Versions

1, 1, 14, 28	8.24%
1, 1, 0, 14	1.18%
1, 1, 0, 13	7.06%
1, 1, 0, 13	7.06%
1, 1, 0, 13	2.35%
1, 1, 0, 13	1.18%
1, 1, 0, 12	1.18%
1, 1, 0, 10	3.53%
1, 1, 0, 10	5.88%
1, 1, 0, 8	2.35%
1, 1, 0, 5	25.88%
1, 1, 0, 4	7.06%
1, 0, 0, 1	27.06%

Relationships

ShellvRTF.dll

XSS ShellvRTF by SoftThinks (Signed)

Remove ShellvRTF.dll

Overview

There are 13 versions of shellvrtf.dll in the wild, the latest version being 1, 1, 14, 28. The average file size is about 284.88 KB. The file is a digitally signed and issued to SoftThinks by VeriSign. Some variations of the file have been seen to be installed with the program Recovery Software Suite eMachines from eMachines.

Details

File name:	shellvrtf.dll
Publisher:	XSS
Product name:	XSS ShellvRTF
Description:	ShellvRTF
Typical file path:	C:\Windows\System32\shellvrtf.dll
Certificate
Issued to:	SoftThinks
Authority (CA):	VeriSign
Effective date:	Thursday, September 20, 2007
Expiration date:	Sunday, September 28, 2008

Programs installed in

(Note, the programs listed below are for all versions of XSS ShellvRTF.)

Recovery Software Suite eMachines

eMachines

9% remove

Behaviors

(Note, the behaviors below are for all versions of shellvrtf.dll, select a unique version for details.)

Approved shell extension

Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'

'ShellViewRTF' with CLSID {7F67036B-66F1-411A-AD85-759FB9C5B0DB}

All file variations of shellvrtf.dll

MD5	SHA-1	File size
3f9854cab6d0432bb27e93dd46452dff	fe6e101e4361a2e65e88dd5ef99c465076195759	691.38 KB
47e43477cb105fed62716fadb49a9fb1	fda898da001d752c162d5ad12909ea48d03d3b73	255.23 KB
2d26bf1b53f689fe13b5a62a6550e69a	94aebb988828f7d17ad8f0b8accda198f2b1d825	251.83 KB
33d9c496adce235b625c52241d0676d4	cc9b07ce5ecfdc2989888f5077f59cd0fa1dc023	251.83 KB
8a939db45282ecc56e29c66a6d8ab967	337f0a9d5d9dd9642351e287ea89485d9a031887	251.88 KB
77be2755d74b2129174adae629b164db	46c1c57e4a056bb789b0f6832bc8edda3f83d6a7	251.88 KB
8b963c906a44ae2406f0dcf3e0a7806c	1dfeaf402590cbdab1f7917871e0a42d68bbc25b	300 KB
9c742871c0ffb6e210be431aaaeee368	497fa83a9d925ad94a9806f32be94b61190d63a0	301.38 KB
da5d26d5940946f0bfc6fcdb2215fe14	01ea212196056b9b6e868a727d50717de350e61c	296 KB
1ad7e7296f62b998c157a4bda006ec01	6c082141d0b971f8367f932ea372a6faa5f7d235	268 KB
91fa8d1db1ec243cecd4a0977c91cc6f	47da91d8e6becbc60e34d7ae7e25a8d224302592	232 KB
b309190cedf4a4e60865787dde826901	d87431b0ec41be0a2e69ac611f36c1d5e3071745	232 KB
8305e5132173a9e9ce591cad4eb5c9b4	2f5aa0b3b68513d7751646a366bb44af6ec2fe30	120 KB