netcom3 false positive

[jimnall]

I purchased Netcom3 www.netcom3.com as a means to clean up my registry and also to detect spyware/adware.

Malwarebytes 1.33 is reporting it as malware. I do not believe it should be doing so.

Does anyone have any experience with Netcom3?

To Malwarebytes tech support.... would you please investigate. The latest log is below.

Malwarebytes' Anti-Malware 1.33

Database version: 1713

Windows 5.1.2600 Service Pack 3

02/01/2009 2:03:49 PM

mbam-log-2009-02-01 (14-03-49).txt

Scan type: Full Scan (C:\|F:\|)

Objects scanned: 257949

Time elapsed: 1 hour(s), 9 minute(s), 25 second(s)

Memory Processes Infected: 1

Memory Modules Infected: 0

Registry Keys Infected: 3

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 19

Memory Processes Infected:

C:\Program Files\Netcom3 Cleaner\Netcom3D.exe (Rogue.Netcom3) -> Not selected for removal.

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netcom3 (Rogue.Netcom3) -> Not selected for removal.

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\netcom3 (Rogue.Netcom3) -> Not selected for removal.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netcom3 (Rogue.Netcom3) -> Not selected for removal.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spyclean (Rogue.Netcom3) -> Not selected for removal.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files\Netcom3 Cleaner\Netcom3D.exe (Rogue.Netcom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\netcom3.exe (Rogue.Netcom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\BackupManager.dll (Rogue.Netcom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\Logger.dll (Rogue.Netcom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\PscMonitor.dll (Rogue.NetCom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\RegistryChecker.dll (Rogue.NetCom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\RegManagers.dll (Rogue.NetCom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\SpyGuard.dll (Rogue.Netcom3) -> Not selected for removal.

C:\Program Files\Netcom3 Cleaner\SpywareRemover.dll (Rogue.Netcom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047554.dll (Rogue.NetCom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047546.exe (Rogue.Netcom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047547.dll (Rogue.NetCom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047548.dll (Rogue.NetCom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047549.dll (Rogue.Netcom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047550.dll (Rogue.Netcom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047551.dll (Rogue.Netcom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047552.dll (Rogue.Netcom3) -> Not selected for removal.

C:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP423\A0047553.exe (Rogue.Netcom3) -> Not selected for removal.

F:\System Volume Information\_restore{6505B2CE-D6E4-4080-96A8-13D12CCF4732}\RP440\A0048597.exe (Rogue.Installer) -> Quarantined and deleted successfully.

[GT500]

Please visit this link for more information. This is not a false positive.

[jimnall]

Here's what the last quoted site says...

Online affiliations for consumers-reviews.net:

Linked to red site

When we tested this site we found links to netcom3.com, which we found to be a distributor of downloads some people consider adware, spyware or other potentially unwanted programs.

Malwarebytes also offers a 'commission' if you are an affiliate to people who purchase at your direction. Netcom3 does the same thing using a different payment mechanism. This would explain why Netcom3 was 'linked to a red site'. The red site is the problem not the Netcom3 linked to site.

I'm not sure what 'mung' ing means, but YES I do get a commission if people buy Netcom3 thru my web site, www.yourpcathome.com. I am in business to remove virus/malware/spyware. I got started with Malwarebytes when I began encountering AV2008 and later AV2009.

It may be just my ignorance or misunderstanding of the posts here, but what is the specific problem that you attribute to Netcom3? I've seen many instances where one AV program detects another as spyware/adware etc. Just running the program isn't enough of an indication that another program has taken malevolent action. What is it that you see Netcom3 doing? corrupting registry? adding spurious registry entries? feeding personal info back to some site for sale?

Please let me know.

[jimnall]

Please visit this link for more information. This is not a false positive.

I checked the link and scanned down to the last entry. That entry talks about consumers-reports.net as a scam web site. It says that Netcom3 is linked to the consumers-reports which is usually the case if you offer to sell Netcom3 thru your own web site. My own web site, www.yourpcathome.com has a similar linkage.

What's confusing me is that everyone seems to point elsewhere to prove that Netcom3 is a scam organization. I don't see anywhere that a specific corruption of windows, or personal info being sent somewhere, etc. is documented. Can you please help me sort this out.

I'm in the process of checking with BBB and others in california to see if they have any info and will let you know.

[Raid]

I checked the link and scanned down to the last entry. That entry talks about consumers-reports.net as a scam web site. It says that Netcom3 is linked to the consumers-reports which is usually the case if you offer to sell Netcom3 thru your own web site. My own web site, www.yourpcathome.com has a similar linkage.

What's confusing me is that everyone seems to point elsewhere to prove that Netcom3 is a scam organization. I don't see anywhere that a specific corruption of windows, or personal info being sent somewhere, etc. is documented. Can you please help me sort this out.

I'm in the process of checking with BBB and others in california to see if they have any info and will let you know.

The program generates alot of false positives as a goad to purchase a license to "fix" the problems it has found. The website makes several false and/or misleading statements concerning the program and what others in the security industry say regarding it.

The affiliate program isn't much better. They allow trojan.downloaders to install the package as well.

[jimnall]

The program generates alot of false positives as a goad to purchase a license to "fix" the problems it has found. The website makes several false and/or misleading statements concerning the program and what others in the security industry say regarding it.

The affiliate program isn't much better. They allow trojan.downloaders to install the package as well.

OK....Letting any trojan install is bad, and I assume you mean you've seen this happen.....i'll stop using it. what do you recommend as a registry cleaner?

[nosirrah]

Google CCleaner , it is the only free reg cleaner that I have never seen destroy a system .

IMO registry cleaners are a very bad idea unless you are 100% capable of performing the task yourself .

[jimnall]

Google CCleaner , it is the only free reg cleaner that I have never seen destroy a system .

IMO registry cleaners are a very bad idea unless you are 100% capable of performing the task yourself .

Thanks for the help. MBAM is a VERY good service.

[GT500]

Comodo System Cleaner is a good free registry cleaner (may not be free for corporate/business use though).

The best registry cleaner and system optimizer is TuneUp Utilities, and they offer a fully functional 30-day free trial in order to give you plenty of time to decide for yourself. I like the fact that they include a good registry defrag as well.