Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

c3f83 37.50%
7ad6a 12.50%
c822a 12.50%
dcdec 12.50%
17e57 25.00%
(Note, Lenovo (Beijing) Limited publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegDeleteKeyA, RegOpenKeyExA, RegDeleteValueA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, RegEnumKeyExA
kernel32.dll
WideCharToMultiByte, lstrlenW, lstrlenA, CompareStringA, FlushFileBuffers, GetVersionExA, lstrcpynA, IsBadWritePtr, GetModuleFileNameA, lstrcmpiA, CompareStringW, MultiByteToWideChar, SetUnhandledExceptionFilter, CloseHandle, CreateFileA, GetConsoleOutputCP, RtlUnwind, GetCurrentThreadId, GetCommandLineA, HeapFree, HeapAlloc, GetProcessHeap, HeapValidate, IsBadReadPtr, RaiseException, DebugBreak, IsDebuggerPresent, GetProcAddress, LoadLibraryA, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, FatalAppExitA, GetModuleFileNameW, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetLastError, InterlockedDecrement, GetCurrentThread, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetEnvironmentVariableA, ExitProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapReAlloc, VirtualAlloc, GetACP, GetOEMCP, GetCPInfo, IsValidCodePage, VirtualQuery, FreeLibrary, InitializeCriticalSection, WriteFile, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, SetConsoleCtrlHandler, LoadLibraryW, InterlockedExchange, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetTimeFormatA, GetDateFormatA, GetLocaleInfoA, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetLocaleInfoW, GetTimeZoneInformation, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetVersion, IsBadCodePtr, Sleep
ole32.dll
CoGetMalloc, StringFromIID
shlwapi.dll
PathFindExtensionA
user32.dll
wsprintfA
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

icnovrly.dll

By Lenovo (Beijing) Limited (Signed)

Remove icnovrly.dll
MD5:   c3f833fd9a71502bc6c0f3f8f19745f4
SHA1:   4d6283647a89cece51f944cb206e2cc4c7202266
SHA256:   8c5fbd2606a6c804e6da3bf008062a95311dcff409220dba46d8c2e105fa1b68

Overview

icnovrly.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including VeriFace published by Lenovo, VeriFace from Lenovo and VeriFace by Lenovo. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Lenovo (Beijing) Limited which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:icnovrly.dll
Typical file path:C:\Windows\System32\icnovrly.dll
Size:1.43 MB (1,502,720 bytes)
Certificate
Issued to:Lenovo (Beijing) Limited
Authority (CA):VeriSign
Expiration date:Tuesday, December 1, 2009
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesPrograms

The following programs will install this file
Lenovo
6% remove
VeriFace is a face-recognition software package that is a registered trademark of Lenovo and was the first Face Verification Technology on public computer. In lieu of passwords, VeriFace identifies users by matching unique features of individual faces to photographs taken by the 1.3-megapixel webcam. VeriFace is included on all new IdeaPad notebooks and netbook, and currently only works on Windows XP, Windows Vista and Windows 7. It do...

BehaviorsBehaviors

Approved shell extension
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
  • 'VeriFace Enc' with CLSID {771C7324-DA80-49D3-8017-753B0AF60951}

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 62.50%
Windows 7 Ultimate 12.50%
Windows Vista Home Premium 12.50%
Windows 7 Home Basic 12.50%

Distribution by countryDistribution by country

United States installs about 50.00% of icnovrly.dll.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Lenovo 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE