Should I block it?

45%
45% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

11.1.0.222 29.17%
11.1.0.214 47.92%
11.1.0.214 2.08%
11.1.0.188 4.17%
11.00.0746 2.08%
11.00.0308 2.08%
11.00.0302 8.33%
11.00.0277 2.08%
11.0.1.716 2.08%

Relationships


PE structurePE file structure

Show functions
Import table
gdi32.dll
CreateDCA, CreateDIBitmap, CreateCompatibleDC, SelectObject, SelectPalette, RealizePalette, BitBlt, DeleteDC, DeleteObject, CreatePalette
kernel32.dll
CreateThread, GlobalUnlock, GlobalLock, GlobalAlloc, GetTickCount, WideCharToMultiByte, IsBadReadPtr, GlobalAddAtomA, GlobalAddAtomW, GetModuleHandleA, GlobalFree, GlobalGetAtomNameA, GlobalDeleteAtom, GlobalGetAtomNameW, FreeConsole, GetEnvironmentVariableA, VirtualProtect, VirtualAlloc, GetProcAddress, GetLastError, LoadLibraryA, SetLastError, SetThreadPriority, GetCurrentThread, CreateProcessA, GetCommandLineA, GetStartupInfoA, SetEnvironmentVariableA, ReleaseMutex, WaitForSingleObject, CreateMutexA, OpenMutexA, GetCurrentThreadId, CreateFileA, FindClose, FindFirstFileA, FindFirstFileW, VirtualQueryEx, GetExitCodeProcess, ReadProcessMemory, UnmapViewOfFile, ContinueDebugEvent, SetThreadContext, GetThreadContext, WaitForDebugEvent, SuspendThread, DebugActiveProcess, ResumeThread, CreateProcessW, GetCommandLineW, GetStartupInfoW, CloseHandle, DuplicateHandle, GetCurrentProcess, CreateFileMappingA, VirtualProtectEx, WriteProcessMemory, ExitProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, HeapReAlloc, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, RtlUnwind, DeleteCriticalSection, GetStdHandle, WriteFile, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, Sleep, EnterCriticalSection, LeaveCriticalSection, GetVersionExA, InitializeCriticalSection, GetCurrentProcessId, GetModuleFileNameW, GetShortPathNameW, GetModuleFileNameA, MapViewOfFile, GetShortPathNameA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetProcessHeap, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage
user32.dll
GetDesktopWindow, MoveWindow, SetPropA, EnumThreadWindows, GetPropA, GetMessageA, GetSystemMetrics, SetTimer, GetAsyncKeyState, KillTimer, BeginPaint, EndPaint, SetWindowTextA, GetDlgItem, CreateDialogIndirectParamA, ShowWindow, UpdateWindow, LoadStringA, LoadStringW, FindWindowA, WaitForInputIdle, MessageBoxA, InSendMessage, UnpackDDElParam, FreeDDElParam, DefWindowProcA, LoadCursorA, RegisterClassW, CreateWindowExW, RegisterClassA, CreateWindowExA, GetWindowThreadProcessId, SendMessageW, SendMessageA, PeekMessageA, TranslateMessage, DispatchMessageA, EnumWindows, IsWindowUnicode, PackDDElParam, PostMessageW, PostMessageA, IsWindow, DestroyWindow

Regmech.exe

PC Tools Registry Mechanic by PC Tools (Signed)

Remove Regmech.exe
Version:   11.1.0.214
MD5:   f8e0a855cf36d1ce9f6af5e2de562a24
SHA1:   1a8fd0e9bd0f42c18dec7409e0a574358fd77448
SHA256:   7b03323f12ceca5eefdde503997065c1cf2c2a568eae14cd51d9b3b4338ecdde

What is Regmech.exe?

PC Tools Registry Mechanic, is software used to scan registry to find errors.

About Regmech.exe (from PC Tools)

You've heard that cleaning up your PC will help it run smoother, but you don't know where to start. With PC Tools Registry Mechanic, you'll get a fresh, new experience; combining the trusted, powerful

Overview

regmech.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). This is typically installed with the program PC Tools Registry Mechanic 11.1 published by PC Tools Software. The file is digitally signed by PC Tools which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:regmech.exe
Publisher:PC Tools
Product name:PC Tools Registry Mechanic
Description:PC Tools Registry Mechanic 11.1
Typical file path:C:\Program Files\pc tools registry mechanic\regmech.exe
File version:11.1.0.214
Size:3.47 MB (3,640,480 bytes)
Certificate
Issued to:PC Tools
Authority (CA):VeriSign
Effective date:Thursday, August 9, 2012
Expiration date:Saturday, August 15, 2015
Digital DNA
PE subsystem:Windows GUI
File packed:Yes
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
PC Tools Software
21% remove
PC Tools Registry Mechanic is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry. The software helps to automate the process of looking for invalid entries, missing file references or broken links within the registry and resolving or removing them. The necessity and usefulness of registry cleaners is a controversial topic, with experts in disagreement over their benefits.

BehaviorsBehaviors

Scheduled tasks
  • The task 'RMSchedule' runs daily in the path '\RMSchedule'
  • Entry path 'C:\WINDOWS\Tasks\RMSchedule.job'
  • Entry path '\RMSchedule'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
  • Login entry path '\RMSchedule'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00683245%
0.028634%
Kernel CPU:0.00078890%
0.013761%
User CPU:0.00604355%
0.014873%
Kernel CPU time:309,153,840 ms/min
100,923,805ms/min
CPU cycles:4,295,426/sec
17,470,203/sec
Context switches:144/sec
284/sec
Memory
Private memory:55.63 MB
21.59 MB
Private (maximum):45.32 MB
Private (minimum):24.4 MB
Non-paged memory:55.63 MB
21.59 MB
Virtual memory:188.01 MB
140.96 MB
Virtual memory (peak):217.1 MB
169.69 MB
Working set:25.22 MB
18.61 MB
Working set (peak):53.76 MB
37.95 MB
Page faults:58,124/min
2,039/min
I/O
I/O read transfer:1.25 KB/sec
1.02 MB/min
I/O read operations:2/sec
343/min
I/O write transfer:192 Bytes/sec
274.99 KB/min
I/O write operations:2/sec
227/min
I/O other transfer:2.53 KB/sec
448.09 KB/min
I/O other operations:106/sec
1,671/min
Resource allocations
Threads:3
12
Handles:308
600
GUI GDI count:918
103
GUI GDI peak:1294
142
GUI USER count:384
49
GUI USER peak:537
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command lines:
  • "C:\Program Files\pc tools registry mechanic\regmech.exe" /f
  • "C:\Program Files\registry mechanic\regmech.exe" /f
  • "C:\Program Files\pc tools\pc tools registry mechanic\regmech.exe"
Owner:User
Parent process:taskeng.exe (Task Scheduler Engine by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 27.08%
Windows 7 Ultimate 25.00%
Windows 8 Pro 14.58%
Microsoft Windows XP 10.42%
Windows Vista Home Premium 8.33%
Windows 7 Professional 6.25%
Windows 7 Ultimate N 6.25%
Windows 7 Home Premium N 2.08%

Distribution by countryDistribution by country

United States installs about 27.08% of PC Tools Registry Mechanic.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 29.41%
Hewlett-Packard 23.53%
ASUS 11.76%
Samsung 5.88%
Acer 5.88%
Lenovo 5.88%
Intel 5.88%
Dell 5.88%
GIGABYTE 2.94%
American Megatrends 2.94%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE