Should I block it?

No, this file is 100% safe to run.

Additional versions

4.11.2.22	66.67%
4.10.1.14	33.33%

Relationships

PE file structure

Show functions

Import table

kernel32.dll

FindResourceW, InitializeCriticalSection, DeleteCriticalSection, GetLocalTime, LoadResource, SizeofResource, LeaveCriticalSection, CreateDirectoryW, InterlockedIncrement, EnterCriticalSection, GetFileAttributesW, CloseHandle, CreateFileW, GetLastError, GetTickCount, MapViewOfFile, WriteFile, CreateFileMappingW, LockResource, UnmapViewOfFile, MultiByteToWideChar, DeleteFileW, lstrlenW, lstrcmpiW, WideCharToMultiByte, Sleep, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, DisableThreadLibraryCalls, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, FindResourceExW, InterlockedDecrement, GetFileAttributesExW, RaiseException, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, InterlockedCompareExchange, HeapDestroy, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetVersionExA

msvcp80.dll

DllMain

msvcr80.dll

DllMain

ole32.dll

CoCreateInstance, CoCreateGuid

shell32.dll

SHGetSpecialFolderPathW

user32.dll

UnregisterClassA

Export table

DllCanUnloadNow

DllGetClassObject

TFUndo.dll

ThreatFire by PC Tools (Signed)

Remove TFUndo.dll

Version:	4.10.1.14
MD5:	e8656146fcdc926fd1c3ce936446e434
SHA1:	b0d4aae55a9bc0bb263e3579000d1799af16cde2
SHA256:	454db8b73745f33c9ee2afe687d11869c2e325d0320caeefddc5c35ffdf06487

Overview

tfundo.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program ThreatFire published by PC Tools Software. The file is digitally signed by PC Tools which was issued by the VeriSign certificate authority (CA).

Details

File name:	tfundo.dll
Publisher:	PC Tools
Product name:	ThreatFire
Description:	PC Tools ThreatFire Log
Typical file path:	C:\Program Files\threatfire\tfundo.dll
File version:	4.10.1.14
Product version:	4.7.0.17
Size:	57.27 KB (58,640 bytes)
Build date:	1/14/2010 10:53 PM
Certificate
Issued to:	PC Tools
Authority (CA):	VeriSign
Expiration date:	Friday, July 8, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Programs

The following program will install this file

ThreatFire

PC Tools Software

4% remove

“Traditional antivirus solutions cannot protect you until after they have discovered a new threat and produced a signature to counter it. ThreatFire does not rely on signatures, but instead provides behavior-based protection. It is designed to be used alongside your existing antivirus software and it fills the gap in protection between your antivirus signature updates. ThreatFire protects you against major security threats including viru...”