What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Restoro Cyprus Limited and Reimage Cyprus Limited agreed in March 2024 to a $26 million Federal Trade Commission settlement over allegations that they used fake Windows-style warnings, misleading computer scans and deceptive telemarketing to sell software and expensive repair services. The FTC began distributing the money in 2025 through PayPal and said in March 2026 that checks were being sent to people who did not accept those payments.
The settlement resolved the FTC’s civil charges; it was not a criminal conviction or a trial finding that every allegation occurred. The complaint’s central claim was that consumers were misled about the condition of their computers and the need for paid services.
The case at a glance
| Question | Answer |
|---|---|
| Companies | Restoro Cyprus Limited and Reimage Cyprus Limited |
| Where the case was filed | U.S. District Court for the District of Columbia; FTC matter X240021 |
| FTC action | Complaint and stipulated final order filed in March 2024 |
| Settlement obligation | $26 million intended for consumer redress |
| Refund activity | More than $25.5 million announced for distribution in 2025; checks followed in 2026 for people who did not accept PayPal payments |
The FTC alleged violations of the FTC Act’s ban on deceptive practices and the Telemarketing Sales Rule. The order prohibits deceptive claims about security, performance or other material computer problems and prohibits deceptive telemarketing. Read the FTC’s announcement at ftc.gov and the case record at the FTC case page.
How the alleged sales funnel worked
According to the FTC complaint, the process moved consumers from a frightening online message to a much more expensive telephone sale:
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
- Scare pop-up: An online advertisement or browser pop-up appeared in a Windows-like style and claimed that the computer had viruses or serious security problems. The FTC said these messages impersonated Windows; they were not warnings issued by Microsoft.
- Misleading scan: Consumers were directed to run a supposedly free diagnostic scan. The FTC alleged that the scan generally reported serious issues regardless of the computer’s actual condition.
- Low-cost software: The advertised Restoro or Reimage product typically cost $27 to $58, according to the FTC’s consumer alert.
- Activation call: After buying, consumers were told to call a number to activate the software.
- Alleged false diagnosis: The complaint says telemarketers reviewed computer information and treated ordinary Windows Event Viewer entries, or information from another computer, as proof of malware or major performance problems.
- Technician upsell: Consumers were then offered remote technician services costing approximately $199 to $499 more.
The FTC’s consumer guidance explains the warning signs and prices at consumer.ftc.gov.
Why the FTC called the services deceptive
“Fake services” is shorthand for the alleged sales practice, not proof that every software feature was nonexistent. The FTC’s theory was that the companies fabricated or exaggerated diagnoses and used those claims to make products and repairs appear necessary.
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
The complaint describes undercover testing on a computer that had no security or performance problems and already had antivirus protection. The FTC alleged that the sales process still produced alarming results and an offer of paid assistance. That distinction matters: the legal issue was the claimed condition of the computer and the urgency of the intervention.
Older consumers were particularly affected, the FTC said, although the allegations did not limit the scheme to older adults.
Rank #3
![Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41JNWru8mYL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
What the settlement requires
Under the stipulated final order, the companies agreed to:
- Pay $26 million for consumer redress.
- Stop misrepresenting security, performance or other material problems involving a consumer’s computer.
- Stop deceptive telemarketing.
The payment is a civil enforcement settlement and consumer-redress mechanism, not a conventional criminal fine. A stipulated order resolves the FTC’s charges without requiring this article to treat every allegation as independently proven at trial.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Refunds: PayPal payments and later checks
Payments announced in 2025
In March 2025, the FTC announced more than $25.5 million in payments to affected consumers, including 736,375 PayPal payments scheduled for March 13–14. Recipients were told to redeem PayPal payments within 30 days. The FTC’s announcement is at ftc.gov.
Checks sent in 2026
The FTC’s Restoro-Reimage refund page says checks were sent to people who did not accept their PayPal payments. Check recipients were instructed to cash them within 90 days. The same page identifies Rust Consulting, Inc. as the administrator and provides the current contact number, 1-844-590-1102.
Free tools Windows power users keep installed
One-click scans. No signup required.
Best Value
- POWERFUL, LIGHTNING-FAST ANTIVIRUS: Protects your computer from viruses and malware through the cloud; Webroot scans faster, uses fewer system resources and safeguards your devices in real-time by identifying and blocking new threats
- IDENTITY THEFT PROTECTION: Protects your usernames, account numbers and other personal information against keyloggers, spyware and other online threats targeting valuable personal data
- REAL-TIME ANTI-PHISHING: Proactively scans websites, emails and other communications and warns you of potential danger before you click to effectively stop malicious attempts to steal your personal information
- ALWAYS UP TO DATE: Webroot scours 95% of the Internet three times per day including billions of web pages, files and apps to determine what is safe online and enhances the software automatically without time-consuming updates
How to verify a refund
Warning: The FTC does not require a fee, cryptocurrency payment, gift card or bank-account password to issue a refund.
- Use the FTC’s official refund page rather than a link in an unexpected email or text.
- Do not pay a “processing,” “tax” or “release” charge.
- Do not provide Social Security, full bank-account, credit-card or cryptocurrency details to someone promising to unlock a payment.
- Be wary of requests for remote access, fake checks followed by demands to return money, or callers impersonating the FTC, Rust Consulting, PayPal or law enforcement.
- Confirm deadlines directly with the official FTC information. PayPal payments had a 30-day redemption period; checks have a 90-day cashing period.
What to do if you saw a warning or called the number
If you only saw or clicked the pop-up
- Do not call the number or follow its payment link.
- Close the browser. If it will not close, use the operating system’s normal force-quit or restart procedure.
- Run security software obtained from the installed application or the vendor’s official website, not from the pop-up.
If you paid or installed remote-access software
- Disconnect the computer from the internet if a stranger still has access.
- Contact your bank or card issuer promptly about unauthorized or disputed payments.
- Change passwords from a separate, clean device, prioritizing email, banking and password-manager accounts.
- Ask a trusted technician or the device manufacturer’s official support channel to inspect the computer. Uninstalling a remote-access tool alone does not establish that all access or credential exposure has been eliminated.
If you shared financial or identity information
Tell the relevant financial institution immediately, monitor statements and account alerts, and report the incident at ReportFraud.ftc.gov. Legitimate technology companies do not unexpectedly call, email or text consumers to announce a computer problem.
How to recognize the same pattern in the future
- A Windows logo or official-looking color scheme does not prove that Microsoft generated a message.
- A phone number embedded in a pop-up is a major warning sign.
- A browser page can display alarming text without performing a trustworthy system-level scan.
- Open antivirus software from its installed app or type the vendor’s known official address yourself.
- Treat sudden urgency, demands for remote access and claims that routine technical logs prove infection as reasons to stop and seek an independent opinion.
The Restoro-Reimage case illustrates why a small software purchase can become a high-pressure support sale: impersonation creates fear, a questionable diagnosis supplies technical-sounding proof, and a phone operator turns that fear into an expensive upsell.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
