Trend calls Regprot Spyware

Discussion in 'Trojan Defence Suite' started by jwcca, Jul 6, 2005.

Thread Status:
Not open for further replies.
  1. jwcca

    jwcca Registered Member

    Joined:
    Dec 6, 2003
    Posts:
    772
    Location:
    Toronto
    I just installed PC-cillan 2005 and it's real-time scan identified Regprot as follows: (It denied Regprot access to scan the registry).

    Description:

    Threat Type: Spyware

    Systems Affected: Windows 95, 98, ME, NT, 2000, and XP

    Installer Name: DiamondCS Registry Prot

    Publisher: Diamond Computer Systems Pty. Ltd.

    Download URL: www.diamondcs.com.au

    This spyware alerts whenever a key is added or changed. A user has the option to accept the new key, revert back to the original key setting, or delete the key.

    It also monitors registry entries that are added in the following registry keys:


    • RunOnce
    • RunOnceEx
    • RunServices
    • RunServicesOnce
    • comfile\shell\open\command
    • exefile\shell\open\command
    • piffile\shell\open\command
     
    jwcca, Jul 6, 2005
    #1
  2. Happy Bytes

    Happy Bytes Guest

    ROFL :D

    So it's registry spyware or what?
    Major Bullshit of its best...
    What's next? Detecting other AV programs as spyware because they are able to block execution of suspicious files? :eek:
    Does somebody there actually TAKE A LOOK and UNDERSTAND what they include? Alone the description should ring a bell that this is a security app and is designed to work exactly in this way that it is able to block such registry entries! DUH! :mad:

    Again: ROFL :D
     
    Happy Bytes, Jul 6, 2005
    #2
  3. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Automated sig creation I'll bet :D

    Does this version of PC-cillin have the ability to exclude scanning of selected files? If so exclude regprot and report this FP to the developers.

    Pilli
     
    Pilli, Jul 6, 2005
    #3
  4. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    There are several threads about this identification, among others this one http://www.diamondcs.com.au/forum/showthread.php?t=2762
    generally leading to disabling that detection. Really awful they still don't listen to reason and putting innocent unexpecting users on wrong feet.
     
    Jooske, Jul 6, 2005
    #4
  5. FanJ

    FanJ Guest

    === Quotes from the RegistryProt site ===

    Trend Micro Antivirus users please note - RegProt is NOT spyware. Your antivirus product will incorrectly identify it as spyware. You should contact Trend Micro support and complain, email us for more information if you are unsure about this false alarm. We have tried to contact Trend Micro to have the problem fixed, with no response.


    === end quotes ===

    http://www.diamondcs.com.au/index.php?page=regprot
     
    FanJ, Jul 6, 2005
    #5
  6. tuatara

    tuatara Registered Member

    Joined:
    Apr 7, 2004
    Posts:
    777
    I've seen this message also when i was testing,

    but happily my WRONGWARE scanner gave at the same time the message:

    ;)
     
    tuatara, Jul 6, 2005
    #6
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...