If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
|
Thread Tools | Rate Thread | Display Modes |
#1
|
|||
|
|||
Registration Rewards
An icon labeled Registration Rewards has appeared on my desk top and I
don't know where it comes from. It has the arrow of a shortcut which points to http://clubrewards.myregistration.com/. It seems to be associated with a bundle of 5 Java files. Does anyone know what it is and how it is likely to have arrived? |
Ads |
#2
|
|||
|
|||
Registration Rewards
Eric Stevens wrote:
An icon labeled Registration Rewards has appeared on my desk top and I don't know where it comes from. It has the arrow of a shortcut which points to http://clubrewards.myregistration.com/. It seems to be associated with a bundle of 5 Java files. Does anyone know what it is and how it is likely to have arrived? Likely bundleware with something else you chose to install. Might've been forced bundleware, or might've been optional bundleware but you speedily clicked through the installer instead of reading the screens and performing a custom install. Might be some "feature" of some software you installed. Go into Apps & Features (enter "uninstall" in the Cortana/Search box in the taskbar), sort by install date, and look at what you've recently installed. That will include programs/apps that got updated, but you're interested in which ones you elected to install. When I Googled on "myregistration.com" (with quotes to eliminate some of the other crap that Google includes, like "myregistry.com"), and selected to view their cached version (to eliminate visiting the site), it said the domain is currently offline. http://themecraft.net/www/clubreward...gistration.com (See their home page regarding their "report card" on the site.) Perhaps you installed some old software that either had bundleware that used the site or it was a "feature" of that old software, but the site the feature used went belly up. https://www.whois.com/whois/myregistration.com That indicates that Equifax owns the myregistration.com domain. Did you recently get your credit record? I don't remember Equifax installing any software, but maybe you went to some other web site that says they'll give you your credit score or records for free, and you let them install some software. I'm curious why you still have Java installed? Your computer is the property of your company that still uses mission-critical Java apps? When you look at the properties of the desktop shortcut to see to where it points, along with those Java files, were they under a folder that might identify for what program they are associated? |
#3
|
|||
|
|||
Registration Rewards
On Tue, 30 Jul 2019 10:38:52 -0500, VanguardLH wrote:
Eric Stevens wrote: An icon labeled Registration Rewards has appeared on my desk top and I don't know where it comes from. It has the arrow of a shortcut which points to http://clubrewards.myregistration.com/. It seems to be associated with a bundle of 5 Java files. Does anyone know what it is and how it is likely to have arrived? Likely bundleware with something else you chose to install. That's my suspicion too, but the timing seems wrong. I recently reinstalled Corel Photopaint 2002 (to recover some old files) and although I had to enter a key it still keeps pestering me to register it. The registration process refers me to a URL which has not existed for many years. If anything is likely to have installed Registration Rewards it is that, but the RR icon only popped several weeks after the installation of Photopaint. RR does not appear as an installed program so it is likely that it hasn't affected the registry. I think I shall just delete every file that appears to have anything to do with it. Might've been forced bundleware, or might've been optional bundleware but you speedily clicked through the installer instead of reading the screens and performing a custom install. Might be some "feature" of some software you installed. Go into Apps & Features (enter "uninstall" in the Cortana/Search box in the taskbar), sort by install date, and look at what you've recently installed. That will include programs/apps that got updated, but you're interested in which ones you elected to install. When I Googled on "myregistration.com" (with quotes to eliminate some of the other crap that Google includes, like "myregistry.com"), and selected to view their cached version (to eliminate visiting the site), it said the domain is currently offline. http://themecraft.net/www/clubreward...gistration.com (See their home page regarding their "report card" on the site.) Perhaps you installed some old software that either had bundleware that used the site or it was a "feature" of that old software, but the site the feature used went belly up. https://www.whois.com/whois/myregistration.com That indicates that Equifax owns the myregistration.com domain. Did you recently get your credit record? I don't remember Equifax installing any software, but maybe you went to some other web site that says they'll give you your credit score or records for free, and you let them install some software. I'm curious why you still have Java installed? I don't. But downloaded Java scripts rings alarm bells. Your computer is the property of your company that still uses mission-critical Java apps? Nope. One of my home machines. When you look at the properties of the desktop shortcut to see to where it points, along with those Java files, were they under a folder that might identify for what program they are associated? Nope. Its just on the desk top. I have located the siblings via 'Everything'. |
#4
|
|||
|
|||
Registration Rewards
Eric Stevens wrote:
On Tue, 30 Jul 2019 10:38:52 -0500, VanguardLH wrote: Eric Stevens wrote: An icon labeled Registration Rewards has appeared on my desk top and I don't know where it comes from. It has the arrow of a shortcut which points to http://clubrewards.myregistration.com/. It seems to be associated with a bundle of 5 Java files. Does anyone know what it is and how it is likely to have arrived? Likely bundleware with something else you chose to install. That's my suspicion too, but the timing seems wrong. I recently reinstalled Corel Photopaint 2002 (to recover some old files) and although I had to enter a key it still keeps pestering me to register it. The registration process refers me to a URL which has not existed for many years. If anything is likely to have installed Registration Rewards it is that, but the RR icon only popped several weeks after the installation of Photopaint. RR does not appear as an installed program so it is likely that it hasn't affected the registry. I think I shall just delete every file that appears to have anything to do with it. Might've been forced bundleware, or might've been optional bundleware but you speedily clicked through the installer instead of reading the screens and performing a custom install. Might be some "feature" of some software you installed. Go into Apps & Features (enter "uninstall" in the Cortana/Search box in the taskbar), sort by install date, and look at what you've recently installed. That will include programs/apps that got updated, but you're interested in which ones you elected to install. When I Googled on "myregistration.com" (with quotes to eliminate some of the other crap that Google includes, like "myregistry.com"), and selected to view their cached version (to eliminate visiting the site), it said the domain is currently offline. http://themecraft.net/www/clubreward...gistration.com (See their home page regarding their "report card" on the site.) Perhaps you installed some old software that either had bundleware that used the site or it was a "feature" of that old software, but the site the feature used went belly up. https://www.whois.com/whois/myregistration.com That indicates that Equifax owns the myregistration.com domain. Did you recently get your credit record? I don't remember Equifax installing any software, but maybe you went to some other web site that says they'll give you your credit score or records for free, and you let them install some software. I'm curious why you still have Java installed? I don't. But downloaded Java scripts rings alarm bells. Your computer is the property of your company that still uses mission-critical Java apps? Nope. One of my home machines. When you look at the properties of the desktop shortcut to see to where it points, along with those Java files, were they under a folder that might identify for what program they are associated? Nope. Its just on the desk top. I have located the siblings via 'Everything'. I had a case where a Java program "woke up", because it had been installed when there was no Java on the computer. I installed Java temporarily for some reason, and after a reboot the program sprang to life, doing whatever it was supposed to be doing two years before that. Scared the crap out of me... So it can be a dormant install of something, which only becomes evident, right after some version of Java is installed for some other reason. Paul |
#5
|
|||
|
|||
Registration Rewards
On Tue, 30 Jul 2019 19:14:45 -0400, Paul
wrote: Eric Stevens wrote: On Tue, 30 Jul 2019 10:38:52 -0500, VanguardLH wrote: Eric Stevens wrote: An icon labeled Registration Rewards has appeared on my desk top and I don't know where it comes from. It has the arrow of a shortcut which points to http://clubrewards.myregistration.com/. It seems to be associated with a bundle of 5 Java files. Does anyone know what it is and how it is likely to have arrived? Likely bundleware with something else you chose to install. That's my suspicion too, but the timing seems wrong. I recently reinstalled Corel Photopaint 2002 (to recover some old files) and although I had to enter a key it still keeps pestering me to register it. The registration process refers me to a URL which has not existed for many years. If anything is likely to have installed Registration Rewards it is that, but the RR icon only popped several weeks after the installation of Photopaint. RR does not appear as an installed program so it is likely that it hasn't affected the registry. I think I shall just delete every file that appears to have anything to do with it. Might've been forced bundleware, or might've been optional bundleware but you speedily clicked through the installer instead of reading the screens and performing a custom install. Might be some "feature" of some software you installed. Go into Apps & Features (enter "uninstall" in the Cortana/Search box in the taskbar), sort by install date, and look at what you've recently installed. That will include programs/apps that got updated, but you're interested in which ones you elected to install. When I Googled on "myregistration.com" (with quotes to eliminate some of the other crap that Google includes, like "myregistry.com"), and selected to view their cached version (to eliminate visiting the site), it said the domain is currently offline. http://themecraft.net/www/clubreward...gistration.com (See their home page regarding their "report card" on the site.) Perhaps you installed some old software that either had bundleware that used the site or it was a "feature" of that old software, but the site the feature used went belly up. https://www.whois.com/whois/myregistration.com That indicates that Equifax owns the myregistration.com domain. Did you recently get your credit record? I don't remember Equifax installing any software, but maybe you went to some other web site that says they'll give you your credit score or records for free, and you let them install some software. I'm curious why you still have Java installed? I don't. But downloaded Java scripts rings alarm bells. Your computer is the property of your company that still uses mission-critical Java apps? Nope. One of my home machines. When you look at the properties of the desktop shortcut to see to where it points, along with those Java files, were they under a folder that might identify for what program they are associated? Nope. Its just on the desk top. I have located the siblings via 'Everything'. I had a case where a Java program "woke up", because it had been installed when there was no Java on the computer. I installed Java temporarily for some reason, and after a reboot the program sprang to life, doing whatever it was supposed to be doing two years before that. Scared the crap out of me... So it can be a dormant install of something, which only becomes evident, right after some version of Java is installed for some other reason. Everything tells me I have Java scripts all over the place but no Java. |
#6
|
|||
|
|||
Registration Rewards
On Wed, 31 Jul 2019 22:27:00 +1200, Eric Stevens
wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. |
#7
|
|||
|
|||
Registration Rewards
Char Jackson wrote:
On Wed, 31 Jul 2019 22:27:00 +1200, Eric Stevens wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. Java involves things like .jar files, which is a file format that can be opened by ZIP tools. Things ending in .js would be Javascript (an entirely different animal). If you burrow into a .jar, you eventually see "class". .jar foldername \ foldername \___ namespace foldername / .class file --- binary file with text strings Java can be compiled or interpreted. This shows the compiled path. https://i.stack.imgur.com/uQyXQ.png The source filenames seem to end in .java. Here is a sample of source code. http://www.docjar.com/html/api/java/...List.java.html Java has changed a bit over the years, and I've never been all that curious about it. Seeing as leaving it installed, is considered an attack surface. Just like silverlight, flash, .net and tons of other junk in the trunk. Paul |
#8
|
|||
|
|||
Registration Rewards
On Wed, 31 Jul 2019 08:38:57 -0500, Char Jackson
wrote: On Wed, 31 Jul 2019 22:27:00 +1200, Eric Stevens wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. I have 'rewards.js' files in 5 places in my Windows folder. See https://filext.com/file-extension/JS re the .js extension. |
#9
|
|||
|
|||
Registration Rewards
In article , Eric Stevens
wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. I have 'rewards.js' files in 5 places in my Windows folder. See https://filext.com/file-extension/JS re the .js extension. javascript (no space), not java. |
#10
|
|||
|
|||
Registration Rewards
On Thu, 01 Aug 2019 11:44:00 +1200, Eric Stevens
wrote: On Wed, 31 Jul 2019 08:38:57 -0500, Char Jackson wrote: On Wed, 31 Jul 2019 22:27:00 +1200, Eric Stevens wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. I have 'rewards.js' files in 5 places in my Windows folder. See https://filext.com/file-extension/JS re the .js extension. OK, like nospam said, that's javascript, not Java. Two entirely different things. |
#11
|
|||
|
|||
Registration Rewards
On Wed, 31 Jul 2019 21:48:15 -0400, nospam
wrote: In article , Eric Stevens wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. I have 'rewards.js' files in 5 places in my Windows folder. See https://filext.com/file-extension/JS re the .js extension. javascript (no space), not java. What is the significant difference betwee 'Java scripts' and Javascripts.js? |
#12
|
|||
|
|||
Registration Rewards
On Wed, 31 Jul 2019 20:54:57 -0500, Char Jackson
wrote: On Thu, 01 Aug 2019 11:44:00 +1200, Eric Stevens wrote: On Wed, 31 Jul 2019 08:38:57 -0500, Char Jackson wrote: On Wed, 31 Jul 2019 22:27:00 +1200, Eric Stevens wrote: Everything tells me I have Java scripts all over the place but no Java. I've been meaning to ask, what are "Java scripts"? By chance, are they javascript files, usually marked by their .js extension? If so, that has nothing whatsoever to do with Java, other than the similar-sounding name. Or is it something else entirely? Actual Java code is never referred to as a script, so I'm confused. I have 'rewards.js' files in 5 places in my Windows folder. See https://filext.com/file-extension/JS re the .js extension. OK, like nospam said, that's javascript, not Java. Two entirely different things. I didn't confuse javascript.js with the Java language but I did assume that javascripts.js did have something to do with Java. Am I wrong? |
#13
|
|||
|
|||
Registration Rewards
Eric Stevens wrote:
I did assume that javascripts.js did have something to do with Java. Am I wrong? Unfortunately, you are. |
#14
|
|||
|
|||
Registration Rewards
On Thu, 1 Aug 2019 08:03:19 +0100, Andy Burns
wrote: Eric Stevens wrote: I did assume that javascripts.js did have something to do with Java. Am I wrong? Unfortunately, you are. Its not unfortunate as I have not acted on that misaprehension, but what are javascripts.js? |
#15
|
|||
|
|||
Registration Rewards
Eric Stevens wrote:
On Thu, 1 Aug 2019 08:03:19 +0100, Andy Burns wrote: Eric Stevens wrote: I did assume that javascripts.js did have something to do with Java. Am I wrong? Unfortunately, you are. Its not unfortunate as I have not acted on that misaprehension, but what are javascripts.js? Based on file extension, isn't that text ? If so, open the file and have a look. jsbeautifier.org is a web site that downloads some code into your browser, to reformat script-like languages. (The reformatting is done locally, not on their server.) When you paste some "ugly" looking code, the code in the browser can then tidy it up, indent it and so on. Javascript files can be obfuscated, by changing the variable names to i,j,k and so on, hiding the purpose of the variables. This is how, typically, 500KB .js files are distributed from websites, in an effort to "protect" the intellectual property contained in the file. If the .js file is doing something evil (like tracking code), the author of the module will definitely be obfuscating the logic. And this happens in a lot of things. Some things we use, do actually have a human readable form, but the form is used so seldom, nobody is even aware that is a possibility. I do not expect any .js files you examine to be remotely comprehensible, because the intent will "have left the station long ago". Even if you beautify the source, the "logic" of what's in there, may not be apparent. Only if you write your own Javascript, will it look read-able. http://www.rosettacode.org/wiki/Hunt...pus/Javascript http://www.rosettacode.org/wiki/Hunt_The_Wumpus/Java And a "registration module" doesn't even need branding inside it. The "registration module" could be packaged alongside branded modules, and the branded modules show the branding (an icon maybe), then the "generic" registration module takes over and collects your particulars (for later abuse by the registration company). There's no point in collecting registration info, unless you can monetize it somehow. Paul |
|
Thread Tools | |
Display Modes | Rate This Thread |
|
|