What is RegClean Pro?

RegClean Pro is software application developed by Systweak Inc. It is most commonly found on computers running Windows 7 with nearly 63.37% of installations running this operating system. RegClean Pro's installer is typically 12.00 MB in size and installs around 68 files. The most common release is 6.21 with 98.89% of all installations currently using this version.

RegClean Pro is most popular in the United States with 33.96% of installations residing in this country.

RegClean Pro adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Multiple virus scanners have detected malware in RegClean Pro.

unins000.exe (MD5: b84669f5a2ec3c623fcb0153dd4617b3) has been flagged by 3 scanners:

Scanner Software	Version	Result
Dr.Web	7.0.12.3050	Program.Unwanted.290
G Data	25	Win32.Application.RegCleanPro.A
Symantec	20141.2.0.56	RegCleanPro

systweakasp.exe (MD5: 46a6d7e57a746804df6dd497c7329663) has been flagged by 9 scanners:

Scanner Software	Version	Result
AVware	1.5.0.16	Trojan.Win32.Generic!BT
Dr.Web	7.0.9.4080	Program.Unwanted.74
ESET-NOD32	10174	MSIL/AdvancedSystemProtector.D
McAfee	6.0.4.564	Artemis!46A6D7E57A74
McAfee-GW-Edition	2013	Artemis!46A6D7E57A74
Sophos	4.98.0	Generic PUA DG
Symantec	20131.1.5.61	AdvSystemProtector
VIPRE Antivirus	31740	Trojan.Win32.Generic!BT
G Data	25	Win32.Application.RegCleanPro.A

Software Behaviors

Scheduled tasks:

RegCleanPro.exe is scheduled as a task with the class '{8E1C85EC-BD30-4C94-8E5B-E2346143B062}' (runs on registration).
unins000.exe is scheduled as a task with the class '{B30886C0-6D6C-4570-988E-E5E41F92DF6F}' (runs on registration).
systweakasp.exe is scheduled as a task named 'Advanced System Protector'.

Startup Entries

Startup tasks:

RegCleanPro.exe is automatically launched at startup through a scheduled task named RegClean Pro.
systweakasp.exe is automatically launched at startup through a scheduled task named ASP.

Registry entries:

RegCleanPro.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'RDReminder' and executes as C:\Program Files\RegClean Pro\RegCleanPro.exe -rem.
systweakasp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'SystweakASP' and executes as "C:\Program Files\RegClean Pro\SystweakASP.exe" /verysilent.

Software Details

URL:

https://www.systweak.com/regcleanpro

Support:

–

Installation path:

C:\Program Files\RegClean Pro\

Uninstaller:

"C:\Program Files\RegClean Pro\unins000.exe" /silent

Size:

12.00 MB

Language:

Russian

RegClean Pro Executable Details

Primary executable:

RegCleanPro.exe

Name:

RegClean Pro

Path:

C:\Program Files\RegClean Pro\RegCleanPro.exe

MD5:

–

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

unins000.exe

Malware

b84669f5a2ec3c623fcb0153dd4617b3

DLL

isxdl.dll

df081f9371f8176fa9621a78ec607fcb

EXE

Setup.exe

2ed8c41d6d255bf7a0db025489be57d2

EXE

unins001.exe

70e82d770eb1345b55d9698081752b98

EXE

uninstaller.exe

38ad8b019dd067cd52fe19d621d257fc

EXE

NFOviewer.exe

3e2891a07a084833d7dcc1a6fc8898a0

DLL

system.data.sqlite.dll

65bab25e5bbd9bbe7f1e957e776858f6

DLL

commonforms.dll

0c0a1ae5fdf6f2ab16f4aa84a3e1367d

EXE

Download.exe

8429f7f8325bfd7442b4d90b09ea77c4

DLL

update.dll

aca1784812f25b477aa28a5d9a14d4f0

File Type	Filename	MD5
EXE	unins000.exe Malware	b84669f5a2ec3c623fcb0153dd4617b3
DLL	isxdl.dll	df081f9371f8176fa9621a78ec607fcb
EXE	Setup.exe	2ed8c41d6d255bf7a0db025489be57d2
EXE	unins001.exe	70e82d770eb1345b55d9698081752b98
EXE	uninstaller.exe	38ad8b019dd067cd52fe19d621d257fc
EXE	NFOviewer.exe	3e2891a07a084833d7dcc1a6fc8898a0
DLL	system.data.sqlite.dll	65bab25e5bbd9bbe7f1e957e776858f6
DLL	commonforms.dll	0c0a1ae5fdf6f2ab16f4aa84a3e1367d
EXE	Download.exe	8429f7f8325bfd7442b4d90b09ea77c4
DLL	update.dll	aca1784812f25b477aa28a5d9a14d4f0