Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

11.80.1065.0 50.00%
11.5.0.1169 50.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenKeyA, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegEnumValueA
kernel32.dll
GetLastError, lstrcmpiW, InterlockedIncrement, InterlockedDecrement, FreeLibrary, MultiByteToWideChar, LoadLibraryExW, GetModuleHandleW, SetThreadLocale, DeleteCriticalSection, FindResourceExW, IsBadReadPtr, WideCharToMultiByte, DeleteFileW, GetPrivateProfileStringW, GetTempPathW, QueryPerformanceCounter, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, FindResourceW, LoadResource, LockResource, SizeofResource, GetThreadLocale, SetEndOfFile, CreateFileW, CreateFileA, GetLocaleInfoW, SetStdHandle, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, LoadLibraryA, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetStringTypeW, GetStringTypeA, IsValidCodePage, GetOEMCP, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetModuleFileNameA, CloseHandle, SetFilePointer, ReadFile, FlushFileBuffers, GetConsoleMode, GetConsoleCP, WriteFile, GetStartupInfoA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, InterlockedExchange, GetACP, GetLocaleInfoA, GetVersionExA, Sleep, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, GetCurrentThreadId, GetCommandLineA, LCMapStringA, LCMapStringW, GetCPInfo, GetProcAddress, GetModuleHandleA, ExitProcess, HeapCreate, VirtualFree, VirtualAlloc, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, SetHandleCount, GetStdHandle, GetFileType, GetModuleFileNameW
ole32.dll
CoCreateInstance, StringFromGUID2, CoTaskMemRealloc, CoTaskMemFree, CoTaskMemAlloc
rpcrt4.dll
NdrDllRegisterProxy, NdrDllUnregisterProxy, NdrStubCall2, NdrStubForwardingFunction, IUnknown_Release_Proxy, IUnknown_AddRef_Proxy, IUnknown_QueryInterface_Proxy, NdrOleFree, NdrOleAllocate, NdrDllGetClassObject, NdrDllCanUnloadNow, NdrCStdStubBuffer2_Release
shell32.dll
SHGetFolderPathW
shlwapi.dll
PathAppendW, PathFileExistsW
user32.dll
UnregisterClassA, CharNextW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

EFVal.dll

Logitech QuickCam by Logitech Inc (Signed)

Remove EFVal.dll
Version:   11.5.0.1169
MD5:   240736a5d9dfd33e20b792e16cc51195
SHA1:   3a80210767fb904f70f93458bb3ed69e474dc583
SHA256:   4f08584b5e99922de32f35cf4f826d337e641245b19009f918fc12edac45356c

Overview

efval.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Logitech QuickCam published by Logitech Inc., Logitech QuickCam from Logitech Inc. and Logitech QuickCam by Logitech Inc.. The file is digitally signed by Logitech Inc which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:efval.dll
Publisher:Logitech Inc.
Product name:Logitech QuickCam
Description:EF Validation Library
Typical file path:C:\Program Files\logitech\quickcam\efval.dll
File version:11.5.0.1169
Size:163.27 KB (167,184 bytes)
Certificate
Issued to:Logitech Inc
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Logitech Inc.
12% remove
QuickCam is a line of webcam video camera products by Logitech.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 100.00%

Distribution by countryDistribution by country

United States installs about 50.00% of Logitech QuickCam.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Sony 66.67%
Hewlett-Packard 33.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE