Rogue Defragmenter Program

Like a car, a computer too needs regular maintenance to keep it running at peak performance. There are many reasons why a computer may become sluggish and not all are due to malware being present. One reason could be disk fragmentation. Wikipedia defines fragmentation as “the inability of a file system to lay out related data sequentially.” An example is when you create a file, let us call it file A, and when it’s saved, it will be stored sequentially on the disk. In the interim, you too can create file B, C, D, and so on. Later you choose to make an edit to file A, and let’s say the edit would enlarged the file size. Well, the addition cannot go into the same or original slot, whose file size is set, and thus it must now be stored elsewhere, the next sequential and available slot, no matter how far down the chain that may be. This is known as fragmentation because associations, aka edits, may be stored ‘apart’ from the original file. When you want to retrieve file A, the system must now look into two spots instead of just one. Now, this may seem no big deal because we are only talking about one edit or fragmented file. However, greatly multiply those slots and edits and now you can see how this can become problematic over time and cause your system to become sluggish.

Defragmentation is exactly what it infers, reconnecting the dots. Defragmentation tools actually do more than connect the dots, it too can optimize the system by correcting disk errors due to bad sectors, remove unused files left behind after a bad uninstall, etc. There are numerous disk defragmentation tools on the web, but like a lot of other legitimate programs, cybercriminals love to mislead and dupe PC users into buying fraudulent or fake defragmentation tools. Thus, Rogue Defragmenter Programs not only make empty promises but too have a hidden motive and agenda. Trojans engineer many visual presentations or rogue programs and follow a similar pattern:

Distribution vectors:

• Trojans often guise themselves as helpful tools and may cloaked in the download of freeware downloads as a helpful or innocuous program.
• Trojans can be hidden behind a tantalizing link planted on social networking platforms or in a cleverly written email
• Not all infiltration comes at the hand, i.e. clicking, of victims. Some infiltrations are made possible by a drive-by attack, a simple landing on a compromised website housing a Trojan able to arrange automatic download of malware.

Set-up:

• The attack actually is well thought out and as a result, the Trojan has been armed with programming that allows:
  • Bypassing the firewall
  • Disarming any subpar Internet security measures
  • Editing the registry to make sure its executable runs each time Windows is booted
  • Hijacking the browser to block traffic to helpful and legitimate Internet security sites and forums
  • Planting fictitious files that support the lies a foreign intruder is onboard

Visual Presentation: onscreen

• Out of nowhere your system will began convulsing, spitting up scary alert after scary alert. These FAKE alerts will basically imply malware is onboard and an attack is underway, as if you didn’t already know that. Scary warnings will threaten a disk crash or data loss, threats that may send some into a panic.
• The interface of the Rogue Defragmenter Program will take center stage and make empty promises. Without permission a quick scan will be run and results will confirm an attack is underway. The victim will be encouraged or forced to run a full scan and results will reveal a scary list of infected files, the same fake ones planted by the Trojan.
• In order to remove the found infections, the PC user will be encouraged to buy the full version, as the trial version cannot fully complete removal.

Stop! Do not forget that this is a Rogue Defragmenter Program. Never trust ANY program you did not load or invite inside knowingly. Paying for a Rogue Defragmenter Program will not correct the problem, as the Rogue Defragmenter Program is the infection and has planned the attack. In fact, while you are busy with the onscreen theatrics, the Trojan is busy in the background robbing you blind. Data will be stolen and a port opened to intercept the download of more malicious programs. So if you fall victim, you will not only throw away hard earned money but too will endure more mayhem and theft. 

The only way to stop the attack is by aggressively removing all files associated with the Rogue Defragmenter Program. Unfortunately, finding all the files may be easy said than done because the Trojan is outfitted with a rootkit. A rootkit is a malicious tool able to mask and bury malicious files so that novice PC user and subpar Internet security tools will not find them. If you cannot find a file, you cannot remove it. The best way to combat such aggressive malware is by using a formidable opponent, a professional and stealth antimalware program of your own choosing, and one that not only is able to uproot hidden malware, but better guard your system going forth.