Jump to content
IObit Forum
Top Free Driver Updater Tools Best 25 PC Optimization Software Best 22 Antimalware Best 22 Uninstaller Software IObit Coupons & Discount Offers PC Optimizer

Rogue/Misleading/Scareware that are not false positive


Recommended Posts

Recently, we found that there are many Rouge/Misleading program on the internet, they often use Google Adwords, Yahoo Overture to place an ad then bring user to their website.

 

Some user even paid for those software. Unfortunately it's not false positive, but they are rogueware.

 

There are 2 programs like what I said above, they are "Registry Easy" and "Registry Winner".

 

First, Registry Easy is the clone of known rogueware "Registry Great", please check the following page:

 

http://www.411-spyware.com/remove-registry-great-v5-0

 

http://www.spywaredetector.net/spywa...ry%20Great.htm

 

http://www.pcthreat.com/parasitebyid-6838en.html

 

And there is a page that tell us how to remove Regstry Easy:

 

http://www.scanspyware.net/info/RegistryEasy.htm

 

http://www.spywaredetector.net/spyware_encyclopedia/images/RegistryGreat.gif

 

http://www.registryeasy.com/images/SHOTS/shots_scan_finish.gif

 

So, we can confirm that Registry Great is a fake registry cleaner, it gives misleading result to goad user to purchase it. Full of the fake error and alarm, it's a rogueware.

 

From the screenshot and the file MD5 result, you can see that Registry Easy is just Registry Great! And these 2 products are made by the same author. They changed the name and the image, they are cloned products!

 

This is the proof why we think Registry Easy is Rogueware.

Link to comment
Share on other sites

Others:

 

"Registry Winner"

 

http://www.registrywinner.com/screenshots_img/rw_small.gif

 

"Registry Victor"

 

http://www.registryvictor.com/images/mainface.gif

 

From the digital sinature and file info, we can see that they are one product with different name and a little change of the UI.

 

 

And more like "Fix Tool"

 

http://www.symantec.com/content/en/us/global/images/threat_writeups/2009-041715-3450-99.1.jpg

 

and "Perfect Optimizer"

 

http://perfectoptimizer.com/images/Screenshots/0.jpg

 

These cloned programs report false or exaggerated errors on the computer. Then the user is prompted to pay for a full license of the application in order to remove the threats.

Link to comment
Share on other sites

  • 1 month later...

Here is the reason why they should be deleted.

 

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-041715-3450-99&tabid=2

 

The program reports false or exaggerated errors on the computer, the user is then prompted to pay for a full license of the application in order to remove the threats.

 

Cheat user for money, isn't it a threat? The first generation of threat is Virus that just damage computer, delete data. Then the second generation is Spywre, Adware that generate money from popup and advertisement. And the third generation of threat is rogueware, those program goal user to purchase, they use Google Adwords, Yahoo Overture to spam their product and then goal user to purchase their rogueware. That's the reason why more and more Antivirus product report them as threats. Registry Easy used to be clean, but now Symantec, NOD32, Kap and ect all detected it as threat.

Link to comment
Share on other sites

  • 3 weeks later...
  • 3 weeks later...
  • 4 months later...

PC Optimizer Pro, False-Positave?

 

Others:

 

"Registry Winner"

 

http://www.registrywinner.com/screenshots_img/rw_small.gif

 

"Registry Victor"

 

http://www.registryvictor.com/images/mainface.gif

 

From the digital sinature and file info, we can see that they are one product with different name and a little change of the UI.

 

 

And more like "Fix Tool"

 

 

 

 

http://www.symantec.com/content/en/us/global/images/threat_writeups/2009-041715-3450-99.1.jpg

 

and "Perfect Optimizer"

 

http://perfectoptimizer.com/images/Screenshots/0.jpg

 

These cloned programs report false or exaggerated errors on the computer. Then the user is prompted to pay for a full license of the application in order to remove the threats.

 

==============================================

 

TIM,

 

I would like to check if "PC Optimizer Pro" is a valid program, It seemes to have helped me but I am not sure. The log file showes all files as suspect!

Floyd

Link to comment
Share on other sites

  • 6 months later...
  • 8 months later...

After running my scan, it seems that I have a misleading spyware on my computer. I just want to check if 'Vista Anti-Spyware' is indeed a misleading spyware. Messages from this programs keeps popping up alerting me of spware.

 

Also, is there any way to get rid of this program?

Link to comment
Share on other sites

Guidelines for requesting malware removal assistance

 

After running my scan, it seems that I have a misleading spyware on my computer. I just want to check if 'Vista Anti-Spyware' is indeed a misleading spyware. Messages from this programs keeps popping up alerting me of spware.

 

Also, is there any way to get rid of this program?

Welcome to the forum yin :smile:

 

A quick search of the internet does indicate it is Rogueware (misleading)

Please follow the procedure in the thread Guidelines for requesting malware removal assistance and then wait for a Malware Fighter to respond.

 

All the best, woz of oz

Link to comment
Share on other sites

  • 5 years later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...