Spyware Cease: False Positive

Status
Not open for further replies.

networking00

New member
Operating System:Windows XP
Browser and Version: Firefox 3.0
Version of Spybot S&D: Spybot Search & Destry 1.6.2.46
Where did ther false positive occur: Scan result

Spyware Cease was detected and blocked as malware by Spybot S&D. When I update your database, I find that Spybot S&D detected Spyware Cease as malware. I think this is false positive, because I have intalled Spyware Cease on my PC for 3 monthes, and it works well for my PC.

Click here for more information about Spyware Cease
http://www.spywarecease.com/index.php


Please help
1. Why it has been listed within your virus database
2. How to get it off your program

If there is anybody i could contact directly, that would be great.
 
Last edited by a moderator:
Hello,

This is not a false positive.
The reasons why Spybot - Search & Destroy detects this software are several ones:
There are anti-spyware tools like:

1stAntivirus, 100PercentAntiSpyware, AdArmor, AdDestination, Ad-Protect, Ad-PurgeSpywarerAndAdwareRemoverPro, AdsAlert, ADS-Remover, AdvancedCleaner, AdvancedXPFixer, AdwareAlert, AdwareBazooka, AdwareBot, AdwareDelete, AdwareDeluxe, Adware-Patrol, AdWare Pro, AdwarePunisher, Adware Remover, Adware Remover2007, AdwareSheriff, AdwareSpy, AdwareStriker, AdwareX Eliminator, AgentSpyware, AlfaCleaner, AlphaWipe2008, AntiSpamBastion, AntiSpyCheck, AntiSpyKit, AntiSpySpider, AntiSpyStorm, AntispywareBot, AntiSpywareDeluxe, AntiSpywareMaster, AntiSpywareProXP, AntiSpywareShield, Antispywaresoldier, AntiSpyWare2007, AntiSpyZone, AntiVermeans, AntiVerminser, AntiVerMinsPro, AntiVirGear, AntiVirProtect, Antivirus Gold, AntiVirusPro, AstrumAntivirusPro, Awola.Anti-Spyware, BPS Ad Butcher, BPS AddwareRemover, BPS Addwere, BPS AdEradicator, BPS AdFlusher, BPS AdScrub, BPS AdStriker, BPS Adware Butcher, BPS Adware Cops, BPS AdwareBlaster, BPS AdwareBlocker, BPS AdwareCatch, BPS AdwareCatcher, BPS AdwareCheck, BPS AdwareChecker, BPS AdwareCleaner, BPS AdwareCrusher, BPS AdwareDestroyer, BPS AdwareDetect, BPS AdwareEradicator, BPS AdwareEraser, BPS AdwareFlush, BPS AdwareFlusher, BPS AdwareGuard, BPS AdwareGuardian, BPS AdwareInspector, BPS AdwarePolice, BPS AdwareSanitizer, BPS AdwareScanner, BPS AdwareScrub, BPS AdwareScrubber, BPS AdwareShield, BPS AdwareShredder, BPS AdwareSquash, BPS AdwareSquasher, BPS AdwareStopper, BPS AdwareStriker, BPS AdwareSweep, BPS AdwareSweeper, BPS AdwareTerminator, BPS AdwareWasher, BPS AdwareWatch, BPS AdwareWipe, BPS AdwareZapper, BPS AdwareAdwash, BPS Antithiefware, BPS.Gen, BPS IHateAdware, BPS Security Console, BPS SpyButcher, BPS.SpyEliminator, BPS SpySanitizer, BPS SpywareButcher, BPS SpywareCatch, BPS SpywareCops, BPS SpywareFlusher, BPS SpywarePolice, BPS Spyware Remover, BPS SpywareScrub, BPS SpywareSeeker, BPS SpywareShield, BPS SpywareSquash, BPS SpywareSterilizer, BPS SpywareStriker, BPS.SpywareZapper, BPS Squash, BreakSpyware, BrowserAid, BugDoctor, Cleanator, Cleaner2009, CleanSpaceUltimate, Contra-Spy, Contra-Virus, CyberDefender, DiaRemover, Doctor-Adware, Doctor-Adware-Pro, DoctorCleaner, DoctorSpyware, DrAntispy, DriveCleaner2006, DeusCleaner, Easy-Spyware-Killer, EliteProtector, ErrorClean, ErrorDoctor, ErrorGuard, ErrorKiller, ErrorSafe, ErrorSmart, ErrorSweeper, ETD-Security-Scanner, EvidenceEraser, EyeSpyNow, ExpertAntivirus, FakeAlert, FakeAlter.cc, Fake.Antispyware.TheSpybot2007, Fake.MSAntivirus, Fake.PC-Antispyware, Fake.SpywareRemover, FixerAntispy, FlashDollars.AntiVirusProtection, FlashDollars.RegistryRepair, FlashDollars.SpywareRemover, Fraud.AntiMalwareGuard, Fraud.AntiMalwares, Fraud.AntiSpyware2008XP, Fraud.AntiSpywareXP, Fraud.Antivirus, Fraud.Antivirus2008, Fraud.AntiVirusLab2009, FraudAntiVirusSentry, Fraud.AntiVirusTrigger, Fraud.eAntiSpy, Fraud.ISafeAntivirus, Fraud.MyFasterPC, Fraud.PCAntispy, Fraud.PCAntispyXP, Fraud.PCHealth, Fraud.PCProtectionCenter2008, Fraud.PersonalDefender, Fraud.PowerAntivirus, Fraud.SmartAntiVirus2009, Fraud.SpyProtector, Fraud.SpyWareGuard2008, Fraud.SystemAntivirus, Fraud.UltraAntivirus2009, Fraud.VirusResponseLab2009, Fraud.VirusTrigger, Fraud.WinDefender, Fraud.XPAntivirus, Fraud.XPAntivirus.gen, FraudXPCleaner, FroggieScan, Goodbye-Spy, IEDefender, InternetAntivirusPro, InternetSpeedMonitor, KazaapAdwareAndSpywareRemover, KillSoft.V2008, KillSpy, LiveAntispy, LocusSoftware.BestsellerAntivirus, LocusSoftware.PCPrivacyTool, LocusSoftware.SecurePCCleaner, MacroVirus, MagicAntiSpy, MalwareAlarm, MalwareBell, MalwareBot, MalwareBurn, MalwareCore, MalwareCrush, MalwareDestructor, MalwarePro, MalwareProtector2008, MalwareScanner, MalwareWipe, MalwareWipePro, MalWarrior, Marketflip.FakeSearchAndDestroy, Maxion.MaxnetShield, MicroAntivirus, Moatsoft.AntiMalware, MrAntispy, MyNetProtector, MySpyProtector, Neospace-Internet-Security, Netcom3Cleaner, NoAdware, NousTech.SysCleaner, NousTech.SystemDefender, Nous-Tech.UCleaner, Nous-Tech.UDefender, Nous-Tech.UFixer, Nous-Tech.Ultimate-Fake-Security-Center, One-Shot-Antivirus, OnlineGuard, Pal-Spyware-Remover, PCCleaner, PCCleanPro, PC-Health-Plan, PCPrivacyCleaner, PCSleek.FreeErrorCleaner , PerformanceOptimizer, Pestbot, PestCapture, PestTrap, Power-Antivirus-2009, PrivacyControl, PrivacyGuarantor, PrivacyRedeemer, PSGuard, PurityScan, RapidAntivirus, RazeSpyware, RegClean, RegCleaner, RegistryBot, Registry Cleaner, RegistryClear, RegistryFix, RegistryFixIt, RegistryHelper, RegistryPatrol, RegistrySmart, RegRecall, RegSweep, RegSweep,Fake.SpywareRemover, Repair Registry Pro, Rogue.IEAntivirus, Rogue.ScanAndRepair2007, Rogue.WinAntivir2008, SaferScan, SecureMyPC, ScanSpyware, ShudderLtd.AntiVirusPro, Softland.Antivirus2008XP, Spionfrei, SpyAgent, SpyAnalyst, SpyAnyWhere, SpyAxe, SpyBlocs, SpyBouncer, SpyBurner, SpyCleaner, Spycontra, SpyCrush, SpyDawn, Spydeface, SpyDefence, SpyDefender, SpyDestroy-Pro, SpyFalcon, SpyGuard, SpyGuarder, SpyHazard, SpyHeal, SpyHeals, SpyKill, SpyKiller, SpyLax, SpyLocked, SpyMarshall, SpyOfficer, SpyOnThis, SpyPry, SpyQuake, SpyRemover, SpySherrif, SpyShredder, SpySnipe, SpySoap, SpySpotter, SpyStriker, SpyTrooper, SpyVampire, SpyViper, SpywareAnnihilatorPro, SpywareBomber, SpywareBot, SpywareBOT.SpywareStop, SpywareCease, SpywareCleaner, SpywareDetector, SpywareGuard2008, SpywareIsolator, SpywareLocked, SpywareLocker, SpywareNO!, SpywareQuake, SpyWareRemover, SpywareScraper, SpyWare-Secure, SpywareSeizer, SpywareSheriff.FakeAlert, SpywareSoftStop, SpywareSolver, SpywareStormer, SpywareStrike, SpywareThis, SpyWarp, StartGuard, StopingSpy, SynergeticSoft.PrivacyDefender, SysProtect, SysRegistryCleaner, SystemDoctor2006, TheSpywareDetective, TheSpywareShield, TitanShield, TotalProtect2009, TotalSecure2009, Trek Blue Error Nuker, Trojan-Guarder, TrueSword, TrustCleaner, TrustSoftAntiSpyware, UltimateAntivirus2008, UltimateCleaner, UltimateSpyKiller, UltraSoft.Xlib, UtileProtection, VarioAntivirus, Vario.RogueAntiSpy, Virantix, Virusblast, VirusBurst, VirusHeat, VirusIsolator, VirusLocker, VirusProtect, VirusProtectPro, VirusRanger, VirusRescue, VirusSchlacht, VistaAntivirus2008, VsSpy, WareOut, WinAntivirusPro2006, WinClear, WinDefender, Windows.Antivirus2008, WinFixer, WinFixer2005, WinHound, WinPerformance, WinReanimator, WinSoftware, WinSoftware.WinAntiSpyware2006, WinSoftware.WinAntiVirus2006, WinSoftware.WinAntiVirusPro2006, WinSpyKiller, WinSpywareProtect, WinXDefender, WiperWizard, WorldAntispy, Worldsecurityonline.FakeAlert, X-Con-Spyware-Destroyer, XPPoliceAntivirus, XPSecurityCenter, X-Spyware, XSRemover, YourSoft-AntiVS, YourSoft-AntiVT, YourWebSafe and ZoneProtectAntispyware which have a very dubious or bad character.

They state to be an anti-spyware tool but employ questionable advertising methods: In the form of a PopUp they offer a scan of your system. They refer you to an infection of viruses and spyware on your system which is actually not true, because the listed items are not really on your pc. After downloading the software you can only scan for the threats. If the threats (pseudo-infections) are detected you have to register first and pay (up to $30) in order to remove them. Some of these dubious anti-spyware tools do also create a toolbar in IE and create recurring PopUps.

More dubious anti-spyware tools you will find here:
http://spywarewarrior.com/rogue_anti-spyware.htm

http://www.symantec.com/business/security_response/threatexplorer/risks/misleadingapplications.jsp

Best regards
Sandra
Team Spybot
 
Last edited by a moderator:
Hello,
Thank you for your response. But something seem vague and we want you to provide more details. If there is any item that is actually not true after fully testing, the Spyware Cease technical staff will remove the false positive as soon as possible.
spybotsandra said:
They state to be an anti-spyware tool but employ questionable advertising methods: In the form of a PopUp they offer a scan of your system.

Spyware Cease does not play any questionable advertising methods in the form of a popup.

Please note that Spyware Cease by default turns on the real-time Shield function. This toolkit can be used to manage the modification of system registry. Once apply this function, Spyware Cease will inform you by displaying a popup at the bottom right of the screen, whenever any program attempts to modify system registry. User can select either Allow or Block to list the program which attempts to modify registry within Whitelist or Blacklist. Thus to protect system registry from being modifying by malicious or unknown programs.

Please also see Shield, Blacklist and Whitelist on Spyware Cease main interface for more reference.

spybotsandra said:
They refer you to an infection of viruses and spyware on your system which is actually not true, because the listed items are not really on your pc.

Would you please show up the scanning result which is not true in details?
Spyware Cease technical staff will remove those items after fully testing.

spybotsandra said:
After downloading the software you can only scan for the threats. If the threats (pseudo-infections) are detected you have to register first and pay (up to $30) in order to remove them.

Please note that there is a sentence under the download button on Spyware Cease website: "*Trial Limitations: The trial offers time unlimited scan and real-time protection (free spyware blocking), but does not remove threats detected during on-demand scans."

All user will be informed before downloading Spyware Cease. If you have any problem, please tell me.

spybotsandra said:
Some of these dubious anti-spyware tools do also create a toolbar in IE and create recurring PopUps.
Spyware Cease does not create any toolbar in IE or any kinds of Internet bowsers. As for the popups, just like we talked above, is the real-time shield toolkit of Spyware Cease. Please also see Shield, Blacklist and Whitelist on Spyware Cease main interface for more reference.
 
Since you are obviously working for Spywarecease which claims to be a legit security software, I suggest that you have proper training and knowledge so I do not have to comment the screen shots.
But maybe you can explain why one of your misleading distribution sites
Code:
remove-spybot.com
is not active anymore.













 
Hello,

But I do not understand your quote about remove-spybot.com and I fail to view your images attached. Would you please show up in details?
 
Hello,

This is ridiculous.
I do not understand your quote about remove-spybot.com
So you say now that you do not know the site remove-spybot.com where your software was primary distributed?
Not to mention that this site misleads lots of Spybot users....

and I fail to view your images attached.
What do you mean by you fail to view the images attached?
They are readable without mistakes, you just need to click on them.

Would you please show up in details?
We showed up in details.

Best regards
Sandra
Team Spybot
 
Well this program was also discussed in our turkish security forum. I have analyzed the program and I think it should be listed as rogue. Why?
Because it reported that it found 5 malwares and the scan was not completed if it would complete it would even find more malware. But of course the malwares found was not real malwares. The program frightens the user and makes the user buy the software. Also the program is not being uninstalled correctly. It's services are still running at the background. Spybot is definetly right to list this program as rogue.
 
Last edited:
So you say now that you do not know the site remove-spybot.com where your software was primary distributed?

Please note that the site was distributed by one of the Spyware Cease affiliate, and it had been removed immediately since found. This problem has been solved several monthes ago. We apologize for the mistake, but we never mean to mislead any Spybot users. That is just the incorrect promotion of our affiliate.

Why? Because it reported that it found 5 malwares and the scan was not completed if it would complete it would even find more malware.

Spyware Cease is an anti-spyware program that can be used to detect, remove and block spyware threats on PC system. All the scanning results are the actual items on uers' system.

But of course the malwares found was not real malwares. The program frightens the user and makes the user buy the software.

Please show up the your scanning results since your told they were not real malware. As we all know, all anti-virus/anti-spyware programs have false positive, even your spybot has false positive. So does Spyware Cease. However, we will try our best to minimize the false positive and remove them once found. If you find there is any false positive on Spyware Cease, please tell us, we will have a test and remove it immediately.

As networking00 has been mentioned above, all users will be informed this sentence before downloading Spyware Cease: *Trial Limitations: The trial offers time unlimited scan and real-time protection (free spyware blocking), but does not remove threats detected during on-demand scans.

This sentence is right under the download button on Spyware Cease website. So we never frighten our users and trick our users into purchasing our program.

Also the program is not being uninstalled correctly. It's services are still running at the background

If you can use the "Add /Remove Program" in the Control Pannel, you can uninstall Spyware Cease. You can also uninstall Spyware Cease from the Startup manager: Startup->All Programs->Spyware Cease-> Uninstall Spyware Cease. By this two methods, you can have Spyware Cease uninstalled easily.

In a word, Spyware Cease is simplely an anti-spyware program. We detect and remove spyware threats in PC system. As I mentioned above, all program have promotion mistakes or false positives, so does Spyware Cease. We are trying our best to correct the mistake and false positve. If you have any program about Spyware Cease, you can also email us or tell us here. All the problems would be removed once found.

Thank you
 
This is ridiculous.
So you say now that you do not know the site remove-spybot.com where your software was primary distributed?
Not to mention that this site misleads lots of Spybot users....

I am sorry but the problem you are telling has been solved monthes ago. The mistake has been corrected. I think Spyware Cease will also correct any problem or false positive that you found.

They are readable without mistakes, you just need to click on them.

Please browse the site with firefox. I just found nothing on your post, not to mention to click on them
 
Spyware Cease is an anti-spyware program that can be used to detect, remove and block spyware threats on PC system. All the scanning results are the actual items on uers' system.
Yes, actual items but not actually anything to deems malicious or even close.

I don't know what's wrong with your browser, but Yodama has taken to time to upload and link the screenshots and it clear as mud glass in my browser.
http://forums.spybot.info/showpost.php?p=288748&postcount=4
As I mentioned above, all program have promotion mistakes or false positives, so does Spyware Cease.
I really don't think there is any point of arguing with the evidence is there. Removing something that is legitimate could be removing something crucial.
The program frightens the user and makes the user buy the software.
Because... it promotes a sense that scares the user. The person will think there's spyware on their machine when in reality they're not.

I'm running Mozilla Firefox 3.0.6 (Platform does not matter) and the screenshots are right on my screen:
Spybot-1.jpg

-
 
Yes, actual items but not actually anything to deems malicious or even close.

Yes, I think even your Spybot will not always detect item that deems malicious. Like yours or many other famous anti-virus / anti-spyware programs, we may sometimes has false positive. Would you please tell me the item that not deems malicious or even close? Our technical staff will test it and remove the false positive once confirmed.

I really don't think there is any point of arguing with the evidence is there. Removing something that is legitimate could be removing something crucial.

As I mentioned above, Please tell me detected result which is legitimate. Our Spyware Cease will not allow any existance of known false positive.

Because... it promotes a sense that scares the user. The person will think there's spyware on their machine when in reality they're not.

We never mean to scare our users. If you think there is any place we scare the users, please tell us in details. We will analyze problem and remove it if neccesary.

Thank you
 
Just have a look on the screenshots above. All screenshots were made on a clean Windows XP
 
Last edited:
Just have a look on the screenshots above. All screenshots were made on a clean Windows XP

We have analyzed the scanning results on the screenshots attached above. All false positive have been removed from our database and we will update our database within 24 hours. Please keep your Spyware Cease up-to-date. Thank you for all information provided. If there is any problem, please tell us here or email us.
 
2-spyware.com said:
Spyware Cease is effective antispyware program that can be used to protect PC against various threats such as Spyware, Adware, Keyloggers, Trojans, Worms and other similar parasites. Several people had published incorrect information about this product. They had mistakenly named Spyware Cease as rogue antispyware. Spyware Cease was tested by 2-spyware.com research center. The application showed good results and seems to be a reliable tool.

2-spyware.com said:
Spyware Cease is a new, but quite effective anti-spyware program. It was designed to remove all kinds of threats and infections, such as spyware, adware, keyloggers, trojans, worms, hijackers, rootkits, password stealers, tracking threats, rogue antispyware and other malware. 2-spyware.com research center had carefully tested Spyware Cease on several computers including already infected systems. The application passed our tests showing quite good results.

Please click the addresses below for more information:

http://www.2-spyware.com/remove-spyware-cease.html
http://www.2-spyware.com/review-spyware-cease.html

As you can see on the URLs above, Spyware Cease is simplely one of anti-spyware program that can be used to remove and block spyware threats.

We are making great effort to improve our program all the time, and dedicate to offer more convenience for PC uers on protecting their system security.

What is more, many security companies, including AVG, Bitdefender, Avast.com and 2-spyware.com, which had false positive on Spyware Cease before, all have removed the false positive after fulling testing.

Therefore, would you please remove our Spyware Cease from your virus list?
 
Last edited:
Hello,
are the false positives fixed and an update available?

Yes, the false positive has been removed and the update is available now. Please re-download and re-install Spyware Cease on your PC to check out. If there is any problem, please let me know.

Thank you
 
Hello,

We have removed the false positive and updated our virus database. Please re-download Spyware Cease from our web site and check it out.

Please let us know the result as soon as possible since this is a top priority issue for us.

Thank you
 
Hello,
today I tested your software again and it found the same false positives as last week:




Happily you have already proved by yourself that our detection about SpywareCease is totally adequate. As we do not have the time to test your software every day ending up with the same results, this thread will be closed

If you still think that your software is not malware do not hesitate to apply for an official review. But please be aware that if this review still shows that your software is correctly classified as malware you have to pay the bill for it. For more information please send a mail to review#spybot.info (#=@)

Kind regards,
Markus
 
Status
Not open for further replies.
Back
Top