Emsisoft Malware Information

Name: Adware.Win32.RegTidy

Risk level: Low Risk

Company: RegTidy - regtidy.com

Description:

It is a rogue security program that shows false warning messages. It also shows misleading scan results.

Removal instructions for Adware RegTidy:

Emsisoft Anti-Malware detects this malware and the full version of the software could have prevented this infection. Our experts in the forum will help you remove the infection of Adware RegTidy for free.

Additional details on this malware:

Characteristics:

• Show fake warning messages.
• It also shows misleading scan results.

Installation: Installed through EXE

Process: RegTidy.exe

Screenshots:

Folders used:

• C:\Program Files\RegTidy 2009\
• C:\WINDOWS\Tasks\
• C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\
• C:\Documents and Settings\[USER]\Cookies\
• C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\
• C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\
• C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009091820090919\
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\
• C:\Documents and Settings\[USER]\Start Menu\Programs\RegTidy 2009\

Files used:

• C:\Program Files\RegTidy 2009\License.txt
  [5548 Bytes] TXT File
• C:\Program Files\RegTidy 2009\RegTidy.dll
  [410624 Bytes] DLL File
• C:\Program Files\RegTidy 2009\RegTidy.exe
  [1730048 Bytes] EXE File
• C:\Program Files\RegTidy 2009\RegTidy.url
  [48 Bytes] URL File
• C:\Program Files\RegTidy 2009\uninst.exe
  [160700 Bytes] EXE File
• C:\WINDOWS\Tasks\RegTidy.job
  [330 Bytes] JOB File
• C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch.lnk
  [539 Bytes] LNK File
• C:\Documents and Settings\[USER]\Cookies\index.dat
  [16384 Bytes] DAT File
• C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
  [16384 Bytes] DAT File
• C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\index.dat
  [32768 Bytes] DAT File
• C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009091820090919\index.dat
  [32768 Bytes] DAT File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\index.dat
  [49152 Bytes] DAT File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\registryconvoy_agree[1].png
  [24078 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\registryconvoy_background[1].png
  [688 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\registryconvoy_banner_check[1].png
  [282 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\registryconvoy_navigation_right[1].gif
  [603 Bytes] GIF File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\registryconvoy_Setup[1].png
  [10909 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\registryconvoy_tab_off[1].gif
  [1341 Bytes] GIF File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\Style[1].css
  [2712 Bytes] CSS File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\Nav[1].js
  [975 Bytes] JS File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\registryconvoy_banner_free_download[1].png
  [4694 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\registryconvoy_banner_free_scan[1].png
  [13877 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\registryconvoy_Download[1].png
  [14811 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\registryconvoy_navigation_left[1].gif
  [612 Bytes] GIF File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\registryconvoy_Run[1].png
  [14572 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\Table[1].css
  [1745 Bytes] CSS File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\Command[1].js
  [2250 Bytes] JS File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\purchase[1].png
  [51429 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\Register[1].png
  [26689 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\registryconvoy_bottom[1].png
  [414 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\registryconvoy_button_scan_your_pc_for_free[1].gif
  [2366 Bytes] GIF File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\registryconvoy_head[1].png
  [402 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\Help[1].htm
  [19058 Bytes] HTM File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\Navigation[1].css
  [2807 Bytes] CSS File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\registryconvoy_banner[1].jpg
  [59701 Bytes] JPG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\registryconvoy_Finish[1].png
  [15475 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\registryconvoy_footer[1].gif
  [44 Bytes] GIF File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\registryconvoy_Install[1].png
  [15142 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\registryconvoy_logo[1].png
  [6991 Bytes] PNG File
• C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\registryconvoy_navigation_bg[1].gif
  [257 Bytes] GIF File
• C:\Documents and Settings\[USER]\Start Menu\Programs\RegTidy 2009\RegTidy 2009.lnk
  [539 Bytes] LNK File
• C:\Documents and Settings\[USER]\Start Menu\Programs\RegTidy 2009\Uninstall.lnk
  [535 Bytes] LNK File
• C:\Documents and Settings\[USER]\Start Menu\Programs\RegTidy 2009\Website.lnk
  [721 Bytes] LNK File

Additional information may be found here:

Search Google for Adware RegTidy
Search Bing for Adware RegTidy
Search Yahoo for Adware RegTidy

How can I protect myself from Adware RegTidy?

Important!
Essentially you need an antivirus product that is not only able to clean infections, but also protect your PC from new threats in real-time. This is the only way to prevent data loss and avoid the unnecessary hassles and costs associated with re-installations of your operating system.

Don't miss the opportunity to buy the multi-award winning security software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Trust only the best security software!

Best In Test!

More independent reviews of anti-malware software