Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Riskware Information Pages: Rogue antispyware

[Summary] | [Detailed Description]

Name : Rogue antispyware
Type:Rogue
Category:Riskware
Platform:W32
Author:N/A
Website:N/A

Summary
Rogue antispyware - This family of software isn't necessarily intrinsically malicious, but members of the family often use deceptive sales techniques and false positives, deliberate or accidental, to convince users to pay for a license.

See the Details section for more information.
Back to the Top

Detailed Description
Rogue antispyware is difficult to define as the intentions of the group vary. Typically members of the group claim to be a legitimate Anti-Spyware application but are in fact nothing more than an inexpensive clone of unreliable software. Rogues are often repackaged and given new names. Many of the applications use very questionable sales tactics and therefore the quality of their product becomes suspect. They can be deliberately fraudulent or just substandard products that present false information.

Many rogue applications present outright false positives as a means to alarm computer users into buying. Others among the group have false positives due to bugs in the software's code, not because of an outright lie. Code corrections can move a suspected rogue off of detection lists.

Many rogue applications use deceptive or high-pressure sales tactics to convince users into buying a license. Users will be told that they need to buy protection even if there is nothing dangerous found. Free scans are offered but a license is needed before any dangers can be removed. Free, fully functional trial periods are usually not offered.

Spyware or other malware sometimes silently installs rogue antispyware that then offers to remove the spyware. Trojans and toolbars are other sources prompting for rouges to be installed. Affiliate marketing programs are often used to sell rogue antispyware. Every time an affiliate product is installed and sold there is a commission. The result is a strong pressure to sell-by-any-means.


Screenshots
The screenshots shown are examples of a false positive. The product in the example is no longer available for download via the Internet.

Example - Scan Report:



The scan report is typical in its declaration of danger.

Example - Threats Found:



Note the misspelling of threats as "threads". The two files listed are common and are found on any installation of Windows. They are text files that contain configuration information for Windows. They are not executable programs.

Example - Demo Doesn't Remove:



Detecting problems in the demo, but requiring a license to remove those problems is typical for the family.
Back to the Top



F-Secure Corporation

Last Modified: February 11, 2008