» rfares.dll
Overview
Analysis
File Details
Programs (1)

rfares.dll

Registry First Aid Platinum

Rose City Software

File name:

rfares.dll

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid Platinum

Description:

Registry First Aid Platinum, the easy powerful registry cleanup program

Version:

6.0.0.1495

MD5:

db8930ac6eec2db0dba5a0a315924239

SHA-1:

ebab00aa11ca4abe22ee7ed5a71b1523882b0a2e

SHA-256:

aa8f74945cb1b6bc45b66412412b59def2c653d692a5b499c955dcc65cb48fd8

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/16/2024 6:21:09 AM UTC (today)

Scan engine

Detection

Engine version

ViRobot

Trojan.Win32.A.PSW-Barrio.19456[h]

2014.3.20.0

File size:

2.3 MB (2,389,328 bytes)

Product version:

6.0.0.1495

Original file name:

reg1aid.exe

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\rfa platinum\rfares.dll

Digital Signature

Signed by:

Rose City Software

Authority:

GeoTrust Inc.

Valid from:

1/28/2007 6:32:52 PM

Valid to:

2/11/2008 6:32:52 PM

Subject:

E=sales@infinisource.com, CN=Rose City Software, OU=Email and phone validated only., OU=Phone Validation - 1(503) 699-4096, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:

CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:

1062CD

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:ky8GIjSzWLhwP17PZo7lGkzVXJEP0eqwmHAITX3iCDL5NE6z:ky8GIjSzWyP1dclGktJW0eSHAITX3iCn

Entry address:

0x3838

Entry point:

55, 8B, EC, 83, C4, B4, B8, 18, 38, 40, 00, E8, 38, FF, FF, FF, E8, 8F, F3, FF, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

10.5 KB (10,752 bytes)

The file rfares.dll has been discovered within the following program.

Registry First Aid Platinum by RoseCitySoftware

This is registry utility whose purported purpose is to remove redundant items from the Windows registry. The software helps to automate the process of looking for invalid entries, missing file references or broken links within the registry and resolving or removing them.

shop.avanquest.com/de/prod.php?pid=1955

56% remove it

Scan rfares.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.