Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExA, RegCloseKey, RegOpenKeyExA
kernel32.dll
GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, GetModuleFileNameA, EnterCriticalSection, LeaveCriticalSection, GetCurrentProcess, HeapFree, GetProcessHeap, HeapAlloc, GetLocalTime, GetCurrentThreadId, GetPrivateProfileIntA, GetPrivateProfileStringA, WriteFile, lstrlenA, SetFilePointer, MoveFileA, DeleteFileA, SetFileAttributesA, lstrcpynA, CloseHandle, GetFileSize, CreateFileA, GetCurrentProcessId, OutputDebugStringA, GetTickCount, FindClose, FindFirstFileA, FreeLibrary, InterlockedIncrement, InterlockedDecrement, LoadLibraryA, lstrcatA, lstrcpyA, CopyFileA, SizeofResource, LockResource, InterlockedExchange, FindResourceA, FindResourceExA, GetLastError, GetExitCodeThread, HeapCreate, HeapDestroy, SetEvent, WaitForSingleObject, CreateSemaphoreA, CreateEventA, WaitForMultipleObjects, ResumeThread, ReleaseSemaphore, Sleep, InterlockedCompareExchange, AreFileApisANSI, ReadFile, SetEndOfFile, FlushFileBuffers, UnlockFile, LockFile, GetFileAttributesA, QueryPerformanceCounter, GetSystemTime, GetSystemTimeAsFileTime, LockFileEx, GetTempPathA, FormatMessageA, GetFullPathNameA, GetDiskFreeSpaceA, CompareStringA, GetModuleHandleA, GetWindowsDirectoryA, GetSystemDirectoryA, SetLastError, DeleteCriticalSection, InitializeCriticalSection, LoadResource, RaiseException, SetStdHandle, LCMapStringA, GetStringTypeA, IsBadCodePtr, IsBadReadPtr, GetEnvironmentStrings, FreeEnvironmentStringsA, HeapReAlloc, HeapSize, RtlUnwind, ExitProcess, ExitThread, CreateThread, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetCommandLineA, VirtualFree, IsBadWritePtr, SetUnhandledExceptionFilter, TlsAlloc, TlsFree, TlsSetValue, TlsGetValue, TerminateProcess, GetOEMCP, GetTimeZoneInformation, UnhandledExceptionFilter, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, SetEnvironmentVariableA
user32.dll
FindWindowA, CharUpperA, IsWindow, SendMessageA
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetDBLogObject
QueryModuleObj
QueryModuleObjWithDBPath
ReleaseDBLogObject
ReleaseObj

rfwlog.dll

Rising Antivirus 2011 by Beijing Rising Information Technology Corporation Limited (Signed)

Remove rfwlog.dll
Version:   23.0.0.7
MD5:   7ccc189fdb310182c3e9302bf1ee7f93
SHA1:   ecf0e45df1008961457690ca4fc60efef06c27d8
SHA256:   fb960ff56aa9da33d7432e565c7f6c24d3ab21f8aebc095a835d22b12f189623

Overview

rfwlog.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Beijing Rising Information Technology Corporation Limited which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

DetailsDetails

File name:rfwlog.dll
Publisher:Beijing Rising Information Technology Co., Ltd.
Product name:Rising Antivirus 2011
Description:rfwlog Dynamic Link Library
Typical file path:C:\Program Files\rising\rfw\rfwlog.dll
File version:23.0.0.7
Product version:23.00
Size:530.65 KB (543,384 bytes)
Certificate
Issued to:Beijing Rising Information Technology Corporation Limited
Authority (CA):VeriSign
Effective date:Monday, June 22, 2009
Expiration date:Sunday, July 22, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE