PDA

View Full Version : RegistryCleaner32



mikey
2005-11-29, 15:53
Other than the associated messenger spam, can someone tell me what the 'threat' is with this product?

Buster
2005-12-01, 10:41
This program is being aggressively advertised through the windows messenger service and pretends to clean up the registry. Registry Cleaner finds a lot of bad programs on a fresh installed and clean machine. If you want to fix the alleged bad programs, you have to buy Registry Cleaner.

mikey
2005-12-01, 15:52
This program is being aggressively advertised through the windows messenger service and pretends to clean up the registry. Registry Cleaner finds a lot of bad programs on a fresh installed and clean machine. If you want to fix the alleged bad programs, you have to buy Registry Cleaner.
Hey Buster, thx for the heads up. I noted the spam in our dropped packet log and DLed to examine for malice. The new SSD sigs picked it up before I even got around to looking at it. Good work.

hoobmobile
2005-12-21, 16:10
My system has just been wrecked by a trojan, IRC/BackDoor.SdBot.FKS. This was immediately followed up messenger service messages claiming that Windows has found "Critical System Errors" and directing me to one of two sites, wxx.regwin32.com or wxx.uric.net. On reinstalling Windows I can't get on the net long enough to install a virus checker before this trojan comes down again. Links to antivirus websites are also blocked.

tashi
2005-12-22, 03:12
Hello hoobmobile.

I am not sure why you posted in False Positives/ RegistryCleaner32. :)

If you need help removing malware please go here and follow instructions.
Before you post a log (http://forums.spybot.info/showthread.php?t=288)

Start a topic here:
Malware Forum (http://forums.spybot.info/forumdisplay.php?f=22[/url)

Someone will then take a look at the system and advise you.

Regards.