Emsisoft Malware-Info

Name: Adware.Win32.RegistryHelper

Risklevel: Medium Risk

Company: SafeApp Software - http://www.reghelper.com/rh/

Description:

RegistryHelper is a rogue security program that shows false Warning messages. It also shows misleading scan Results. It can also install through Trojan exploits.

Removal instructions for Adware RegistryHelper:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware RegistryHelper.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It shows false Warning messages.
  • It also shows misleading scan Results.
  • It can also install through Trojan exploits.

Installation: Installed through EXE

Process: RegistryHelper.exe

Screenshots:

RegistryHelperRegistryHelperRegistryHelperRegistryHelperRegistryHelperRegistryHelperRegistryHelperRegistryHelper

Used folders:

  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Startup Manager
  • C:\Program Files\Registry Helper
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Full Backups
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Item Backups
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings

Used files:

  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver.ini
    [24 Bytes] Configuration Settings
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Settings.efs
    [37 Bytes] EFS File
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Registry Helper Log.txt
    [0 Bytes] Text Document
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Visit our Website.lnk
    [752 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\BackupOptions.efs
    [14 Bytes] EFS File
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Ignored.efs
    [0 Bytes] EFS File
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Options.efs
    [22 Bytes] EFS File
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\RegistryHelper.ini
    [117 Bytes] Configuration Settings
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\Results.efs
    [159 Bytes] EFS File
  • desktop+\Registry Helper.lnk
    [761 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Application Data\Registry Helper\Settings\StatusInfo.efs
    [7 Bytes] EFS File
  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\ping.txt
    [1 Bytes] Text Document
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Uninstall Registry Helper.lnk
    [529 Bytes] Shortcut
  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver.dat
    [1240 Bytes] DAT File
  • C:\Program Files\Registry Helper\RegistryHelper.exe
    [3851560 Bytes] Application
  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\Program Files\SafeApp Screen Savers\RestoreRHScreenSaver.REG
    [186 Bytes] Registration Entries
  • C:\Program Files\SafeApp Screen Savers\RestoreSSTimeOut.bat
    [47 Bytes] MS-DOS Batch File
  • C:\Program Files\SafeApp Screen Savers\SetSSTimeOut.exe
    [21808 Bytes] Application
  • C:\WINDOWS\system32\Registry Helper Screen Saver dir\Registry Helper Screen Saver.swf
    [29998 Bytes] Shockwave Flash Object
  • C:\Program Files\Registry Helper\letter3.htm
    [12474 Bytes] HTM File
  • C:\Program Files\SafeApp Screen Savers\uninstSSREGHLP.exe
    [32301 Bytes] Application
  • C:\Program Files\Registry Helper\__removelinks.bat
    [446 Bytes] MS-DOS Batch File
  • C:\Program Files\Registry Helper\AdvisorLetters.exe
    [30024 Bytes] Application
  • C:\Program Files\Registry Helper\background.jpg
    [23220 Bytes] JPEG Image
  • C:\Program Files\Registry Helper\delete_invalid_entries_grey.jpg
    [10582 Bytes] JPEG Image
  • C:\Program Files\Registry Helper\ErrorFound.wav
    [22834 Bytes] Wave Sound
  • C:\Program Files\Registry Helper\header.gif
    [18661 Bytes] GIF Image
  • C:\Program Files\Registry Helper\help.chm
    [1099738 Bytes] Compiled HTML Help file
  • C:\Program Files\Registry Helper\letter.htm
    [34 Bytes] HTM File
  • C:\Program Files\Registry Helper\RegistryHelperSetupTR.exe
    [83256 Bytes] Application
  • C:\Program Files\Registry Helper\letter2.htm
    [11837 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Registry Helper.lnk
    [773 Bytes] Shortcut
  • C:\Program Files\Registry Helper\letter4.htm
    [14208 Bytes] HTM File
  • C:\Program Files\Registry Helper\letter5.htm
    [11076 Bytes] HTM File
  • C:\Program Files\Registry Helper\logo.jpg
    [45373 Bytes] JPEG Image
  • C:\Program Files\Registry Helper\print_16.gif
    [609 Bytes] GIF Image
  • C:\Program Files\Registry Helper\Registry Helper.url
    [50 Bytes] Internet Shortcut
  • C:\Program Files\Registry Helper\RegistryHelperSetupCB.exe
    [610304 Bytes] Application
  • C:\Program Files\Registry Helper\uninst.exe
    [37199 Bytes] Application
  • C:\Program Files\Registry Helper\vbrun60sp5.exe
    [1044168 Bytes] Application
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Registry Helper\Registry Helper Help.lnk
    [719 Bytes] Shortcut
  • C:\Program Files\Registry Helper\letter1.htm
    [18731 Bytes] HTM File

Additional information might be found here:

Search at Google for Adware RegistryHelper Search at Google for Adware RegistryHelper
Search at Bing for Adware RegistryHelper Search at Bing for Adware RegistryHelper
Search at Yahoo for Adware RegistryHelper Search at Yahoo for Adware RegistryHelper

How can I protect myself from Adware RegistryHelper?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software