I have Rose city software - Registry First Aid.
This is a company in business since 1990 and won awards.
I understand that malware can appear at any time. The antivirus companies I tested have called (rfa.exe) malware. Where do I submit for testing to prove it is safe or not. However I think it is safe to claim it is a false positive. It is a registry clean and repair for people that are novice to experts however it can look like malware because nonprofessional can make the wrong choices and pick the wrong things to remove I only remove what is on the safe list not go further that is for experts and its time consuming work and easier to pick the safe list. This software has removed things too hard to remove and removed perhaps malware causing problems in my computer. After installing an Image file I am now able to get my computer in a state of constant use without constantly needing to erase and reinstall everything a short time later.
One thing I noted just now, and I have used Registry First Aid back in the Windows 7 initial Windows 10 release, is their website switches from https:// to an unsecured connection without ANY intervention. I don’t know for a fact, but that usually gives me the notion the site is compromised in some way. Have you had this scenario on your side?TIA.
SA
~ fwiw ~ as test:
076ce825ee93/2025-08-30T19:03:48.359Z
Threat name: Win32:PUP-gen [PUP]
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Blocked
Options: Report false detection
Detected by: Auto-Protect
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
The file release is currently unknown
High
The file risk is high.
============================================
File: rfasetup.exe
File size: 8.79 MB (9,217,312 bytes)
SHA256 checksum: ECAB077C589BFF97ED5311278444ED1595919A92A8999AE37F01CFE3647A2BB2
Date/Time: 8/30/2025
VirusTotal report here
=============================================
=====================================================
=======================================================
Caveat: I’m not familiar with Registry First Aid
Hello Steven
We are aware of this issue. All antivirus programs share data. Unfortunately Malwarebytes has labeled registry repair tools as a PUP, (Possible Unwanted Program), and this is the result of this action.
Registry First Aid is totally harmless and has been used by hundreds of thousands of users safely and effectively to clean out obsolete Registry entries, eliminate software conflicts and generally speed up their computer functions. “Unwanted” is a ridiculous designation and we have complained long and hard about it, but to no avail.
Norton File Insight reports rfasetup.exe as “Untrusted”
Norton Auto-Protect blocked
rfasetup.exe as “Win32:PUP-gen [PUP]”
Malwarebytes on-demand scan reports rfasetup.exe as PUP.Optional
https://community.norton.com/t/quarantined/426145/2
https://us.norton.com/blog/malware/what-are-puas-potentially-unwanted-applications
“Antivirus and malware makers dislike when security software is too effective.” For example try to download antivirus malware may appear to prevent. As Rose City Software wrote: “Registry First Aid is totally harmless and has been used by hundreds of thousands of users safely and effectively to clean out obsolete Registry entries, eliminate software conflicts and generally speed up their computer functions.” Rose City Software appeared in 1990. Rather than slow down as virus and malware can do. I am not writing that viruses and malware can happen or not happen therefore if it was so harmful it would of rendered Norton and the other antivirus malware companies useless remember it has control of the registry “to clean out obsolete Registry entries, eliminate software conflicts and generally speed up their computer functions.” However using what is given to remove and making the wrong choice therefore mistakes can happen that is not a virus or malware that is picking the wrong choice to remove I leave it to the experts to go further into what can be removed its time consuming by tracing down where to pick - The software does it faster than me. I would hope that any sample to give for testing is used to prove what is real. Therefore any sample to prove how safe or not.
Whether you agree or disagree with Norton.
Your machine - Your choice
Registry First Aid v11.3 Evaluation version here appears to be from 2022 and appears to not support W11 24H2
rosecitysoftware.com appears to have an expired TLS certificate
Maybe, your Registry First Aid is not from 2022
Maybe, your Registry First Aid supports W11 24H2
my fwiw as test: was Registry First Aid 11.3 Evaluation version
Regards w Respect
Rose City Software appeared in 1990. Rather than slow down as virus and malware can do. I am not writing that viruses and malware can not happen therefore if it was so harmful it would of rendered Norton and the other antivirus malware companies useless remember it has control of the registry “to clean out obsolete Registry entries, eliminate software conflicts and generally speed up their computer functions.” I have the most recent that I bought less than a month ago. Look at the claims made against: That it uses http not https my browsers are set to prevent http. That once installed you can add more than what is given to remove which will damage and prevent any gains hoped to gain,
Rose City Software wrote: “Please note: Registry First Aid v 11.3.1 has not yet been updated for use with Windows 11 24H2”
”Our developers are studying this latest version of Windows to see if Registry First Aid can be updated to to work effectively and safely. But there are serious issues for now RFA has not been updated for compatibility with Windows 24H2. A notice will be sent out to RFA users if and when it has been successfully updated.
We are also asking everyone like you to contact your antivirus company complaining that they are blocking Registry First Aid that you’ve been using for years with this ridiculous PUP designation” And the Malware designation. Remember there are other factors than viruses and malware for things to happen - They damaged their own software going beyond what was given to remove. For example I tried to download Webroot or Norton or Sophos something prevented me from.
I can go into Facebook and something alter what I write sure it can be me however watch what is happening while looking and it will go error and sorry - All written will disappear.
What’s your Registry First Aid version number?
Does your Registry First Aid support W11 24H2?
I still use Windows however different not Windows 8 or 10 or 11 it is still too fussy to work right for me. It becomes not what you know it what you do not know yet however I have several computers one has Windows 10 and another has Windows 11. When I had XP Windows 7 appeared and crashed too often then later things were better than Windows XP what I started with when I took an oath not to use windows 7 however I did. Then windows 10 and 11 appeared and things crashed and complexity and fussy I went to Windows 7 and they try to make me look stupid for not joining their problem just to make more money I am part of a experiment a solver therefore it has problems to tell. Windows 7 fits my needs.Why do I need to hunt for how to use Windows 10 and 11 when I get things done with Windows 7.
I do not know I had to remove it from the desktop - It was prevented from working. However I have it working with reg1aid64.exe version 11.3.1.2618 with Webroot in 64 bit HP mini 210-2177 nr netbook computer using 4GB of memory with window 7 pro 64bit experimenting to get it zipping along since I installed Registry first aid I am showing great progress starting up computer and starting and loading browsers. I wish I could use Norton 360 with Norton startup scan I told it to allow however startup scan did not allow.
I Do recall how well it did in desktop and Norton 360 with Norton startup scan. Registry fist aid removed the problem of needing to erase and reinstall image file again I now can make a better one. I can only guess what blocks RFA_start.exe same version number. By malware? However Norton Quarantines it or someone is against the progress I am getting. Perhaps it removes malware too because it gets better. My desktop is using NVIDIA 1030 64 bit with 4GB of memory max 25 watts with 720p with 216x676 screen. With a W.E.I score of 7.2 however processor 7.5 memory 7.8 both graphics 7.2 and SSD 7.9
@Steven582 Please review this posting by Guru bjm. 25 of 72 vendors participating with Virustotal flagged this installer. The reason? Expired TLS certificate. What does that mean? Some AI information is below for your review.
AI Overview
An expired TLS certificate is
A digital certificate that has exceeded its validity period, meaning the web server can no longer prove its identity or encrypt communications with the browser. This causes browsers to display security warnings, potentially blocking users from accessing the site and exposing sensitive data to interception. Expired certificates pose a security risk and erode user trust, requiring prompt renewal to restore security and functionality.
Going back to my opening reply here, I stated that the website for RegFirstAid shifted from secured to not secured when I attempted a download. The expired TLS certificate is why A/V vendors are flagging this software. Norton cannot correct the issue, the creator of RFA is responsible for that.
SA
