3 malware (RegistryEasy, ErrorFix, Regtool) trick users into purchasing.

Viruses and worms
1

These 3 malware programs are Registry Easy (www.registryeasy.com), ErrorFix (www.errorfix.com) and Regtool (www.regtool.com).

They intend to be malware killer, but in fact they are malware, what they do is to trick users into purchasing.

  1. Registry Easy.

After installation and launch, it scans your system and then gives the fake threats, some functions are pre-programmed.

http://community.norton.com/t5/image/serverpage/image-id/2826iEDB4AD064A73F5BC/image-size/original?v=mpbl-1&px=-1

When you want to fix these so-called problems, you need to register the full version. Thus you need to pay them, they only give you a junk program that can’t improve your system performance, instead it will crash your system and steal your personal information.

http://community.norton.com/t5/image/serverpage/image-id/2827i93B041729DDBCD53/image-size/original?v=mpbl-1&px=-1

  1. Errorfix and Regtool

They are the same version, with different names. So here I only discuss the Errorfix.

It will say your system health is LOW before you perform a scan, this is illegal. Adobe Updates and Java Updates can’t do anything. You can install Adobe Reader 7, it says it is up-to-date, but the latest version on www.adobe.com is version 9.1. Also the Java Updates.

http://community.norton.com/t5/image/serverpage/image-id/2828iCA7AAD25A514B796/image-size/original?v=mpbl-1&px=-1

It scans and gives fake report. What they do this is tricks you into purchasing.

http://community.norton.com/t5/image/serverpage/image-id/2829i87A2853941B83CD6/image-size/original?v=mpbl-1&px=-1

When you click Repair All, it asks you to register the full version.

http://community.norton.com/t5/image/serverpage/image-id/2830iE55598DD0CDC69D7/image-size/original?v=mpbl-1&px=-1

2

Thanks for the post.

I’m sure that using malwarebytes will find these programs and remove them though.

Have you tried?

3
I'm sure that using malwarebytes will find these programs and remove them though.

If not, maybe posting them at malwarebytes forum will fix that? :smiley:

4

They are rogues:
http://hosts-file.net/default.asp?s=registryeasy.com
http://hosts-file.net/default.asp?s=errorfix.com <== FSA - sites engaged in the selling or distribution of bogus or fraudulent applications

Fake Online AV Scanner Installs Fake AV
http://www.sophos.com/blogs/sophoslabs/v/post/6592