WindoFix

Post Reply
Guest

WindoFix

Post by Guest » Wed Jul 14, 2010 2:09 am

An experienced user brought this to my attention.

This may have been "tested" here sometime ago, but I got riled up when I read [url=http://www.spywarewarrior.com/viewtopic.php?p=200438 t=_self]this thread on the SpywareWarrior forum[/url], so I decided to test it myself.

The SW . . . people . . . refuse to consider this as a rogue, and seem to be hung up on terminology and their own technical definition that a piece of software is not considered rogue unless it contains spyware.

While that technical definition may or may not be accurate, I tend to use common sense definitions applied in common usage. In that regard, I would definitely consider this a rogue.

Now for my usual comparison to CCleaner and Auslogics.

First, the CCleaner scan:

[url=http://i26.tinypic.com/2dl6h6x.jpg t=_self][img]http://i26.tinypic.com/2dl6h6x.jpg[/img][/url]

ZERO errors.

Now the Auslogics scan:

[url=http://i30.tinypic.com/2l9c37.jpg t=_self][img]http://i30.tinypic.com/2l9c37.jpg[/img][/url]

Again, ZERO errors.

Now for the WindoFix scan:

[url=http://i32.tinypic.com/358tg2a.jpg t=_self][img]http://i32.tinypic.com/358tg2a.jpg[/img][/url]

A whopping 257 errors. This when CCleaner and Auslogics showed NONE.

OK, so now I clicked on the "Yes" button, indicating I wanted to fix these errors.

That took me to this:

[url=http://i25.tinypic.com/2z562oh.jpg t=_self][img]http://i25.tinypic.com/2z562oh.jpg[/img][/url]

Notice that it is now telling me that these are "critical" errors. As I've said this many times before when doing these tests, if you had that many critical errors you would likely be unable to even boot.

At this stage, this is clearly scareware.

But wait, there's more.

Clicking on "OK", which is the only choice you have, leads to this:

[url=http://i25.tinypic.com/3538cpd.jpg t=_self][img]http://i25.tinypic.com/3538cpd.jpg[/img][/url]

So. now we have to buy this beast in order to "fix" these critical errors. (Graduating to hostageware in addition to scareware.)

And finally, when you close your browser, you are left with this:

[url=http://i31.tinypic.com/2uz6mvn.jpg t=_self][img]http://i31.tinypic.com/2uz6mvn.jpg[/img][/url]

. . . a not-so-subtle attempt to get you to enter the purchase loop in case you didn't bite the first time.

Conclusion: If I were to pose this question to any security minded individual: "What would you call a registry cleaner that displays 257 critical registry errors where other legitimate registry cleaners find ZERO errors?" My guess is that they would answer: a rogue/scareware.

Guest

@BJ

Post by Guest » Wed Jul 14, 2010 4:16 am

Well that looks pretty clear cut.
So you just going to leave all those errors~smiles~

________________________________________________________________
............Tattered Wings and a Tarnished Halo...........

Guest

@BJ

Post by Guest » Wed Jul 14, 2010 6:39 am

that is amazing !------ I read the log , and I could not believe the lousy excuses = went by site = big red rated .

dan2k9
Posts: 97
Joined: Thu May 27, 2010 6:20 pm

this sort of reminds me of

Post by dan2k9 » Wed Jul 14, 2010 8:06 am

this sort of reminds me of SupportOnclick

Guest

@ BobJam Yes, I noticed that

Post by Guest » Wed Jul 14, 2010 10:03 am

@ BobJam

Yes, I noticed that too while debating another thread. Looked at their scorecard early this morning to see the masses of red comments. There was some supporters of the product while makes me wonder how acurate or security experienced the posters were.

Just like "Malware" where it now covers a broad definition of programs related to malicious use, I feel "rogue" is also adopting a more broader area.

www.issviews.com for views and news of the starte of digital security. Add your comments/.feedback on your existing security software to help others choose what's right for them and what isn't. Read up on the latest rogue software and threats too.

31Y13
Posts: 377
Joined: Fri Aug 14, 2009 1:52 pm

there is also "WindoClear", the same issue

Post by 31Y13 » Thu Jul 15, 2010 9:30 am

in addition to this:

[img]http://img685.imageshack.us/img685/273/001txo.jpg[/img]
<img>http://img821.imageshack.us/img821/8880/002gve.jpg</img>
<img>http://img413.imageshack.us/img413/8469/003uq.png</img>

http://www.mywot.com/de/scorecard/windoclear.com

and it even "work" with Ubuntu Linux with WINE

Guest

All of this is rogue take a look

Post by Guest » Thu Jul 15, 2010 10:20 am

http://www.symantec.com/security_response/writeup.jsp?docid=2009-081802-5724-99&tabid=2

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests