home

RegUse.exe

RegUse

Honlyn (Macao Commercial Offshore) Limited

The application RegUse.exe by Honlyn (Macao Commercial Offshore) Limited has been detected as a potentially unwanted program by 7 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler named RegUse. This file is typically installed with the program RegUse by Honlyn Limited.
Publisher:
Honlyn (Macao Commercial Offshore) Limited  (signed and verified)

Product:
RegUse

Version:
1, 0, 2, 2

MD5:
f4549431d409b86f82840a91254087fe

SHA-1:
c0d48f63619b92fcc0717cdbd28540ba297fd722

SHA-256:
d5a0f40ae556295ff9a5552b194b637139aa839d322cc96a9793d282af5a9c49

Scanner detections:
7 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 7:32:29 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.RegRevive
4.0.3.16130

Comodo Security
UnclassifiedMalware
17579

ESET NOD32
Win32/Adware.RegRevive (variant)
10.9267

Reason Heuristics
Win32.Generic
16.1.30.12

Sophos
RegWork
4.96

Trend Micro House Call
ADW_REGUS
7.2.30

Trend Micro
ADW_REGUS
10.465.30

File size:
369.4 KB (378,256 bytes)

Product version:
1, 0, 2, 2

Copyright:
Honlyn (Macao Commercial Offshore) Limited

Original file name:
RegUse.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\reguse\reguse.exe

Digital Signature
Signed by:
Honlyn (Macao Commercial Offshore) Limited

Authority:
VeriSign, Inc.

Valid from:
7/10/2010 8:00:00 PM

Valid to:
7/24/2012 7:59:59 PM

Subject:
CN=Honlyn (Macao Commercial Offshore) Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Honlyn (Macao Commercial Offshore) Limited, L=Macau, S=Macau, C=MO

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
51646B013CA26E06A37C5AB790DF1B60

File PE Metadata
Compilation timestamp:
3/31/2010 9:02:22 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:UFqMK+2TniUIM4yB8BJDPtPxmqqDL6q+AVOvoxJAszX:UQ+eBIxBJrthqn6qr2A

Entry address:
0x37824

Entry point:
6A, 74, 68, E0, C8, 44, 00, E8, B0, 05, 00, 00, 33, FF, 89, 7D, E0, 57, 8B, 1D, 04, E1, 43, 00, FF, D3, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 02, FF, 15, 30, E7, 43, 00, 59, 83, 0D, 6C, 88, 45, 00, FF, 83...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
244 KB (249,856 bytes)

Scheduled Task
Task name:
RegUse


The file RegUse.exe has been discovered within the following program.

RegUse  by Honlyn Limited
Publisher's description - “Make it Quick. Make it Easy. Scan The Registry, Correct The Errors, and Pump Up The System Speed. Registry faults cause your computer to run slower. Registry faults generate Windows error messages.Energize screen displays. Stop wading through Windows popup error messages.”
reguse.com
35% remove it
 
Powered by Should I Remove It?

Remove RegUse.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.