Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, TraceMessage, RegQueryValueExW, RegEnumValueW
gdi32.dll
GetDeviceCaps, DeleteDC
kernel32.dll
DeleteCriticalSection, GetLastError, lstrcmpiW, GetModuleFileNameW, Sleep, CreateThread, CreateEventW, GetModuleHandleW, GetCurrentThreadId, InterlockedIncrement, InterlockedDecrement, SetEvent, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, GetCommandLineW, HeapSetInformation, EnterCriticalSection, LeaveCriticalSection, CompareStringW, LockResource, FindResourceExW, FindClose, FindNextFileW, DeleteFileW, FindFirstFileW, CreateDirectoryW, CreateFileW, WriteFile, GetFileSize, ResetEvent, GetTempFileNameW, CreateTimerQueue, DeleteTimerQueueEx, WideCharToMultiByte, DeleteTimerQueueTimer, LoadLibraryW, GetSystemDirectoryW, GetProcAddress, InitializeCriticalSection, CompareFileTime, ChangeTimerQueueTimer, CreateTimerQueueTimer, QueueUserWorkItem, GetLocalTime, GetSystemDefaultLCID, GetSystemDefaultUILanguage, GetUserDefaultLCID, GetUserDefaultUILanguage, GetSystemTimeAsFileTime, FindCloseChangeNotification, FindFirstChangeNotificationW, GetCurrentThread, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, WaitForSingleObject, GetProcessHeap, InterlockedCompareExchange, GetStartupInfoW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, TerminateProcess, GetCurrentProcess, CloseHandle, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VerifyVersionInfoW, VerSetConditionMask, ReadFile, GetTempPathW, lstrlenA, RaiseException, SystemTimeToFileTime, lstrlenW
msvcr80.dll
DllMain
ole32.dll
CoCreateGuid, CoInitialize, CoUninitialize, CoTaskMemAlloc, CoTaskMemRealloc, CoWaitForMultipleHandles, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, StringFromGUID2, CreateStreamOnHGlobal, CoCreateInstance, CoInitializeEx
shell32.dll
SHFileOperationW, SHGetFolderPathAndSubDirW
shlwapi.dll
PathFindFileNameW, PathFileExistsW, StrToInt64ExW, PathRemoveFileSpecW, PathStripPathW, StrCmpW, PathFindExtensionW
sqmapi.dll
SqmWaitForUploadComplete, SqmStartUpload
urlmon.dll
URLDownloadToFileW
user32.dll
TranslateMessage, GetMessageW, SendNotifyMessageW, PostThreadMessageW, CharNextW, CharUpperW, UnregisterClassA, GetDC, ReleaseDC, RegisterWindowMessageW, DispatchMessageW, FindWindowExW
wininet.dll
InternetReadFile, InternetCloseHandle, HttpQueryInfoW, HttpSendRequestW, InternetOpenUrlW, InternetConnectW, HttpOpenRequestW, HttpAddRequestHeadersW, InternetOpenW

wltuser.exe

Windows Live Toolbar by Microsoft Corporation (Signed)

Remove wltuser.exe
Version:   14.0.8117.0416
MD5:   20a098a4d12e49342228d3afe98eafdf
SHA1:   1b062132855eea8a1fef2f74a04600fb0e915ae5
SHA256:   a383920f66b55596c9c5bdb5b7c042da0e953f230d044294f18b4cc3f54c2ed5

Overview

wltuser.exe executes as a process with the local user's privileges. It is installed with a couple of know programs including Windows Live Essentials published by Microsoft Corporation, Installation Windows Live from Microsoft Corporation and Installation Windows Live by Microsoft Corporation. The file is digitally signed by Microsoft Corporation. This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

DetailsDetails

File name:wltuser.exe
Publisher:Microsoft Corporation
Product name:Windows Live Toolbar
Description:Windows Live Toolbar User Elevation Helper
Typical file path:C:\Program Files\windows live\toolbar\wltuser.exe
File version:14.0.8117.0416
Size:218.34 KB (223,584 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, December 7, 2009
Expiration date:Monday, March 7, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Microsoft Corporation
10% remove
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services. Essentials programs are designed to integrate well with each other, with Microsoft Windows, and with other Microsoft web-based services such as SkyDrive and Outlook.com, so that they operate as a seamless whole.
Microsoft Corporation
9% remove
Windows Live is the former collective brand name for a set of services and software products from Microsoft; part of their software plus services platform. A majority of these services are Web applications, accessible from a browser, but there are also client-side binary applications that require installation. There are three ways in which Windows Live services are offered: Windows Essentials applications, web services, and mobile servi...
Microsoft Corporation
7% remove
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services. Essentials programs are designed to integrate well with each other, with Microsoft Windows, and with other Microsoft web-based services such as SkyDrive and Outlook.com, so that they operate as a seamless whole.
Microsoft Corporation
9% remove
Windows Live "is a way to extend the Windows user experience". Windows Vista provides a link in its user interface to download Windows Live Messenger, and Windows 7 saw the removal of applications such as Windows Mail, Windows Photo Gallery and Windows Movie Maker and replaced with the Windows Essentials suite, a software package that allows the downloading and installation of similar offerings from Windows Live. Windows Live offers int...
Network connections
  • [UDP] listens on port 4413

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00159029%
    0.028634%
    Kernel CPU:0.00097416%
    0.013761%
    User CPU:0.00061613%
    0.014873%
    Kernel CPU time:500 ms/min
    100,923,805ms/min
    Memory
    Private memory:3.95 MB
    21.59 MB
    Private (maximum):9.29 MB
    Private (minimum):2.96 MB
    Non-paged memory:3.95 MB
    21.59 MB
    Virtual memory:63.4 MB
    140.96 MB
    Virtual memory (peak):70.25 MB
    169.69 MB
    Working set:3.88 MB
    18.61 MB
    Working set (peak):9.3 MB
    37.95 MB
    Page faults:4,494/min
    2,039/min
    I/O
    I/O read transfer:389 Bytes/sec
    1.02 MB/min
    I/O read operations:5/sec
    343/min
    I/O write transfer:4 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:824 Bytes/sec
    448.09 KB/min
    I/O other operations:21/sec
    1,671/min
    Resource allocations
    Threads:8
    12
    Handles:277
    600
    GUI GDI count:8
    103
    GUI USER count:11
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:"C:\Program Files\windows live\toolbar\wltuser.exe" -embedding
    Owner:User
    Parent process:svchost.exe (Generic Host Process for Win32 Services by Microsoft)

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Microsoft Windows XP 100.00%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE