Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

c3f83 37.50%
7ad6a 12.50%
c822a 12.50%
dcdec 12.50%
17e57 25.00%
(Note, Lenovo (Beijing) Limited publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegDeleteKeyA, RegOpenKeyExA, RegDeleteValueA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, RegEnumKeyExA
kernel32.dll
WideCharToMultiByte, lstrlenW, lstrlenA, CompareStringA, FlushFileBuffers, GetVersionExA, lstrcpynA, IsBadWritePtr, GetModuleFileNameA, lstrcmpiA, CompareStringW, MultiByteToWideChar, SetUnhandledExceptionFilter, CloseHandle, CreateFileA, GetConsoleOutputCP, RtlUnwind, GetCurrentThreadId, GetCommandLineA, HeapFree, HeapAlloc, GetProcessHeap, HeapValidate, IsBadReadPtr, RaiseException, DebugBreak, IsDebuggerPresent, GetProcAddress, LoadLibraryA, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, FatalAppExitA, GetModuleFileNameW, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetLastError, InterlockedDecrement, GetCurrentThread, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetEnvironmentVariableA, ExitProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapReAlloc, VirtualAlloc, GetACP, GetOEMCP, GetCPInfo, IsValidCodePage, VirtualQuery, FreeLibrary, InitializeCriticalSection, WriteFile, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, SetConsoleCtrlHandler, LoadLibraryW, InterlockedExchange, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetTimeFormatA, GetDateFormatA, GetLocaleInfoA, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetLocaleInfoW, GetTimeZoneInformation, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetVersion, IsBadCodePtr, Sleep
ole32.dll
CoGetMalloc, StringFromIID
shlwapi.dll
PathFindExtensionA
user32.dll
wsprintfA
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

icnovrly.dll

By Lenovo (Beijing) Limited (Signed)

Remove icnovrly.dll
MD5:   17e57254d63a315d9207077c3e1a479a
SHA1:   985865452891b1877ae6942425769de1599874f6

Overview

icnovrly.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program VeriFace published by Lenovo. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Lenovo (Beijing) Limited which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:icnovrly.dll
Typical file path:C:\Windows\System32\icnovrly.dll
Size:1.44 MB (1,508,192 bytes)
Build date:12/3/2008 12:38 PM
Certificate
Issued to:Lenovo (Beijing) Limited
Authority (CA):VeriSign
Expiration date:Tuesday, December 1, 2009
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesPrograms

The following program will install this file
Lenovo
6% remove
VeriFace is a face-recognition software package that is a registered trademark of Lenovo and was the first Face Verification Technology on public computer. In lieu of passwords, VeriFace identifies users by matching unique features of individual faces to photographs taken by the 1.3-megapixel webcam. VeriFace is included on all new IdeaPad notebooks and netbook, and currently only works on Windows XP, Windows Vista and Windows 7. It do...

BehaviorsBehaviors

Approved shell extension
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
  • 'VeriFace Enc' with CLSID {771C7324-DA80-49D3-8017-753B0AF60951}

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 62.50%
Windows 7 Ultimate 12.50%
Windows Vista Home Premium 12.50%
Windows 7 Home Basic 12.50%

Distribution by countryDistribution by country

United States installs about 50.00% of icnovrly.dll.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Lenovo 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE