Emsisoft Malware-Info
Name: Adware.Win32.RegistryHelper
Risklevel: Medium Risk
Company: SafeApp Software - http://www.reghelper.com/rh/
Description:
RegistryHelper is a rogue security program that shows false Warning messages. It also shows misleading scan Results. It can also install through Trojan exploits.
Removal instructions for Adware RegistryHelper:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware RegistryHelper.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- It shows false Warning messages.
- It also shows misleading scan Results.
- It can also install through Trojan exploits.
Installation: Installed through EXE
Process: RegistryHelper.exe
Screenshots:
Used folders:
- C:\Documents and Settings\[USER]\Application Data\Registry Helper\Startup Manager
- C:\Program Files\Registry Helper
- C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper
- C:\Documents and Settings\[USER]\Application Data\Registry Helper
- C:\Documents and Settings\[USER]\Application Data\Registry Helper\Full Backups
- C:\Documents and Settings\[USER]\Application Data\Registry Helper\Item Backups
- C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings
Used files:
- C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver.ini
[24 Bytes] Configuration Settings - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Settings.efs
[37 Bytes] EFS File - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Registry Helper Log.txt
[0 Bytes] Text Document - C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Visit our Website.lnk
[752 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\BackupOptions.efs
[14 Bytes] EFS File - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Ignored.efs
[0 Bytes] EFS File - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Options.efs
[22 Bytes] EFS File - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\RegistryHelper.ini
[117 Bytes] Configuration Settings - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Results.efs
[159 Bytes] EFS File - desktop+\Registry Helper.lnk
[761 Bytes] Shortcut - C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\StatusInfo.efs
[7 Bytes] EFS File - C:\WINDOWS\system32\Registry Helper Screen Saver dir\expire.scf
[1404 Bytes] Windows Explorer Command - C:\WINDOWS\system32\Registry Helper Screen Saver dir\ping.txt
[1 Bytes] Text Document - C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Uninstall Registry Helper.lnk
[529 Bytes] Shortcut - C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver.dat
[1240 Bytes] DAT File - C:\Program Files\Registry Helper\RegistryHelper.exe
[3851560 Bytes] Application - C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver1.dll
[34304 Bytes] Application Extension - C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver2.dll
[18192 Bytes] Application Extension - C:\Program Files\SafeApp Screen Savers\RestoreRHScreenSaver.REG
[186 Bytes] Registration Entries - C:\Program Files\SafeApp Screen Savers\RestoreSSTimeOut.bat
[47 Bytes] MS-DOS Batch File - C:\Program Files\SafeApp Screen Savers\SetSSTimeOut.exe
[21808 Bytes] Application - C:\WINDOWS\system32\Registry Helper Screen Saver dir\Registry Helper Screen Saver.swf
[29998 Bytes] Shockwave Flash Object - C:\Program Files\Registry Helper\letter3.htm
[12474 Bytes] HTM File - C:\Program Files\SafeApp Screen Savers\uninstSSREGHLP.exe
[32301 Bytes] Application - C:\Program Files\Registry Helper\__removelinks.bat
[446 Bytes] MS-DOS Batch File - C:\Program Files\Registry Helper\AdvisorLetters.exe
[30024 Bytes] Application - C:\Program Files\Registry Helper\background.jpg
[23220 Bytes] JPEG Image - C:\Program Files\Registry Helper\delete_invalid_entries_grey.jpg
[10582 Bytes] JPEG Image - C:\Program Files\Registry Helper\ErrorFound.wav
[22834 Bytes] Wave Sound - C:\Program Files\Registry Helper\header.gif
[18661 Bytes] GIF Image - C:\Program Files\Registry Helper\help.chm
[1099738 Bytes] Compiled HTML Help file - C:\Program Files\Registry Helper\letter.htm
[34 Bytes] HTM File - C:\Program Files\Registry Helper\RegistryHelperSetupTR.exe
[83256 Bytes] Application - C:\Program Files\Registry Helper\letter2.htm
[11837 Bytes] HTM File - C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Registry Helper.lnk
[773 Bytes] Shortcut - C:\Program Files\Registry Helper\letter4.htm
[14208 Bytes] HTM File - C:\Program Files\Registry Helper\letter5.htm
[11076 Bytes] HTM File - C:\Program Files\Registry Helper\logo.jpg
[45373 Bytes] JPEG Image - C:\Program Files\Registry Helper\print_16.gif
[609 Bytes] GIF Image - C:\Program Files\Registry Helper\Registry Helper.url
[50 Bytes] Internet Shortcut - C:\Program Files\Registry Helper\RegistryHelperSetupCB.exe
[610304 Bytes] Application - C:\Program Files\Registry Helper\uninst.exe
[37199 Bytes] Application - C:\Program Files\Registry Helper\vbrun60sp5.exe
[1044168 Bytes] Application - C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Registry Helper Help.lnk
[719 Bytes] Shortcut - C:\Program Files\Registry Helper\letter1.htm
[18731 Bytes] HTM File
Additional information might be found here:
Search
at Google for
Adware RegistryHelper
Search at Bing for
Adware RegistryHelper
Search
at Yahoo for
Adware RegistryHelper
How can I protect myself from Adware RegistryHelper?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here


























