Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

23, 0, 0, 62 75.00%
23, 0, 0, 61 25.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExA, RegCloseKey, RegOpenKeyExA
kernel32.dll
LoadLibraryA, IsBadWritePtr, CloseHandle, CreateMutexA, GetVersion, MultiByteToWideChar, GetShortPathNameW, lstrlenA, GetCurrentThreadId, GetCurrentThread, TerminateThread, WaitForSingleObject, WideCharToMultiByte, TerminateProcess, OpenProcess, EnterCriticalSection, LeaveCriticalSection, SetEvent, lstrcatA, lstrcpyA, DeleteCriticalSection, CreateEventA, InitializeCriticalSection, GetProcAddress, GetPrivateProfileStringA, GetModuleFileNameA, GetModuleHandleA, lstrcmpiW, GetLastError, SuspendThread, OpenThread, GetExitCodeThread, ResetEvent, WriteFile, SetEndOfFile, SetFilePointer, ReadFile, GetFileSize, CreateFileA, Sleep, DeleteFileW, SetFileAttributesW, GetDriveTypeW, RaiseException, FreeLibrary, InterlockedDecrement, lstrlenW, InterlockedIncrement, FlushFileBuffers, SetStdHandle, GetStringTypeW, GetStringTypeA, IsBadCodePtr, InterlockedExchange, GetACP, GetLocaleInfoA, GetVersionExA, RtlUnwind, HeapAlloc, HeapFree, ExitProcess, ExitThread, CreateThread, GetCommandLineA, HeapReAlloc, TlsAlloc, SetLastError, TlsFree, TlsSetValue, TlsGetValue, VirtualQuery, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, SetUnhandledExceptionFilter, VirtualProtect, GetSystemInfo, LCMapStringA, LCMapStringW, GetCurrentProcess, UnhandledExceptionFilter, GetOEMCP, GetCPInfo, HeapSize, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, IsBadReadPtr
psapi.dll
EnumProcesses, GetModuleFileNameExA, EnumProcessModules
rpcrt4.dll
RpcServerUnregisterIf, RpcServerUseProtseqEpA, RpcServerRegisterIf, RpcMgmtIsServerListening, NdrServerInitializeNew, NdrConvert, NdrSimpleStructUnmarshall, RpcRaiseException, I_RpcGetBuffer, RpcServerListen
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

DefMon.dll

Rising AntiVirus 2011 by Beijing Rising Information Technology Corporation Limited (Signed)

Remove DefMon.dll
Version:   23, 0, 0, 61
MD5:   074973850594779c9791af849637e091
SHA1:   2beebbc34e253e7b7dddf58dbdb005f4935d0643
SHA256:   c665013ce3060308608c69119d0aee6a0269c719dac1bce209188f0f87379257

What is DefMon.dll?

DefMon (definitions monitor) belongs to Rising Antivirus by Rising, a Chinese software antivirus software company. Rising AV has real-time file monitor scanning as well as dynamic behavior analysis and web browser protection.

About DefMon.dll (from Beijing Rising Information Technology Corporation Limited)

Rising Antivirus protects your computers against all types of viruses, Trojans, Worms, Rootkits and other malicious programs. Ease of use, Active Defense technology, Patented Unknown Virus Scan&Clean

DetailsDetails

File name:defmon.dll
Publisher:Beijing Rising Information Technology Co., Ltd.
Product name:Rising AntiVirus 2011
Description:DefMon
Typical file path:C:\Program Files\rising\rav\defmon.dll
File version:23, 0, 0, 61
Product version:23.00
Size:206.65 KB (211,608 bytes)
Certificate
Issued to:Beijing Rising Information Technology Corporation Limited
Authority (CA):VeriSign
Expiration date:Sunday, July 22, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 50.00%
Windows 7 Ultimate 25.00%
Microsoft Windows XP 25.00%

Distribution by countryDistribution by country

United States installs about 50.00% of Rising AntiVirus 2011.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE