Do NOT download Registry Defender program

This is a warning about a program called "Registry Defender". Please do not use it. It IS the very malware it pretends to find and delete!

A good friend downloaded it, because they advertized it as a free trial, and wanted to use it to check for Adware, Viruses, and Malware. He installed it and did a scan. It reported 28 viruses, spyware, Malwar, and Adware! When the "Clean" button was clicked, it brought up a message that said the free version would only remove, I think it said 6 items. From that time forward, it popped up a FULL SCREEN warning ad every 6 to 10 minutes, which had the result of halting ANY further computer activity, and the only way to get rid of the warning was to click on "Continue Unprotected". After attempting to pay for it, it still would not work, even tho it now said that it was registered properly

It could not be uninstalled through "Add/Remove Programs". Even after turning off the system restore and rebooting

I finally killed it with a different Malware product, that recognised "Registry Defender" as Malware!

Please stay AWAY from this product/program

It IS the malware it says it can fix!

 

[edit: removed link in subject per the Participation Guidelines and Terms of Service. Please do not post links to malicious files]

 

Message Edited by Tim_Lopez on 02-18-2009 05:17 PM

Yes, registrydefender this is a new rogue similar to spywareguard… etc, etc and etc… (*).

I sent the file to VirusTotal and is detected by several antivirus (ikarus, a-squared … etc).
I wonder how long it will take Symantec to create a behavior-based detection-and-block/erase for the whole family well known for rogues … :smileymad:
Message Edited by Serekantum on 02-18-2009 07:23 AM

 

[edit: Updated Subject text.]

Message Edited by Tim_Lopez on 02-18-2009 05:18 PM

I visited that Web Site and it seems okay. 

 

Anyway, you can Submit Threats' Files to symantec Security Response via this Web Link: https://submit.symantec.com/websubmit/retail.cgi.

 

[edit: Updated Subject text.]

 

Message Edited by Tim_Lopez on 02-18-2009 05:18 PM

Yup, at least sonar sud have detected rouge softwares.

There is no provision of blocking these kind of malwares in norton.

 

[edit: Updated Subject text.]

 

Message Edited by Tim_Lopez on 02-18-2009 05:19 PM

Come on Ro:

 

Don't you think users have to take a little bit of responsibility for keeping malware out of their computer.  I don't think Symantec can be blamed for all the ills of the world.  Even if they came up with a way to find an inactive, hidden threat in an apparently harmless download, my guess is that some users would ignore the warning, or deactivate Norton just so they could download it anyway.

 

If Norton started blocking too many things, people would be screaming blue murder that Symantec was interfering with their personal right to screw up if they wanted.

 

Education is a far better way to slow down the spread of these types of programs.  Email threats are not nearly so effective since users were made aware of certain rules in the opening of attachments.  It might be more effective to add information in a format similar to the EULA, that users had to scroll down, with warnings about certain threats via download. Some users might even read it:smileyvery-happy:

 

[edit: Updated Subject text.]

 

Message Edited by Tim_Lopez on 02-18-2009 05:19 PM

If Norton started blocking too many things, people would be screaming blue murder that Symantec was interfering with their personal right to screw up if they wanted.

 


 
Hmm, in that thing i wanna say they can keep an option to turn it off or on.
I agree  education is a far better way to slow down the spread of these types of programs but still, its better to have security layer.

 

[edit: Updated Subject text.]

Message Edited by Tim_Lopez on 02-18-2009 05:20 PM

Here is the analysis of today at 19:00 (Spanish Hour) for registrydefender executable.
Again, Symantec has to tighten protection in their security software.

Clearly, education in the use of the internet is essential for safe browsing, but when you buy a security software, is to feel protected by an extra layer to cover human error.

 

Greetings.

 

Ikarus T3.1.1.45.0 2009.02.18 not-a-virus.Fraudtool.RegistryDefender

a-squared 4.0.0.93 2009.02.18 Riskware.Fraudtool.RegistryDefender!IK

eSafe 7.0.17.0 2009.02.18 Suspicious File

Prevx1 V2 2009.02.18 High Risk Fraudulent Security Program

Sophos 4.38.0 2009.02.18 Troj/RegDfndr-B

Message Edited by Serekantum on 02-18-2009 10:09 AM
Message Edited by Serekantum on 02-18-2009 10:09 AM

[edit: Updated Subject text.]

 
Message Edited by Tim_Lopez on 02-18-2009 05:20 PM

Please Serekantum:

 

If you ever find or invent something that will perfectly limit the damage caused by human error, I would be extremely interested in buying shares.  In fact, if you can find anything that can't be tinkered with, changed, modified, improved, turned off or turned on, installed wrong, or accidentally deleted, please share it with me.

 

To expect Symantec to do something with software that the divine can't pull off is unrealistic.:smileywink:

 

[edit: Updated Subject text.]

 

Message Edited by Tim_Lopez on 02-18-2009 05:20 PM

Obviously Delphinium , when I said that software should protect human ingenuity, I was referring to a security program must be designed by specialists with a very superior to what a person knows about computers.
It is assumed that Symantec's developers are experts in highest level, and they know far more than any amateur to computers, so your program should protect the user who does not have sufficient knowledge to be informed of all the dangers of the internet and of the ways to avoid them. If Internet users turn to software developed by security experts, is because we are aware of our lack of training and this is why we insist that intensifies the quality of NIS'09 in terms of threat detection.
Personally, I have come not a single virus on my computer (except that I left voluntarily come to do experiments), but normal people can not be paranoid like me. To ensure the safety of our pc's are the professionals who would gladly pay to protect us so effectively
The day that we are all "hackers-security experts" , Symantec / KasperskyLabs / Sophos...etc. disappear because they do not need.


Greetings

 

[edit: Updated Subject text.]

 

Message Edited by Tim_Lopez on 02-18-2009 05:21 PM

Hi Guys

After briefly reading this thread,I think Symantec has been pro active in regards to security and now by providing this Forum are educating users.It is here that I as a non tech user have picked up the most helpful tips on being safe on the net and with general PC security.I would not have learned this otherwise by reading a EULA(half the jargon leaves me in its wake!!!) Sorry delphinium.

I don't go downloading "stuff" just to see what happens and to test the effectiveness of my security product.I'm happy to let NIS2209 do its job which is what I think the software designers had in mind when they developed it.If I'm just browsing around and something happens then I do hope NIS will kick in.But to keep searching for stuff then finding that Norton is being slack is asking a bit much.BUT I am grateful for you guys who go out and submit these new nasties to Norton which in effect does give Norton a heads up on what's out there.( maybe a new forum for this sort of posting could be set up)

I don't mean to insult anyone it is just my thoughts!


mo wrote:

Hi Guys

After briefly reading this thread,I think Symantec has been pro active in regards to security and now by providing this Forum are educating users.It is here that I as a non tech user have picked up the most helpful tips on being safe on the net and with general PC security.I would not have learned this otherwise by reading a EULA(half the jargon leaves me in its wake!!!) Sorry delphinium.

I don't go downloading "stuff" just to see what happens and to test the effectiveness of my security product.I'm happy to let NIS2209 do its job which is what I think the software designers had in mind when they developed it.If I'm just browsing around and something happens then I do hope NIS will kick in.But to keep searching for stuff then finding that Norton is being slack is asking a bit much.BUT I am grateful for you guys who go out and submit these new nasties to Norton which in effect does give Norton a heads up on what's out there.( maybe a new forum for this sort of posting could be set up)

I don't mean to insult anyone it is just my thoughts!


Thanks for your thoughts, mo.

I agree with you. Symantec needs people who volunteer and search for malware that Niorton is not detecting yet. I do it myself, ;)

But you can't blame or attack Symantec because some malware is not detected yet.  Besides that you can't blame the program as well for personal failures as well. it is not responsible for all the bad stuff some people are donwloading themselves