Should I block it?

No, this file is 100% safe to run.

Additional versions

4.11.2.22	66.67%
4.10.1.14	33.33%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

DeleteService, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, OpenSCManagerW, QueryServiceStatus, StartServiceW, ControlService, CloseServiceHandle, OpenServiceW, CreateServiceW

kernel32.dll

QueryPerformanceFrequency, GetCurrentThread, GetCurrentProcessId, CreateThread, GetSystemDirectoryW, SetThreadPriority, SetLastError, GetModuleHandleW, GetProcAddress, VirtualQueryEx, WriteProcessMemory, GetOverlappedResult, VirtualProtectEx, SetEvent, GetLogicalDriveStringsW, OpenThread, CreateMutexW, WaitForMultipleObjects, InterlockedIncrement, ReleaseMutex, InterlockedDecrement, InterlockedCompareExchange, InitializeCriticalSection, TerminateThread, LeaveCriticalSection, EnterCriticalSection, WaitForSingleObject, QueryPerformanceCounter, CreateEventW, GetDriveTypeW, GetLastError, CloseHandle, Sleep, CreateFileW, DeviceIoControl, GetVersionExW, QueryDosDeviceW, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedExchange

msvcr80.dll

DllMain

ole32.dll

CoUninitialize, CoInitialize

Export table

AddDenyListEntry

AddExtScanListItem

AddNetScanListItem

AddRegistryFilter

CancelMessage

ClearDenyListEntries

ConfigureExtScan

DeleteOnBoot

DisableFileSystemMonitor

DisableNetworkMonitor

DisableProcessMonitor

DisableRegistryMonitor

DllRegisterServer

DllUnregisterServer

GetMonitorStatus

GetNetworkSocketInfo

GetRegistryCounts

InitApprovedProcessList

InitFileSystemMonitor

InitKeyboardMonitor

InitNetworkMonitor

InitProcessMonitor

InitRegistryMonitor

InjectKeyboardData

IsProcessWhitelisted

NxFindCloseFile

NxFindFirstFile

NxFindNextFile

NxFsAddApprovedProcess

NxFsCloseFile

NxFsDeleteFile

NxFsGetFileAttributes

NxFsOpenFile

NxFsReadFile

NxFsRemoveApprovedProcess

NxGetCHProcessListEx

NxGetCHSysHandleInfo

NxGetProcessNameEx

NxIsProcessProtected

NxProtectProcess

NxReleaseCHProcessList

NxRemoveAllProtection

NxSetSysDriverHandle

NxSysRegCloseKey

NxSysRegDeleteKey

NxSysRegDeleteValue

NxSysRegEnumKey

NxSysRegEnumValue

NxSysRegOpenKey

NxSysRegQueryValue

NxSysRegSetValueKey

NxTerminateProcess

RemoveDenyListEntry

RemoveExtScanListItem

RemoveNetScanListItem

RemoveRegistryFilter

SendHeartbeat

SetApiEventRules

SetNetworkEventProcessInfo

SetNetworkEventSettings

SetNetworkObserveMode

ShutdownFileSystemMonitor

ShutdownKeyboardMonitor

ShutdownNetworkMonitor

ShutdownProcessMonitor

ShutdownRegistryMonitor

UpdateProcessWhiteList

tfmon.dll

ThreatFire by PC Tools (Signed)

Remove tfmon.dll

Version:	4.10.1.14
MD5:	db97b7c18cdaf2cd6c4c19ac852956b0
SHA1:	bc36b69c73c14a6cafc511836c2decebf1cfa5ff
SHA256:	bed1faec00c5b3197d350f9a2ead01ac75d6347dcc39fdb8e2918d103d60bf8b

Overview

tfmon.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program ThreatFire published by PC Tools Software. The file is digitally signed by PC Tools which was issued by the VeriSign certificate authority (CA).

Details

File name:	tfmon.dll
Publisher:	PC Tools
Product name:	ThreatFire
Description:	ThreatFire Monitor Interface
Typical file path:	C:\Program Files\threatfire\tfmon.dll
Original name:	TFMon
File version:	4.10.1.14
Product version:	4.7.0.17
Size:	44.77 KB (45,840 bytes)
Build date:	1/14/2010 10:49 PM
Certificate
Issued to:	PC Tools
Authority (CA):	VeriSign
Expiration date:	Friday, July 8, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Programs

The following program will install this file

ThreatFire

PC Tools Software

4% remove

“Traditional antivirus solutions cannot protect you until after they have discovered a new threat and produced a signature to counter it. ThreatFire does not rely on signatures, but instead provides behavior-based protection. It is designed to be used alongside your existing antivirus software and it fills the gap in protection between your antivirus signature updates. ThreatFire protects you against major security threats including viru...”