Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3,4,0,0111 25.00%
3,1,8,6061 25.00%
3,1,7,3061 25.00%
3,1,4,8440 25.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCreateKeyExW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegSetValueExW
crypt32.dll
CertGetNameStringW
kernel32.dll
GetTickCount, SetEvent, WaitForSingleObject, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, InterlockedIncrement, InterlockedDecrement, CreateThread, GetModuleFileNameW, TerminateThread, Sleep, GetPrivateProfileStringW, DeleteFileW, MoveFileExW, WritePrivateProfileStringW, CreateFileW, ReadFile, GetFileSize, SetFilePointer, OutputDebugStringW, GetSystemTimeAsFileTime, SetThreadPriority, GetCurrentThread, GetCurrentThreadId, RaiseException, SetLastError, GetCurrentProcess, GetEnvironmentVariableW, lstrlenW, WideCharToMultiByte, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, CreateFileA, GetVersionExW, DeviceIoControl, GetModuleFileNameA, LoadLibraryW, FreeLibrary, CopyFileW, CreateDirectoryW, HeapDestroy, HeapAlloc, HeapFree, GetCurrentProcessId, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedExchange, DecodePointer, EncodePointer, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetModuleHandleW, GetProcAddress, CloseHandle, CreateEventW, GetLastError, MultiByteToWideChar, FlushInstructionCache, lstrlenA, InterlockedPopEntrySList, VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, InterlockedPushEntrySList, InterlockedCompareExchange, GetProcessHeap, HeapSize, HeapReAlloc
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoInitialize, CoUninitialize
rpcrt4.dll
UuidFromStringW
shell32.dll
SHGetFolderPathW
shlwapi.dll
PathFindFileNameW, PathRemoveFileSpecW, PathFileExistsW, PathCombineW, PathAppendW
urlmon.dll
URLDownloadToCacheFileW
user32.dll
wsprintfW, LoadCursorW, GetLastInputInfo, DefWindowProcW, SetTimer, KillTimer, PostQuitMessage, UnregisterClassA, DestroyWindow, CreateWindowExW, SetWindowLongW, PostMessageW, RegisterClassExW, GetWindowLongW, CallWindowProcW, GetClassInfoExW
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wininet.dll
DeleteUrlCacheEntryW
wintrust.dll
WTHelperGetProvCertFromChain, WinVerifyTrust, WTHelperProvDataFromStateData, WTHelperGetProvSignerFromChain

restore.dll

PPLive by PPLive Corporation (Signed)

Remove restore.dll
Version:   3,1,4,8440
MD5:   71e280b3a757eca5ee23620049ecb7b8
SHA1:   258bba0cc7f173a645aef91a20632d02e67782db

Overview

restore.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by PPLive Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:restore.dll
Publisher:PPLive Corporation
Product name:PPLive
Typical file path:C:\Program Files\common files\pplivenetwork\1.0.1.2908\restore.dll
File version:3,1,4,8440
Size:51.97 KB (53,216 bytes)
Certificate
Issued to:PPLive Corporation
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 50.00%
Microsoft Windows XP 50.00%

Distribution by countryDistribution by country

Taiwan installs about 50.00% of PPLive.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 50.00%
GIGABYTE 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE