Should I block it?
45% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
Relationships
 PE file structure
|
Show functions |
Import table
kernel32.dll
IsDebuggerPresent, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, HeapAlloc, IsBadReadPtr, SetLastError, GetProcessHeap, HeapFree, VirtualFree, VirtualProtect, VirtualAlloc, FreeLibrary, GetModuleHandleA, OutputDebugStringA, GetFullPathNameA, LoadLibraryA, GetProcAddress, UnmapViewOfFile, CreateFileA, GetFileSize, CreateFileMappingA, CloseHandle, MapViewOfFile, FindResourceA, LoadResource, LockResource, GetModuleFileNameA, GetLastError, FormatMessageA, LocalFree, lstrlenA, UnhandledExceptionFilter
msvcr90.dll
DllMain
user32.dll
GetFocus, MessageBoxA
rbmonitor.exe
RegistryBooster Monitor by Uniblue Systems (Signed)
| Version: | 6.1.0.9 |
| MD5: | ad81c62edecf57e6337ffe018ccaa851 |
| SHA1: | 1e1c2a5eed887e8b83251ef76412a6dd53c77ec3 |
| SHA256: | 67f05de91bbcf6e526ae0993c70452628f09edb60d3fc57f16e98d37aaaf521d |
What is rbmonitor.exe?
Uniblue RegistryBooster Monitor runs at PC boot time and is designed to automatically check the status of Uniblue RegistryBooster as well as the PC. Uniblue RegistryBoosteris a Windows registry repair software utility designed to fix potentially damaged registry entries by scanning for entries that point to various files that are no longer active on the PC.
About rbmonitor.exe (from Uniblue Systems)
“Have you noticed that the longer you have your computer, the slower it runs and the more it crashes? Often this is because whenever you install or uninstall software, adjust hardware or change setting”
Details
| File name: | rbmonitor.exe |
| Publisher: | Uniblue Systems Limited |
| Product name: | RegistryBooster Monitor |
| Description: | Uniblue RegistryBooster Monitor |
| Typical file path: | C:\Program Files\uniblue\registrybooster\rbmonitor.exe |
| File version: | 6.1.0.9 |
| Size: | 25.41 KB (26,016 bytes) |
| Certificate |
| Issued to: | Uniblue Systems |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, April 20, 2010 |
| Expiration date: | Sunday, May 5, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| Entropy: | 6.355610 |
| File packed: | No |
| Code language: | Microsoft Visual C++ 9.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Uniblue RegistryBooster is registry utility whose purported purpose is to remove redundant items from the Windows registry. The software helps to automate the process of looking for invalid entries, missing file references or broken links within the registry and resolving or removing them. The program is designed to fix potentially damaged registry entries by scanning for entries that point to various files that are no longer active on ...
This is a 'registry cleaner' that is supposed to clean or fix a PC by removing invalid registry settings.
This is a 'registry cleaner' that is supposed to clean or fix a PC by removing invalid registry settings.
Behaviors
Scheduled tasks
- The job 'RegistryBooster' runs on logon in the path '\RegistryBooster'
- The job 'rbmonitor' runs on logon in the path '\rbmonitor'
- Entry path '\RegistryBooster'
- Entry path 'C:\WINDOWS\Tasks\RegistryBooster.job'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\rbmonitor'
- Login entry path '\RegistryBooster'
- Login entry path 'C:\WINDOWS\Tasks\RegistryBooster.job'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.02455445% | |
| Kernel CPU: | 0.00887623% | |
| User CPU: | 0.01567823% | |
| Kernel CPU time: | 1,354 ms/min | |
| CPU cycles: | 1,284,406/sec | |
| Context switches: | 4/sec | |
| Memory |
| Private memory: | 14.67 MB | |
| Private (maximum): | 17.92 MB | |
| Private (minimum): | 8.1 MB | |
| Non-paged memory: | 14.67 MB | |
| Virtual memory: | 88.22 MB | |
| Virtual memory (peak): | 91.51 MB | |
| Working set: | 11.09 MB | |
| Working set (peak): | 19.15 MB | |
| Page faults: | 23,960/min | |
| I/O |
| I/O read transfer: | 151.18 KB/sec | |
| I/O read operations: | 57/sec | |
| I/O write transfer: | 11 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 4.58 KB/sec | |
| I/O other operations: | 118/sec | |
| Resource allocations |
| Threads: | 5 | |
| Handles: | 248 | |
| GUI GDI count: | 9 | |
| GUI GDI peak: | 10 | |
| GUI USER count: | 3 | |
| GUI USER peak: | 6 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\uniblue\registrybooster\rbmonitor.exe" |
| Owner: | User |
| Parent processes: |
|
Threads
Averages
| rbmonitor.exe (main module) |
| Total CPU: | 0.11923622% | |
| Kernel CPU: | 0.01520983% | |
| User CPU: | 0.10402639% | |
| CPU cycles: | 591,216/sec | |
| Context switches: | 2/sec | |
| Memory: | 36 KB | |
| RPCRT4.dll |
| Total CPU: | 0.00005785% | |
| Kernel CPU: | 0.00005785% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 3,141/sec | |
| Memory: | 780 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
65.22% |
|
| Windows Vista Ultimate |
13.04% |
|
| Microsoft Windows XP |
13.04% |
|
| Windows XP Professional |
4.35% |
|
| Windows 7 Ultimate |
4.35% |
|
Distribution by country
United States installs about 45.45% of RegistryBooster Monitor.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
57.14% |
|
| Intel |
28.57% |
|
| Lenovo |
14.29% |
|
