HT Logs. Tips, FAQs, Analyze.

RegistryClever is a harmful program.

It is a fake security tool, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

RegistryClever associated files:

C:\Program Files\RegistryClever Software
C:\Program Files\RegistryClever Software\RegistryClever
C:\Program Files\RegistryClever Software\RegistryClever\Styles
C:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever
C:\Documents and Settings\All Users\Application Data\RegistryClever
C:\Documents and Settings\All Users\Application Data\RegistryClever\BackupedItems
C:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe
C:\Program Files\RegistryClever Software\RegistryClever\license.txt
C:\Program Files\RegistryClever Software\RegistryClever\RegistryClever.exe
C:\Program Files\RegistryClever Software\RegistryClever\uninstall.exe
C:\Program Files\RegistryClever Software\RegistryClever\Styles\Vista.cjstyles
C:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\Homepage.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\RegistryClever.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\RegistryClever\Uninstall.lnk
C:\Documents and Settings\All Users\Application Data\RegistryClever\BackupedItems\items.xml
C:\Documents and Settings\All Users\Desktop\RegistryClever.LNK

RegistryClever associated registry keys and values:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\trayscan

Core file: RegistryCleverTray.exe
Home folder: %ProgramFiles%\RegistryClever Software
Command: %ProgramFiles%\RegistryClever Software\RegistryClever\RegistryCleverTray.exe
HijackThis shows RegistryClever Line:

O4 – HKCU\..\Run: [TrayScan] “C:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe”

Description: fake Windows registry cleaner

How to remove: use the RegistryClever removal guide

This entry was posted on Wednesday, September 15th, 2010 at 10:15 am and is filed under Malware, O4. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.