Trend calls Regprot Spyware

[JW Clements]

I just installed PC-cillan 2005 and it's real-time scan identified Regprot as follows: (It denied Regprot access to scan the registry).

Description:

Threat Type: Spyware

Systems Affected: Windows 95, 98, ME, NT, 2000, and XP

Installer Name: DiamondCS Registry Prot

Publisher: Diamond Computer Systems Pty. Ltd.

Download URL: www.diamondcs.com.au

This spyware alerts whenever a key is added or changed. A user has the option to accept the new key, revert back to the original key setting, or delete the key.

It also monitors registry entries that are added in the following registry keys:



RunOnce
RunOnceEx
RunServices
RunServicesOnce
comfile\shell\open\command
exefile\shell\open\command
piffile\shell\open\command

[Happy Bytes]

ROFL ;D

So it's registry spyware or what?
Major ******** of its best...
What's next? Detecting other AV programs as spyware because they are able to block execution of suspicious files? :o
Does somebody there actually TAKE A LOOK and UNDERSTAND what they include? Alone the description should ring a bell that this is a security app and is designed to work exactly in this way that it is able to block such registry entries! DUH! >:(

Again: ROFL ;D

[Pilli]

{QUOTE-> Threat Type: Spyware <-QUOTE} Automated sig creation I'll bet ;D

Does this version of PC-cillin have the ability to exclude scanning of selected files? If so exclude regprot and report this FP to the developers.

Pilli

[Jooske]

There are several threads about this identification, among others this one http://www.diamondcs.com.au/forum/showthread.php?t=2762
generally leading to disabling that detection. Really awful they still don't listen to reason and putting innocent unexpecting users on wrong feet.

[FanJ]

=== Quotes from the RegistryProt site ===

Trend Micro Antivirus users please note - RegProt is NOT spyware. Your antivirus product will incorrectly identify it as spyware. You should contact Trend Micro support and complain, email us for more information if you are unsure about this false alarm. We have tried to contact Trend Micro to have the problem fixed, with no response.


=== end quotes ===

http://www.diamondcs.com.au/index.php?page=regprot

[tuatara]

I've seen this message also when i was testing,

but happily my WRONGWARE scanner gave at the same time the message:

{QUOTE-> WrongWare error 436:

Trend Micro gives incorrect message regarding regprot,
do not believe this !.
Required Action 47364: "Uninstall Trend Micro and install a AV" <-QUOTE}

;)