Should I block it?
45% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
Relationships
Parent process
Related files
DriverRestore.exe
Driver Restore by PC Drivers HeadQuarters (Signed)
Version: | 8.1.0.3 |
MD5: | 5a892ecdfbc2a4e5ae6b6a464740e880 |
SHA1: | 6928218b9a696b45339b56ac29e97437867af321 |
SHA256: | d84a1182bd4a6ce1c01fd458c6d34a788d397c8e8bde7ada027ab18aa459e574 |
About DriverRestore.exe (from PC Drivers HeadQuarters)
“At PC Drivers HeadQuarters we have distilled 10 years of PC hardware expertise into our driver identification software, Driver Detective. Driver Detective was created to save you time and remove any g”
Overview
driverrestore.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by PC Drivers HeadQuarters which was issued by the VeriSign certificate authority (CA).
Details
File name: | driverrestore.exe |
Publisher: | PC Drivers Headquarters |
Product name: | Driver Restore |
Typical file path: | C:\Program Files\driver restore\driver restore\driverrestore.exe |
File version: | 8.1.0.3 |
Size: | 3.38 MB (3,547,000 bytes) |
Certificate |
Issued to: | PC Drivers HeadQuarters |
Authority (CA): | VeriSign |
Effective date: | Sunday, April 3, 2011 |
Expiration date: | Monday, April 21, 2014 |
Digital DNA |
File packed: | No |
Code language: | Microsoft Visual C# / Basic .NET |
.NET CLR: | Yes |
.NET NGENed: | No |
More details
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Driver Restore' → C:\Program Files\Driver Restore\Driver Restore\DriverRestore.exe /applicationModC:systemTray /showWelcomC:false
Scheduled tasks
- The job 'Driver Restore-RTMUpdater' runs weekly in the path '\Driver Restore-RTMUpdater'
- The job 'Driver Restore-RTMScanRunOnce' in the path '\Driver Restore-RTMScanRunOnce'
- The task 'Driver Restore-RTMScan' in the path '\Driver Restore-RTMScan'
- The task 'Driver Restore-RTMRules' runs weekly in the path '\Driver Restore-RTMRules'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.04189406% | |
Kernel CPU: | 0.01270257% | |
User CPU: | 0.02919149% | |
Kernel CPU time: | 312 ms/min | |
Memory |
Private memory: | 33.26 MB | |
Private (maximum): | 42.91 MB | |
Private (minimum): | 33.95 MB | |
Non-paged memory: | 33.26 MB | |
Virtual memory: | 214.2 MB | |
Virtual memory (peak): | 219.89 MB | |
Working set: | 41.88 MB | |
Working set (peak): | 42.94 MB | |
Resource allocations |
Threads: | 14 | |
Handles: | 413 | |
GUI GDI count: | 46 | |
GUI GDI peak: | 50 | |
GUI USER count: | 42 | |
GUI USER peak: | 43 | |
Process properties
Threads
Averages
DriverRestore.exe (main module) |
Total CPU: | 0.07544995% | |
Kernel CPU: | 0.01979015% | |
User CPU: | 0.05565980% | |
CPU cycles: | 1,338,189/sec | |
Context switches: | 2/sec | |
Memory: | 3.4 MB | |
ntdll.dll |
Total CPU: | 0.00124184% | |
Kernel CPU: | 0.00124184% | |
User CPU: | 0.00000000% | |
CPU cycles: | 32,277/sec | |
Context switches: | 1/sec | |
Memory: | 1.23 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 8.1 |
60.00% |
|
Microsoft Windows XP |
10.00% |
|
Windows 8 |
10.00% |
|
Windows 7 Ultimate |
10.00% |
|
Windows 7 Home Premium |
10.00% |
|
Distribution by country
United States installs about 90.00% of Driver Restore.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Toshiba |
85.71% |
|
Hewlett-Packard |
7.14% |
|
Acer |
7.14% |
|