» rclauncher.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

rclauncher.exe

MyTechHelp Registry Cleaner

MyTechHelp,LLC

The application rclauncher.exe, “Fix PC problems and optimize performance” by MyTechHelp,LLC has been detected as a potentially unwanted program by 4 anti-malware scanners. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘MyTechHelp Registry Cleaner’. This file is typically installed with the program MyTechHelp Registry Cleaner v3.0 by MyTechHelp which is a potentially unwanted software program.

File name:

rclauncher.exe

Publisher:

MyTechHelp (signed by MyTechHelp,LLC)

Product:

MyTechHelp Registry Cleaner

Description:

Fix PC problems and optimize performance

Version:

3.0.1.0

MD5:

3db4860b7ee7b89a65133df3c977463b

SHA-1:

dac6932304eaace0c6a9e005c1a037bf8a6bc5bf

SHA-256:

5c66ca0a56ea13e05a74a66bcde6cad66c2f21aad3a47fdcd7b185e01bf74765

Scanner detections:

4 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 11:18:47 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Adware PCCleaner.B

2015.0.4435

Dr.Web

riskware program Program.Unwanted.758

9.0.1.05190

ESET NOD32

Win32/Adware.SpeedingUpMyPC.AI application

7.0.302.0

Qihoo 360 Security

HEUR/Malware.QVM01.Gen

1.0.0.1015

File size:

77.8 KB (79,664 bytes)

Product version:

3.0.1.0

MyTechHelp

Trademarks:

MyTechHelp

Original file name:

RegistryCleaner

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\mytechhelp\registry cleaner\rclauncher.exe

Digital Signature

Signed by:

MyTechHelp,LLC

Authority:

GoDaddy.com, Inc.

Valid from:

3/5/2012 10:22:18 AM

Valid to:

3/2/2014 2:18:31 PM

Subject:

CN="MyTechHelp,LLC", O="MyTechHelp,LLC", L=Ft Lauderdale, S=FL, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4EF800069A366F

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

1536:VSm3FK158Ps6tGoorG7pj9kgdE4rtKcai6QQt2avdoYUFiVLo4/LOaxtrTo7Xj:0m18+/QooKhJdE1n5QQJlvpPjOGNkz

Entry address:

0x25460

Entry point:

60, BE, 00, C0, 41, 00, 8D, BE, 00, 50, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75... 
[+]

Entropy:

7.1929

Packer / compiler:

UPX 2.90LZMA

Code size:

40 KB (40,960 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

MyTechHelp Registry Cleaner

Command:

C:\Program Files\mytechhelp\registry cleaner\rclauncher.exe

The file rclauncher.exe has been discovered within the following program.

MyTechHelp Registry Cleaner v3.0 by MyTechHelp

This is a 'registry cleaner' that is supposed to clean or fix a PC by removing invalid registry settings.

www.mytechhelp.com

About 80% of users remove it

Remove rclauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.