Popular Reviews

Adware Removal

» Adware Removal

Rogueware Removal

» Rogueware Removal

Keylogger Removal

Fix PC Errors

Helpful Definitions

Learn More

» Learn More

Antispyware Reviews

Registry Cleaner Reviews

Firewall Reviews

Spam Filter Reviews

RegClean

Kudos:

"You guys rock. Your instructions were spot on! Thank You"
- J. Powell

"I was infected by SystemTool today. Thanks for the help on the page. I have removed it completely"
- L. Lepsře

"Your web page on Regclean was extremely helpful and very, very education. Its objectivity to was nothing short of excellent. Thank you..."
- Anthony G. Muya

"I want to express my thanks for the information on removing the browser hijacker. I took the steps you suggested and the follow-on precautions to prevent future infections... Thanks again"
- Carlos


For Information and Removal of RegClean

    - what is RegClean
    - automatic and manual removal instructions
    - personal assistance provided online or by phone to safely remove RegClean.

 

Please note that Systweak's RegClean Pro is not considered a security threat by reputable security sources. This article refers to a rogue program called RegClean or RegClean 2008, which is a clone of ErrorSweeper rogueware.

RegClean

Have you noticed changes in your computer's operation?  A sudden increase in the number of pop-ups you see, as well as changes in your browser settings and slow general performance, may tell you that a rogue antivirus program has been installed.  Rogue programs like RegClean often leave several clues that can help us identify them before we end up wasting money on ineffective software.

What is RegClean?

A rogue antivirus program creates false warning messages and scan results in order to convince computer users that there are multiple risks to their system present.  The only solution, they claim, is to immediately upgrade to their software.  RegClean, also known as RegClean 2008, is one of a number of such rogue programs and is a clone of ErrorSweeper.  It uses pop-ups with false scan results and security alerts and offers to clean your registry and remove these "threats."  If a user opts to purchase the software, protection is nowhere to be found.  This program is ineffective and cannot scan your system or remove real threats. 

How Does RegClean Become Installed?

RegClean, like other rogue antivirus programs, may succeed in persuading computer users to install its software directly.  These users may be convinced that there are serious risks that need attention, and they may assume that this scan has been performed by their existing security program.  Rogue programs are designed to use people's desire to protect their computers, and it can be effective because people tend to act quickly when confronted with such warnings.

But RegClean doesn't rely on direct installation alone.  It can download itself into your system through a Trojan.  Like the Greek myth, these technical versions of the Trojan horse carry in unwelcome visitors.  Malware, included RegClean or other rogue antivirus programs, gain access to your system in this way. 

How do Trojans enter your computer?  They disguise themselves as something different; for example, the Trojan Zlob pretends to be a video codec.  When you download a video to play, you need a codec to decompress the digital media.  Zlob comes in when you install the codec.  Another example is a Trojan which has disguised itself as an Adobe Flash update.  When you agree to update, thinking that the prompt comes from Adobe (which is in no way affiliated with the Trojan), the Trojan enters and can bring in RegClean.

How Will Users Know if RegClean is Installed In Their System?

If you have not installed the program directly, which is most often the case, then it is important to recognize the signs that it has been downloaded.  Pop-ups are often the first solid indicator of the presence of RegClean.  Because filters normally block these, it is important to pay attention when they begin popping up.  You will see warnings that your computer is not fully protected and that it is recommended you register your version of RegClean immediately.  Many pop-ups simulate a scan, but it is vital to remember that they are just ads.  This program cannot scan your system.  The "threats" it finds are false. 

Another tactic that RegClean uses is to initiate a startup wizard.  You are encouraged to register RegClean and receive the protection of the full version.  It implies that you have an unlicensed, or free version, that needs to be upgraded.  You can tell that this is generated by a rogue program because you know what security programs you have on your computer.  If warning messages do not come from your security program, this indicates that they are rogue antivirus program ads. 

Computer slowdown is typical when there is a rogue antivirus program in your computer.  RegClean launches itself every time your computer is started and remains running.  It uses your system resources, draining the available CPU for your legitimate programs.  You may also notice increased 404 error messages, telling you that you cannot access the website you wanted, and you should immediately click here to scan your system.  This, as well as desktop shortcuts and flashing icons, seek to lead you to the RegClean website.

Note:  if you are directed to the RegClean website, look at the type of language and syntax.  This example shows the typical logical errors, strange usage, and random bold words characteristic of rogue antivirus programs:

Q: Why is my computer slow? A: It's not a virus and it's not a problem with your hardware. The fact of the matter is that your Windows registry is corrupted, seriously compromising your computer's speed and stability.

It is unclear.  Also note that there is no contact information on the website. These are clear indicators of a rogue program.

Removing RegClean

While rogue antivirus programs are relatively easy to spot, they are very difficult to remove.  They are designed to both evade detection and block access to legitimate security sites.  Because of this, they are not able to be removed by running your virus scan program or uninstalling the program.  Two options are left to effectively and entirely remove RegClean: manual and automatic removal.

Manual removal is recommended for only those with extensive computer experience and expertise because it is possible to inadvertently cause damage to your system.  Again, these programs are designed to be very difficult to remove.  Below are removal instructions if you have time, patience, and experience.

An option that is available to everyone is automatic removal.  A program, such as Malwarebytes Anti-Malware (Malwarebytes has free malware removal) , that is specifically designed to handle rogue antivirus programs can locate and remove every file and registry key associated with RegClean without the risk of further damage to your system.  It is quick and less expensive than hiring a computer technician to remove it manually.

Stop Processes:

Icon.exe

Launcher.exe

RegClean.exe

symlcsv1.exe

2007-12-31_Downloader.MisleadApp_setupxv.exe.1.exe

Remove DLL Files:

RegCleaner.dll

TCL.dll

zlib.dll

Remove Registry Entries:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunRegClean"RegClean" = "%ProgramFiles%RegCleanRegClean.exe"

HKEY_CURRENT_USERSoftwareRegClean

HKEY_CLASSES_ROOTInstallerFeaturesFFA8396D4C03C9046B76F3563057B08B

HKEY_CLASSES_ROOTInstallerProductsFFA8396D4C03C9046B76F3563057B08B

HKEY_CLASSES_ROOTInstallerUpgradeCodes8E650C92721B8364BB774E25145C382A

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{D6938AFF-30C4-409C-B667-3F6503750BB8}

HKEY_LOCAL_MACHINESOFTWARERegClean

Remove Files:

2008 Jan 07 - 12_01_02 PM_031.log

2008 Jan 07 - 12_01_10 PM_843.log

2007-12-31_Downloader.MisleadApp_setupxv.exe.1.exe

symlcsv1.exe

RegClean.lnk

RegClean on the Web.lnk

RegClean.lnk

DataBase.ref

Launcher.exe

RegClean.exe

RegClean.url

RegCleaner.dll

TCL.dll

zlib.dll

[RANDOM NAME].msi

Icon.exe

RegClean Scheduled Scan.job



Removing RegClean Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of RegClean and any hidden Trojans. As a precaution we recommend double checking your system with SpyHunter. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Download SpyHunter

Remove RegClean Now:

  1. Download and install Malwarebytes Anti-Malware and SpyHunter Download  
  2. Run a scan with Malwarebytes Anti-Malware.
  3. Remove all the detected infections (free).
  4. Run a scan with SpyHunter
  5. Remove any remaining infections
  6. Reboot and rescan with SpyHunter. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing RegClean please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.


Disclaimer: This webpage was created to provide information on RegClean and how to uninstall it. Manual removal instructions are intended for use by technical experts and should be used at your own risk. We do not own or endorse RegClean.




We are affiliated with some of the legitimate programs recommended on this website. Should you choose to use the programs recommended here, we may receive a fee that will help support the site.

NEWS | ARTICLES | REVIEWS | CONTACTS | LINK TO US
All content copyright 2006-2014, RemoveAdware.com.au. Author: Wayne Davis.
All Rights Reserved. All trademarks and company brand names are acknowledged.
Privacy Policy | Terms Of Service