home

rfares.dll

Registry First Aid

Rose City Software

Publisher:
KsL Software  (signed by Rose City Software)

Product:
Registry First Aid

Description:
Registry First Aid, the easy powerful registry maintenance program

Version:
7.1.1.1734

MD5:
ed8b937df06193dfd8f9568d0cf81f12

SHA-1:
9a67d2987af71ce303e52ecd9fad8f94c0e50c90

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/27/2024 2:39:54 AM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
Trojan.Win32.A.PSW-Barrio.19456
2011.4.7.4223

File size:
2.3 MB (2,389,312 bytes)

Product version:
7.1.1.1734

Copyright:
Copyright (c) KsL Software, 2001-2009

Original file name:
reg1aid.exe

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\rfa\rfares.dll

Digital Signature
Signed by:
Rose City Software

Authority:
The USERTRUST Network

Valid from:
4/29/2009 4:30:00 AM

Valid to:
4/30/2010 4:29:59 AM

Subject:
CN=Rose City Software, O=Rose City Software, STREET=3 Monroe Pkwy, STREET=Suite P-447, L=Lake Oswego, S=OR, PostalCode=97035, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
33DD257C14AA596DCE18CC0EA9BE6492

File PE Metadata
Compilation timestamp:
6/20/1992 2:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:Qy8GIjSzWLhwP17PZo7lGkzVXJEP0eqwmHAITX3iCDL5NE6g:Qy8GIjSzWyP1dclGktJW0eSHAITX3iC0

Entry address:
0x3838

Entry point:
55, 8B, EC, 83, C4, B4, B8, 18, 38, 40, 00, E8, 38, FF, FF, FF, E8, 8F, F3, FF, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.2021

Developed / compiled with:
Microsoft Visual C++

Code size:
10.5 KB (10,752 bytes)

The file rfares.dll has been discovered within the following program.

Registry First Aid  by RoseCitySoftware
Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.
www.registry-repair-software.com
47% remove it
 
Powered by Should I Remove It?

Scan rfares.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.