How do you think about Rouge/Misleading Program?

[Tim Xue]

Recently, we found that there are many Rouge/Misleading program on the internet, they often use Google Adwords, Yahoo Overture to place an ad then bring user to their website.

 

There are 2 programs like what I said above, they are "Registry Easy" and "Registry Winner".

 

You can see that there are many clone product of each one I mentioned. These programs report false or exaggerated errors on the computer. Then the user is prompted to pay for a full license of the application in order to remove the threats.

 

"Registry Winner"

http://www.registrywinner.com/screenshots_img/rw_small.gif

 

"Registry Victor"

http://www.registryvictor.com/images/mainface.gif

 

From the digital sinature and file info, we can see that they are one product with different name and a little change of the UI.

 

About the "Registry Easy", it used to be named as "Registry Great".

 

And more like "Registry Fix"

 

http://www.symantec.com/content/en/us/global/images/threat_writeups/2009-041715-3450-99.1.jpg

 

and "Perfect Optimizer"

 

http://perfectoptimizer.com/images/Screenshots/0.jpg

 

So, those rougeware cloned and goad user to pay for it for fraud. Does anyone notice this kind of programs?

[solbjerg]

Great info Tim!!

Thank you!!

Cheers

solbjerg

 

 

Recently, we found that there are many Rouge/Misleading program on the internet, they often use Google Adwords, Yahoo Overture to place an ad then bring user to their website.

 

There are 2 programs like what I said above, they are "Registry Easy" and "Registry Winner".

 

You can see that there are many clone product of each one I mentioned. These programs report false or exaggerated errors on the computer. Then the user is prompted to pay for a full license of the application in order to remove the threats.

 

"Registry Winner"

http://www.registrywinner.com/screenshots_img/rw_small.gif

 

"Registry Victor"

http://www.registryvictor.com/images/mainface.gif

 

From the digital sinature and file info, we can see that they are one product with different name and a little change of the UI.

 

About the "Registry Easy", it used to be named as "Registry Great".

 

And more like "Registry Fix"

 

http://www.symantec.com/content/en/us/global/images/threat_writeups/2009-041715-3450-99.1.jpg

 

and "Perfect Optimizer"

 

http://perfectoptimizer.com/images/Screenshots/0.jpg

 

So, those rougeware cloned and goad user to pay for it for fraud. Does anyone notice this kind of programs?

[vman]

Yes, those things are hard core. They (the more recent ones) prevent the installation of malwarebytes or other common anti's and change the host files to redirect users from avira.com to some porn sight.

 

 

I hope spyware defender takes care of these. They're really hard to get rid of unless you have "other" methods. The common ones usually dont work, and most of the time, its nearly impossible to boot up the computer.

[sunny staines]

there was another called reg cure i thing was suspect too.

[detailer]

Buyer Beware

 

Actually RegCure is legit(virus free)-once owned by MS actually.The only thing they're guilty of is pumping up the error numbers to scare you into buying their product.A guy I knew used the free scan,freaked when he saw 900+ reg errors and bought it on the spot.After the install he scanned again and had about 400 errors! It did clean those up,but he never saw numbers that high again.So, if you want to clean out your registry,don't click on the "clean" or "repair" button,just enter your credit card number.:-P:-P Also,Tim,dozens of these can be found on Downloads.com within their 47,000 plus utilities freeware data base.

[vman]

Whats even worse, is those drive by downloads.

 

 

Killer.