Should I block it?

40%

40% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1, 0, 0, 1	44.44%
1, 0, 0, 1	55.56%

(Note, IObit Information Technology publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegCreateKeyExW, RegQueryValueExW, QueryServiceStatus, CloseServiceHandle, OpenServiceW, OpenSCManagerW, RegDeleteValueW, RegCloseKey, RegSetValueExW

kernel32.dll

GetVersionExW, Sleep, GetTickCount, FreeLibrary, GetProcAddress, LoadLibraryW, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, HeapSize, GetLocaleInfoA, GetLastError, HeapFree, HeapAlloc, MultiByteToWideChar, GetCurrentThreadId, GetCommandLineA, GetVersionExA, GetProcessHeap, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapDestroy, HeapCreate, VirtualFree, EnterCriticalSection, VirtualAlloc, HeapReAlloc, GetModuleHandleA, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, RtlUnwind, LoadLibraryA, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW

ole32.dll

CoCreateInstance, CoUninitialize, CoInitializeSecurity, CoInitializeEx, CoSetProxyBlanket

Export table

CloseEnum

CreateRestorePoint

DeleteRestorePoint

DisableSR

EnableSR

EnumFirstPoint

EnumNextPoint

IsSREnable

RestoreSystem

SysRest.dll

Driver Booster by IObit Information Technology (Signed)

Remove SysRest.dll

Version:	1, 0, 0, 1
MD5:	3ddb921e49d34aa24e0a8223391fc786
SHA1:	abc9c6f574dc466a8fccddc2810035e02448fbff

Overview

sysrest.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Driver Booster published by IObit, Driver Booster from IObit and Driver Booster by IObit. The file is digitally signed by IObit Information Technology which was issued by the VeriSign certificate authority (CA).

Details

File name:	sysrest.dll
Publisher:	IObit
Product name:	Driver Booster
Description:	System Restore Tools
Typical file path:	C:\Program Files\iobit\driver booster\sysrest.dll
File version:	1, 0, 0, 1
Product version:	1.0
Size:	74.31 KB (76,096 bytes)
Build date:	11/11/2013 9:06 AM
Certificate
Issued to:	IObit Information Technology
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Driver Booster

IObit

43% remove

“Outdated drivers may heavily affect your PC performance and lead to system crashes. Driver Booster scans and identifies outdated drivers automatically, and downloads and installs the right update for you with just ONE click, saving you loads of time. Moreover, it's specially designed to tweak drivers for best gaming performance. It's the right tool to protect your PC from hardware failures, conflicts, and system crashes.”

Driver Booster 2

IObit

45% remove

IObit Apps Toolbar

Spigot, Inc.

71% remove

IObit Apps Toolbar is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings. This plugin will update Internet Explorer (as a BHO), Chrome (as an extension) and Firefox (as an add-in). In some cases, the program will monitor a user's behavior (which the user agreed to if they did not read the full EULA) and wil...