Home Malware Programs Potentially Unwanted Programs (PUPs) Record Checker

Record Checker

Posted: July 26, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 4,459
First Seen: July 26, 2013
Last Seen: February 22, 2020
OS(es) Affected: Windows

Record Checker, otherwise known as RecordChecker, is a potentially unwanted application (PUA), which is used by attackers to keep track of affected web users. Record Checker may display annoying pop-up advertisements and install more security threats on the infected computer. Record Checker can be downloaded from its homepage or other website that contains its distribution services. However, Record Checker can also access the PC bundled with freeware and shareware programs without the target computer user's permission and knowledge. When installed on the corrupted PC, Record Checker starts performing numerous annoying activities. Record Checker keeps track of its victims, shows pop-up advertisements, starts browser's redirects, and similar actions.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\RecordChecker\RecordCheckerService.exe File name: RecordCheckerService.exe
Size: 62.6 KB (62600 bytes)
MD5: 6cdebdae29645f0f0c0e4bedf3479d2f
Detection count: 98
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\RecordChecker
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\RecordChecker\RecordChecker.exe File name: RecordChecker.exe
Size: 152.2 KB (152200 bytes)
MD5: 344447925460e11c1ab1d3b3bbea15f3
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\RecordChecker
Group: Malware file
Last Updated: March 30, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Wow6432Node\Microsoft\Tracing\RecordCheckerService_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\RecordCheckerService_RASMANCSHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}RecordChecker

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\RecordChecker
Loading...