PDA

View Full Version : Why is REGISTRYFIX.EXE a threat?



terrypin
2008-04-06, 00:45
Why does Spybot report RegistryFix.exe as a threat please? I gather it arises from a free registry repairing utility called RegCure, which has a poor reputation. Over-hyped, useless, grayware, etc. Lots of criticism found from a few minutes googling.

But I haven't seen a single solid piece of objective evidence (in contrast to idle rumour and speculation) that it is either a virus or a trojan or any other sort of malware. Is it?

If not, why does Spybot report Regfix.exe as a threat?

BTW, doesn't Spybot offer the option of studying details of its results? A single word 'RegistryFix.exe' doesn't tell you much. In some other programs I recall being able to read details of the entries. Maybe there's a setting in Spybot I've missed?

--
Terry, East Grinstead, UK

spybotsandra
2008-04-06, 15:35
Hello,

The reasons why Spybot - Search & Destroy detects this software are several ones:
There are anti-spyware tools like 1stAntivirus, 100PercentAntiSpyware, AdArmor, Ad-Protect, Ad-PurgeSpywarerAndAdwareRemoverPro, AdsAlert, ADS-Remover, AdvancedCleaner, AdwareAlert, AdwareBazooka, AdwareBot, AdwareDeluxe, Adware-Patrol, AdWare Pro, AdwarePunisher, Adware Remover, Adware Remover2007, AdwareSheriff, AdwareSpy, AdwareStriker, AdwareX Eliminator, AgentSpyware, AlfaCleaner, AntiSpyStorm, AntispywareBot, Antispywaresoldier, AntiSpyWare2007, AntiSpyZone, AntiVermeans, AntiVerminser, AntiVerMinsPro, AntiVirGear, Antivirus Gold, AntiVirusPro, Awola.Anti-Spyware, BPSAdwareCops, BPS AdwareStriker, BPS.SpyEliminator, BPS Spyware Cops, BPS Spyware Remover, BPS SpywareStriker, BPS.SpywareZapper, BreakSpyware, Cleanator, CleanSpaceUltimate, Contra-Spy, Contra-Virus, CyberDefender, DiaRemover, Doctor-Adware, Doctor-Adware-Pro,DoctorSpyware, DrAntispy, DriveCleaner2006, Easy-Spyware-Killer, ErrorClean, ErrorDoctor,
ErrorGuard, ErrorKiller, ErrorSafe, ErrorSmart, ErrorSweeper, ETD-Security-Scanner, EvidenceEraser, EyeSpyNow, ExpertAntivirus, FakeAlert, FakeAlter.cc, Fake.SpywareRemover, FixerAntispy, FlashDollars.AntiVirusProtection, FlashDollars.RegistryRepair, FlashDollars.SpywareRemover, Fraud.XPAntivirus, FroggieScan, Goodbye-Spy, IEDefender, KazaapAdwareAndSpywareRemover, KillSpy, LocusSoftware.BestsellerAntivirus, LocusSoftware.PCPrivacyTool, LocusSoftware.SecurePCCleaner, MacroVirus, MagicAntiSpy, MalwareAlarm, MalwareBot, MalwareBurn, MalwareCrush, MalwareScanner, MalwareWipe, MalwareWipePro, MalWarrior, Marketflip.FakeSearchAndDestroy, Maxion.MaxnetShield, MrAntispy, MySpyProtector, Neospace-Internet-Security, NoAdware, NousTech.SysCleaner, NousTech.SystemDefender, Nous-Tech.UCleaner, Nous-Tech.UDefender, Nous-Tech.UFixer, Nous-Tech.Ultimate-Fake-Security-Center, One-Shot-Antivirus, OnlineGuard, Pal-Spyware-Remover, PC-Health-Plan, PerformanceOptimizer, Pestbot, PestCapture, PrivacyControl, PSGuard, PurityScan, RazeSpyware, RegClean, RegistryBot, Registry Cleaner, RegistryClear, RegistryFix, RegistrySmart, RegRecall, RegSweep, RegSweep,Fake.SpywareRemover, Repair Registry Pro, SecureMyPC, ScanSpyware, Spionfrei, SpyAgent, SpyAnalyst, SpyAnyWhere, SpyAxe, SpyBlocs, SpyBouncer, SpyCleaner, Spycontra, SpyCrush, SpyDawn, Spydeface, SpyDefence, SpyDefender, SpyDestroy-Pro, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyHunter, SpyKiller, SpyLax, SpyLocked, SpyMarshall, SpyOfficer, SpyOnThis, SpyQuake, SpyRemover, SpySherrif, SpyShredder, SpySnipe, SpySoap, SpySpotter, SpyStriker, SpyTrooper, SpyVampire, SpyViper, SpywareAnnihilatorPro, SpywareBomber, SpywareBot, SpywareBOT.SpywareStop, SpywareCleaner, SpywareDetector, SpywareIsolator, SpywareLocked, SpywareLocker, SpywareNO!, SpyWareRemover, SpyWare-Secure, SpywareSheriff.FakeAlert, SpywareSoftStop, SpywareSolver, SpywareStormer, SpywareStrike, SpywareQuake, StartGuard, ShudderLtd.AntiVirusPro, SynergeticSoft.PrivacyDefender, SysProtect, SysRegistryCleaner, SystemDoctor2006, Trek Blue Error Nuker, Trojan-Guarder, TrueSword, TrustCleaner, UltimateCleaner, UltraSoft.Xlib, UtileProtection, VarioAntivirus, Vario.RogueAntiSpy, Virusblast, VirusBurst, VirusHeat, VirusLocker, VirusProtect, VirusProtectPro, VirusRanger, VirusRescue, VirusSchlacht, WareOut, WinAntivirusPro2006, WinFixer, WinHound, WinPerformance, WinSoftware, WinSoftware.WinAntiSpyware2006, WinSoftware.WinAntiVirusPro2006, WinSoftware.WinAntiVirus2006, WinSpyKiller, WinXDefender, WiperWizard, WorldAntispy, X-Con-Spyware-Destroyer, X-Spyware, XSRemover, YourSoft-AntiVS and YourSoft-AntiVT which have a very dubious or bad character.
They state to be an anti-spyware tool but employ questionable advertising methods: In the form of a PopUp they offer a scan of your system. They refer you to an infection of viruses and spyware on your system which is actually not true, because the listed items are not really on your pc. After downloading the software you can only scan for the threats. If the threats (pseudo-infections) are detected you have to register first and pay (up to $30) in order to remove them. Some of these dubious anti-spyware tools do also create a toolbar in IE and create recurring PopUps.

More dubious anti-spyware tools you will find here:
http://spywarewarrior.com/rogue_anti-spyware.htm

Best regards
Sandra
Team Spybot

terrypin
2008-04-07, 01:25
Thank you. I've duly deleted Regcure/Regfix. It is now a deceased, kicked-the-bucket registry cleaner.

--
Terry, East Grinstead, UK