home

rchelper.exe

Registry Clean Expert

CleanMyPC Technology Limited

The application rchelper.exe, “RegClean Expert Scheduler” by CleanMyPC Technology Limited has been detected as a potentially unwanted program by 2 anti-malware scanners. This file is typically installed with the program Registry Clean Expert by iExpert Software.
Publisher:
iExpert Software  (signed by CleanMyPC Technology Limited)

Product:
Registry Clean Expert

Description:
RegClean Expert Scheduler

Version:
4, 8, 2, 0

MD5:
72fadf3d1052333bca6f397a4d5fcf11

SHA-1:
912f251515284db902b14861e758c6656b669fe7

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 12:32:32 AM UTC  (today)

Scan engine
Detection
Engine version

Kaspersky
Virus.Win32.Suspic
14.0.0.929

Reason Heuristics
Win32.Generic
15.12.23.4

File size:
593.4 KB (607,616 bytes)

Product version:
4, 8, 2, 0

Copyright:
Copyright (C) 2001-2011

Original file name:
RCScheduler.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\registry clean expert\rchelper.exe

Digital Signature
Signed by:
CleanMyPC Technology Limited

Authority:
The USERTRUST Network

Valid from:
3/22/2010 1:00:00 AM

Valid to:
3/22/2012 12:59:59 AM

Subject:
CN=CleanMyPC Technology Limited, O=CleanMyPC Technology Limited, STREET="ROOM C1D 6/F, WING HING INDUSTRIAL BUILDING", STREET=14 HING YIP STREET, STREET="KWUN TONG, KOWLOON, HONG KONG", L=HONG KONG, S=NA, PostalCode=NA, C=HK

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
253A6CD8243978CADEED6FF2D0C2F4E1

File PE Metadata
Compilation timestamp:
2/5/2011 12:19:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:ueu1PIEQOjFayT+3PgjZ2SH6b7MP+Dd21LI:ueiPnQOjFRS3PgVW7MP+h26

Entry address:
0x1000

Entry point:
68, 01, 70, 49, 00, E8, 01, 00, 00, 00, C3, C3, 84, 7A, 95, 7B, 12, B3, 72, 0E, A7, C4, 3B, 34, FE, 01, 01, 00, 6E, DE, 7D, 4C, FE, 2C, 75, DC, 09, A2, AE, 19, 3C, 88, 44, A3, ED, E0, 49, DF, 15, E3, 2C, FC, 51, B9, C5, A4, B9, 36, 96, B6, F5, FC, 2A, 8A, 7E, B5, 9A, 87, 45, 55, 91, B1, AA, 6F, C3, 23, 0B, 7D, AD, 35, 32, 44, 04, 48, 71, 57, 22, 70, 91, BD, 4F, B6, 3C, 51, 03, 1E, EB, AF, 5D, C9, D1, 76, 61, EB, 69, D1, CD, 09, B1, E0, 57, 98, C6, 82, 33, 55, 62, D3, 1C, 48, F3, D2, 1F, 32, 05, FE, 2A, 35...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
172 KB (176,128 bytes)

The file rchelper.exe has been discovered within the following program.

Registry Clean Expert  by iExpert Software
This is a 'registry cleaner' that is supposed to clean or fix a PC by removing invalid registry settings.
www.registry-clean.net
50% remove it
 
Powered by Should I Remove It?

Remove rchelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.