that they are the same vendor. As some AV detected them as virus, so the vendor change the name, the UI and made a different one to rogue once again.

Link to comment
Share on other sites

  • 3 weeks later...
  • 3 weeks later...
  • 4 months later...

PC Optimizer Pro, False-Positave?

 

Others:

 

"Registry Winner"

 

http://www.registrywinner.com/screenshots_img/rw_small.gif

 

"Registry Victor"

 

http://www.registryvictor.com/images/mainface.gif

 

From the digital sinature and file info, we can see that they are one product with different name and a little change of the UI.

 

 

And more like "Fix Tool"

 

 

 

 

http://www.symantec.com/content/en/us/global/images/threat_writeups/2009-041715-3450-99.1.jpg

 

and "Perfect Optimizer"

 

http://perfectoptimizer.com/images/Screenshots/0.jpg

 

These cloned programs report false or exaggerated errors on the computer. Then the user is prompted to pay for a full license of the application in order to remove the threats.

 

==============================================

 

TIM,

 

I would like to check if "PC Optimizer Pro" is a valid program, It seemes to have helped me but I am not sure. The log file showes all files as suspect!

Floyd

Link to comment
Share on other sites

  • 6 months later...
  • 8 months later...

After running my scan, it seems that I have a misleading spyware on my computer. I just want to check if 'Vista Anti-Spyware' is indeed a misleading spyware. Messages from this programs keeps popping up alerting me of spware.

 

Also, is there any way to get rid of this program?

Link to comment
Share on other sites

Guidelines for requesting malware removal assistance

 

After running my scan, it seems that I have a misleading spyware on my computer. I just want to check if 'Vista Anti-Spyware' is indeed a misleading spyware. Messages from this programs keeps popping up alerting me of spware.

 

Also, is there any way to get rid of this program?

Welcome to the forum yin :smile:

 

A quick search of the internet does indicate it is Rogueware (misleading)

Please follow the procedure in the thread Guidelines for requesting malware removal assistance and then wait for a Malware Fighter to respond.

 

All the best, woz of oz

Link to comment
Share on other sites

  • 5 years later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...