Home Malware Programs Potentially Unwanted Programs (PUPs) WinRepair Pro

WinRepair Pro

Posted: December 21, 2015

Threat Metric

Ranking: 17,237
Threat Level: 1/10
Infected PCs: 497
First Seen: November 6, 2015
Last Seen: August 9, 2023
OS(es) Affected: Windows

WinRepair Pro is not an application that can repair broken Windows files or improve the performance of your PC in any way. It is a Potentially Unwanted Program (PUP), which may cause various problems. Once this questionable tool enters, it will start performing bogus system scans at random intervals. The process starts automatically and cannot be disabled manually. You may notice that it takes suspiciously little time. For less than a minute, you may be informed that your PC is in terrible condition. WinRepair Pro usually detects hundreds of errors and harmful files. In reality, your system is most likely clean and there may be no issues with the registries whatsoever. The PUP intentionally deceives you to make you buy its full license. If you click on the 'Fix issues' button, you will be transferred to the purchase page. It may claim that you will receive a substantial discount if you upgrade to the paid version immediately. The end price is usually in the $30-$40 range. Since WinRepair Pro cannot fulfill the promised functions, you should not agree to pay. Unfortunately, the unrequested and fabricated scanning processes will certainly persist. The official product page tries to deceive the visitor that WinRepair Pro is legit by mentioning the name of Microsoft. The developers of the PUP state that it uses the same technologies as the company behind the Windows operating systems, but it is a blatant lie. Another problem is that the site doesn't mention that the full version of WinRepair Pro is paid. As a result, some users may assume they are downloading freeware only to encounter the constant warnings to upgrade later. In some cases, this suspicious system optimization tool travels in a set with other programs. The best way to stop the fabricated security alerts is to delete WinRepair Pro with credible security software.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



WinRepairPro.exe File name: WinRepairPro.exe
Size: 7.67 MB (7674312 bytes)
MD5: 6d6eaad56a03739e590402d0addaae8f
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 27, 2019
file.exe File name: file.exe
Size: 2.83 MB (2836990 bytes)
MD5: 12cd782c02acfefd2ca79fa371d58f53
Detection count: 69
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: November 6, 2015
3a4f64963f508654a2e9680721de914e File name: 3a4f64963f508654a2e9680721de914e
Size: 2.83 MB (2836992 bytes)
MD5: 3a4f64963f508654a2e9680721de914e
Detection count: 58
Group: Malware file
Last Updated: March 27, 2019
%SYSTEMDRIVE%\Users\<username>\Desktop\Downloads\3.6.18.275_setup_r1.exe File name: 3.6.18.275_setup_r1.exe
Size: 2.83 MB (2836992 bytes)
MD5: b00393f9f0e301f804a1d7da6cb66ab0
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\Desktop\Downloads\3.6.18.275_setup_r1.exe
Group: Malware file
Last Updated: April 12, 2022

Registry Modifications

The following newly produced Registry Values are:

File name without pathWinRepair Pro.lnkRegexp file mask%WINDIR%\Tasks\WinRepair Pro_DEFAULT.job%WINDIR%\Tasks\WinRepair Pro_UPDATES.jobHKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinRepair ProSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinRepair Pro_DEFAULTSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinRepair Pro_UPDATESSoftware\win\repair\proSoftware\WinRepair ProSOFTWARE\Wow6432Node\win\repairSOFTWARE\Wow6432Node\WinRepair Pro

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\WinRepair Pro%APPDATA%\WinRepair Pro%PROGRAMFILES%\WinRepair Pro%PROGRAMFILES(x86)%\WinRepair Pro

Related Posts

Loading...