Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

RegCurePro - whatsit?

Sep 13, 2012 7:19PM PDT

Hello - I run Win7 Pro and every now and then there occurs a popup on opening the computer which introduces itself as a Microsoft Partner and asks to scan the computer for registry superfluous items and then for unnecessary programs and more. It shows several dozen problems and then proposes to fix them (probably at a price but I never let it go that far). Does anyone know if this a genuine program, or one of many so-called "problem fixers" that all they are after is your money? It calls itself RegCurePro.

Discussion is locked

- Collapse -
Answer
Re: regcure
Sep 13, 2012 7:31PM PDT

My advice: uninstall it!

Kees

- Collapse -
I cant
Sep 13, 2012 7:53PM PDT

Kees thanks, but I can't. It keeps popping up and hides itself somewhere on the computer where I cannot find it to uninstall.

- Collapse -
Re: find it
Sep 13, 2012 8:00PM PDT

In Windows 7, in the processes tab of Task Manager, you can right click on the program name when it's acgive (when there is a popup) and choose "Goto File Location. That's the exe-file. Now rename that.
You might have to boot into Safe Mode so it isn't active for the rename to succeed. Or you might be able to find it in the Startup tab of MSCONFIG. Then disable it, reboot and rename the file.

Renaming is not a full uninstall, but probably it serves quite well to get rid of the popup. And if something very unexpected happens, just rename it back and try another way.

Kees

- Collapse -
Tried Revo Uninstaller?
Sep 14, 2012 9:01AM PDT
- Collapse -
"And hides itself ..." ...
Sep 14, 2012 10:37AM PDT

That is a pretty good indicator that you have installed some malware probably by clicking OK on a popup message box while visiting some web site.

Make use of MalwareBytes, - http://www.malwarebytes.org/products/malwarebytes_free/
Super Anti-Spyware - http://www.superantispyware.com/
and RogueKiller - http://www.techrepublic.com/blog/itdojo/roguekiller-scans-systems-for-rootkits-registry-issues-and-more/3603?tag=nl.e101
and also RKILL - http://www.bleepingcomputer.com/forums/topic308364.html (READ that link so you can use it properly)

While the above tools should work OK in normal mode it really pays to boot to Safe Mode with networking when you use them.

- Collapse -
Not in my presence
Sep 14, 2012 6:28PM PDT

Hi Ed - Thanks for your input. However, I am not that much of a greenhorn to do what you suggested. And I do have rkill. But I shall have to wait for the next time the thing pops up; it has not appeared in the last day or two. By the way, the program looks more genuine than any of the other malware items that I have come across in the past. It styles itself "Microsoft Partner", carries the BBB seal of approval, has the Microsoft emblem in the exact italics slant, etc. Since I have not clicked on it I could wait for it to reappear. But I would suggest that you have a look at it before you class it with all the other scams whose only interest is cashing in on the fears of the newbies. I tended to automatically erase it (with Your Uninstaller) but waited for someone to actually analyze it. Tried Revo before your reply was posted but they did not find it. To recap: it is called RegCurePro, and I am still wondering if anyone else has encountered it. And to clear things up: one of my computers really has an awful lot of junk which I am not really able to distinguish from the necessary items - so much so that it refused to connect to WiFi in various locations (such as a Starbucks on the Upper West Side in New York). I have run CCleaner but it did not help much. So if you have a suggestion for a real cleanup -for free if possibIe - I shall be very grateful. - Amos

- Collapse -
Re RegCurePro
Sep 15, 2012 5:41AM PDT
- Collapse -
dont get it
Sep 16, 2012 6:06PM PDT

OK, so I know about Paretologic. How does it affect my question about RegCurePro ?

- Collapse -
It doesn't
Sep 17, 2012 12:04AM PDT

It doesn't, but it helps answer the logical followup (for most people anyway) of how to help prevent it in the future.

Clearly, despite what you may think of your skills at avoiding this sort of thing, there exists a gap, otherwise we wouldn't be here. WOT is a tool that can help plug that gap, nothing more or less.

- Collapse -
RegCure Pro Uninstallation
Sep 17, 2012 7:05AM PDT

Hi Amos16,

If you decide you would not like to keep RegCure Pro, then you can uninstall it via the Control Panel. The program should appear in the list of installed programs as RegCure Pro, by ParetoLogic, Inc. Removing it through the Control Panel will prevent RegCure Pro from appearing in the future.

If you are unsure about RegCure Pro, and want more time to check it out, you can also change the program settings to stop automatic scans, or scanning on startup.

If you encounter any troubles with this, our Support team would be pleased to provide any assistance. (http://techsupport.paretologic.com)

Thanks!

- Collapse -
Not there
Sep 18, 2012 3:53AM PDT

I cannot find RegCurePro on the control panel where the programs are listed. But it is still lurking somewhere, because suddenly - while I was changing items on Roboform - it turned up and suggested I should scan the computer. This was my desktop, not one of the portables, which functions quite well. But the program eluded me before I could decide what to do about it. I think I shall call it a day. Thanks to all of you - Amos.

- Collapse -
You say
Sep 18, 2012 6:58AM PDT

"not one of my portables". This is a possible clue right there.

What portable do you use?

Name of the executable file should be regcurepro.exe You should be able to start it anytime you want by opening Task Manager and clicking "New Task" and windows will open it for you if you can find the executable file.

http://systemexplorer.net/file-database/file/regcurepro-exe Link provides program path so you should be able to find it to be able to run it on demand.

If not, do a windows search for the file. Be sure to radio-click "Show hidden files and folders" in Folder Options before you search for this file, but only for this search. Reset Folder Options back to the to default setting when done.

- Collapse -
Shall search.
Sep 19, 2012 1:08AM PDT

Maybe I was not too clear. I said this was NOT one of my portables but my desktop - which runs Win 7 Pro and has plenty of spare space and power. Shall see if it still lurks somewhere . Thanks.

- Collapse -
Re: Search
Sep 19, 2012 4:43AM PDT

Please let us know how it goes.

Portables are usually defined as executable programs that need not be installed to run on a specific system. A further definition can be found here:

http://en.wikipedia.org/wiki/Portable_application

Maybe one of your portables is the cause of what you are seeing? We can't tell from here.

- Collapse -
Sorry
Oct 9, 2012 3:07AM PDT

You are right - I do have that kind too, such as a Scandisk. But I meant the other type: one netbook, two tablets. Thanks - Amos.

- Collapse -
Answer
Uninstall It.
Dec 15, 2015 4:55PM PST

I've had RegCure Pro pop up on my old Lenovo pc before, and I clicked "fix issues" and it sent me to a blue screen of death in which I had to reset my pc. UNINSTALL IT! Here's how: Navigate to the following folders (with admin permission): C:\Windows\Program Files\ and delete "ParetoLogic folder". Also go to: C:\Windows\Program Data and delete the "ParetoLogic" folder. That worked for me.

Oh, and as with registry cleaners, don't use them unless they are recognised (things like Malwarebytes and Bytefence)). As long as your pc is working fine, don't use 'em. You know what happened to me.

-Bacon

- Collapse -
Thanks
Jan 9, 2016 7:27AM PST

You just saved my butt......Thanks