Should I block it?

No, this file is 100% safe to run.

Additional versions

9, 0, 1, 0	33.33%
9, 0, 1, 0	66.67%

(Note, Lavasoft Limited publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetNamedSecurityInfoW

kernel32.dll

GetFileAttributesW, HeapAlloc, TerminateProcess, SetUnhandledExceptionFilter, IsDebuggerPresent, InterlockedIncrement, Sleep, InterlockedExchange, GetProcAddress, FindClose, GetSystemTimeAsFileTime, CreateEventA, FindFirstFileExW, FindNextFileW, GetTickCount, GetModuleHandleW, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, InterlockedCompareExchange, UnhandledExceptionFilter, TlsAlloc, TlsFree, TlsGetValue, OpenEventA, TlsSetValue, GetUserDefaultLCID, GetStringTypeExW, LCMapStringW, LoadLibraryA, CloseHandle, GetModuleFileNameW, QueryPerformanceCounter, FormatMessageW, OutputDebugStringW, GetCurrentThreadId, GetLocalTime, GetProcessHeap, HeapFree, LoadLibraryW, FreeLibrary, ReleaseMutex, WriteFile, SetEndOfFile, ReadFile, SetFilePointer, GetFileSize, WideCharToMultiByte, MultiByteToWideChar, LocalFree, LocalAlloc, CreateFileW, CreateDirectoryW, WaitForMultipleObjects, CreateEventW, ResetEvent, WaitForSingleObject, SetEvent, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, GetLastError

lavalicense.dll

InitializeLicensingSystem, DeinitializeLicensingSystem, GetFingerprint, GetLicenseMode, GetSerialNumber, GetDaysLicensed, GetDaysLeft, UpdateEnvironment

msvcp90.dll

DllMain

msvcr90.dll

DllMain

psapi.dll

GetModuleBaseNameW

shell32.dll

SHGetFolderPathW

user32.dll

wsprintfW, LoadStringW, MessageBoxW

wininet.dll

HttpSendRequestW, HttpOpenRequestW, InternetConnectW, InternetQueryOptionW, InternetOpenW, InternetReadFile, HttpQueryInfoW, InternetSetStatusCallbackW, InternetSetOptionW, InternetCloseHandle

Export table

AcknowledgeMessageW

ActivateSchedulerW

CreateMessageFile

ForceQueryServerW

ShutdownMiniMessageLibrary

lavamessage.dll

Lavasoft LavaMessage by Lavasoft Limited (Signed)

Remove lavamessage.dll

Version:	9, 0, 1, 0
MD5:	bc404941d7ce1f816825bfdb33bfd77d
SHA1:	97ff2cb2e56a8506687dc5520461b8d3cc51ede6
SHA256:	def1437a0e91007f5e4932184b0dedec20910ec003d66040efc83ca2146ca681

About lavamessage.dll (from Lavasoft Limited)

“Built upon our legendary anti-spyware and antivirus protection, Ad-Aware real-time web-filtering technology safeguards your PC against phishing attacks and online scams, allowing you to stay protected”

Overview

lavamessage.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Ad-Aware published by Lavasoft, Ad-Aware from Lavasoft and Ad-Aware by Lavasoft. The file is digitally signed by Lavasoft Limited which was issued by the VeriSign certificate authority (CA).

Details

File name:	lavamessage.dll
Publisher:	Lavasoft Limited
Product name:	Lavasoft LavaMessage
Description:	Messaging system for client notification delivery
Typical file path:	C:\Program Files\lavasoft\ad-aware\lavamessage.dll
Original name:	lavamessage.dll
File version:	9, 0, 1, 0
Size:	528.08 KB (540,752 bytes)
Certificate
Issued to:	Lavasoft Limited
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following programs will install this file

Ad-Aware

Lavasoft

6% remove

Ad-Aware is an anti-spyware and anti-virus program developed by Lavasoft that detects and removes malware, spyware and adware on a user's computer. According to Lavasoft, Ad-Aware detects spyware, computer viruses, dialers, Trojans, bots, rootkits, data miners, aggressive advertising, parasites, browser hijackers, and tracking components.

Bing HRS Toolbar

Microsoft Corporation

36% remove