Should I block it?
45% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
Relationships
 PE file structure
|
Show functions |
Import table
mscoree.dll
DllMain
DriverRestore.exe
Driver Restore by PC Drivers HeadQuarters (Signed)
| Version: | 8.1.0.13 |
| MD5: | 0c975b9d9400356339412fe87263099f |
| SHA1: | 20b1bcf9f61dab8f2e2b907022fb299f6805df02 |
| SHA256: | 55f9b904d0a06eafc1fea3341e4b92b13efd7216681fa1f56d1487f7ae645f86 |
About DriverRestore.exe (from PC Drivers HeadQuarters)
“At PC Drivers HeadQuarters we have distilled 10 years of PC hardware expertise into our driver identification software, Driver Detective. Driver Detective was created to save you time and remove any g”
Overview
driverrestore.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by PC Drivers HeadQuarters which was issued by the VeriSign certificate authority (CA).
Details
| File name: | driverrestore.exe |
| Publisher: | PC Drivers Headquarters |
| Product name: | Driver Restore |
| Typical file path: | C:\Program Files\driver restore\driver restore\driverrestore.exe |
| File version: | 8.1.0.13 |
| Size: | 3.47 MB (3,638,136 bytes) |
| Build date: | 5/13/2013 1:36 PM |
| Certificate |
| Issued to: | PC Drivers HeadQuarters |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, April 3, 2011 |
| Expiration date: | Monday, April 21, 2014 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Driver Restore' → C:\Program Files\Driver Restore\Driver Restore\DriverRestore.exe /applicationModC:systemTray /showWelcomC:false
Scheduled tasks
- The job 'Driver Restore-RTMUpdater' runs weekly in the path '\Driver Restore-RTMUpdater'
- The job 'Driver Restore-RTMScanRunOnce' in the path '\Driver Restore-RTMScanRunOnce'
- The task 'Driver Restore-RTMScan' in the path '\Driver Restore-RTMScan'
- The task 'Driver Restore-RTMRules' runs weekly in the path '\Driver Restore-RTMRules'
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
60.00% |
|
| Microsoft Windows XP |
10.00% |
|
| Windows 8 |
10.00% |
|
| Windows 7 Ultimate |
10.00% |
|
| Windows 7 Home Premium |
10.00% |
|
Distribution by country
United States installs about 90.00% of Driver Restore.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
85.71% |
|
| Hewlett-Packard |
7.14% |
|
| Acer |
7.14% |
|
