Home Malware Programs Rogue Anti-Spyware Programs Real Registry Cleaner

Real Registry Cleaner

Posted: June 7, 2012

Threat Metric

Threat Level: 2/10
Infected PCs: 16
First Seen: June 7, 2012
OS(es) Affected: Windows

Real Registry Cleaner is a fake defragmenter and system cleanup solution that claims to be capable of removing problematic errors in your Registry and hard drive. Rather than accomplishing its stated mission, Real Registry Cleaner actually displays lists of predesignated warnings that make it appear as if your hard drive is damaged, afterward requesting money in exchange for installing a 'licensed' version of its software to correct these errors. As scamware, Real Registry Cleaner isn't able to detect or remove any HD problems no matter how much money you pay for Real Registry Cleaner, and SpywareRemove.com malware experts encourage you to send Real Registry Cleaner straight to the Recycle Bin with assistance from reputable anti-malware software.

The Scum Just Below Real Registry Cleaner's Shiny Surface

Real Registry Cleaner (also known as Win32/Adware.RealRegistryCleaner or Win32.RealRegistryCleaner.AMN!A2) is a rogue Registry cleaner that doesn't have any legitimate functions that could protect your Registry, hard drive or other components of your PC. Such PC threats are often installed by Trojan droppers that are included in fake media (Flash, movie player, codec, etc.) updates, although there have also been instances of scamware similar to Real Registry Cleaner being installed by other means. While Real Registry Cleaner's preferred propagation method hasn't been spied out, malware researchers are able to confirm Real Registry Cleaner's compatibility with many versions of Windows, including Windows 7.

Real Registry Cleaner (a little ironically) uses Registry exploits to launch itself with Windows, after which Real Registry Cleaner will commence displaying inaccurate scans and pop-ups regarding your hard drive's health. The similarity of these alerts to warnings raised by older types of scamware than Real Registry Cleaner (such as Hard Drive Diagnostic, HDD Scan, HDD Plus and HDD Diagnostic) cause SpywareRemove.com malware analysts to suspect that Real Registry Cleaner is a direct clone of other scamware with a simple name change slapped on top.

However, regardless of Real Registry Cleaner's origins, Real Registry Cleaner's goal remains that of any 'good' scamware product: to make you spend money on its fake security software to remove the nonexistent problems that Real Registry Cleaner detects. SpywareRemove.com malware researchers especially discourage this as a quick means of compromising your financial information, and encourage deleting Real Registry Cleaner with a legitimate anti-malware program before you take any drastic measures regarding your PC's security.

Polishing Off Real Registry Cleaner for a Truly Clean Hard Drive

OSes that have been confirmed to be vulnerable to Real Registry Cleaner attacks include Windows 2000, Windows XP, Windows 7, Windows Vista and Windows 9x. Since fraudulent online scanners and malicious downloads are especially common infection vectors for scamware like Real Registry Cleaner, SpywareRemove.com malware experts encourage avoidance of suspicious sites and cautious usage of oft-exploited browser features (such as Java) as ways of avoiding potential Real Registry Cleaner infections.

Because Real Registry Cleaner and related PC threats may block anti-malware programs that are required to remove Real Registry Cleaner safely, you may need to prevent Real Registry Cleaner from launching. You can do this by launching Windows in Safe Mode (accessed by tapping F8 during a reboot) or, in more extreme cases, by booting a clean OS from a USB drive. SpywareRemove.com malware experts recommend a full system scan for Real Registry Cleaner's deletion, since Real Registry Cleaner is unlikely to be the only malware on any given PC.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Program Files%\GreatDefender Software\RRC\Real Registry Cleaner.exe File name: %Program Files%\GreatDefender Software\RRC\Real Registry Cleaner.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\All Users\Desktop\Real Registry Cleaner.lnk File name: %Documents and Settings%\All Users\Desktop\Real Registry Cleaner.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\RealRegistryCleanerHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Uninstall\Real Registry CleanerHKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “RealRegistryCleaner.exe”

7 Comments

  • Leticia says:

    I scaned my cuprotems registry from a registry cleaner, but I m in doubt that is it really cleaning the invalid registryies or not. I think that it is not compeletly scanning all registry entries. One more think I create a invalid registry in regeditor but it is not showing me that invalid registry. So how i can chk abt this is my registry cleaner is working fine or not

  • KattyLove says:

    I like this web site very much so much excellent info.

  • BRENDA BBROWNING says:

    I CAN NOT UNINSTALL DRIVER UPDATER

  • Marge says:

    Accidently got this somehow and I don't want it.

  • Charles Morgan says:

    This software is incompatible to other software on my computer

  • joaquim says:

    Creo que provoca malaware

  • Saritha says:

    Already have compatible software installed on my computer.

Loading...