Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2, 22, 0, 0 5.26%
2, 21, 0, 0 10.53%
2, 20, 0, 0 5.26%
2, 20, 0, 0 5.26%
2, 16, 0, 0 5.26%
2, 16, 0, 0 10.53%
2, 16, 0, 0 5.26%
2, 16, 0, 0 26.32%
2, 16, 0, 0 5.26%
2, 16, 0, 0 10.53%
2, 16, 0, 0 5.26%
2, 16, 0, 0 5.26%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
CryptEncrypt, CryptAcquireContextW, CryptGenKey, CryptReleaseContext, CloseServiceHandle, AllocateAndInitializeSid, EqualSid, FreeSid, OpenProcessToken, GetTokenInformation, OpenServiceW, OpenSCManagerW, RegCloseKey, RegQueryValueExA, RegOpenKeyExA, CryptDestroyKey, CryptExportKey, CryptImportKey
kernel32.dll
InterlockedExchange, GetCurrentProcessId, OutputDebugStringA, GetTickCount, GetCurrentThread, CloseHandle, FlushInstructionCache, OpenProcess, InterlockedExchangeAdd, CreateEventW, WaitForSingleObject, SetEvent, ResetEvent, MultiByteToWideChar, WideCharToMultiByte, GetModuleFileNameW, DeleteFileW, MoveFileW, CreateDirectoryW, FindClose, FindNextFileW, FindFirstFileW, CompareFileTime, ProcessIdToSessionId, VirtualQuery, RtlCaptureContext, GetSystemInfo, TerminateProcess, GetModuleHandleW, GetSystemTime, SetLastError, GetLastError, GetCurrentThreadId, QueryPerformanceFrequency, GetModuleHandleA, GetCurrentProcess, QueryPerformanceCounter, GetProcAddress, InitializeCriticalSection, InterlockedIncrement, TlsGetValue, TlsSetValue, TlsAlloc, LeaveCriticalSection, EnterCriticalSection, Sleep, InterlockedCompareExchange, UnhandledExceptionFilter, IsDebuggerPresent, SetUnhandledExceptionFilter, GetSystemTimeAsFileTime, LoadLibraryA, FreeLibrary, GetModuleFileNameA, DeleteCriticalSection, GetVersionExW, InitializeCriticalSectionAndSpinCount, CreateSemaphoreW, ReleaseSemaphore, InterlockedDecrement
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shell32.dll
SHGetFolderPathA, SHGetFolderPathW
shlwapi.dll
PathAppendA
user32.dll
GetDesktopWindow
Export table
rooks_ext_get_rooks_extension

rookscom.dll

Rapport by Trusteer (Signed)

Remove rookscom.dll
Version:   2, 16, 0, 0
MD5:   d2385216776bd1be4e635bf36d40870c
SHA1:   07a9c47be4cef81e6b66ff4dd94037373f894ac0
SHA256:   27f4ae39a0435eb703432d953e061a497953f909abf20a577b626d95fa24ce65

What is rookscom.dll?

Trusteer Rapport is lightweight security software designed to protect confidential data, such as account credentials, from being stolen by malicious software (malware) and via phishing. To achieve this goal, the software first includes anti-phishing measures to protect against misdirection and attempts to prevent malicious screen scraping.

Overview

rookscom.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Trusteer which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:rookscom.dll
Publisher:Trusteer Ltd.
Product name:Rapport
Description:Rooks/COM
Typical file path:C:\Program Files\trusteer\rapport\bin\rookscom.dll
File version:2, 16, 0, 0
Size:201.84 KB (206,680 bytes)
Certificate
Issued to:Trusteer
Authority (CA):VeriSign
Effective date:Friday, February 12, 2010
Expiration date:Thursday, May 1, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 63.16%
Windows 7 Professional 10.53%
Microsoft Windows XP 10.53%
Windows 7 Ultimate 5.26%
Windows Vista Home Premium 5.26%
Windows 8 Pro 5.26%

Distribution by countryDistribution by country

United States installs about 44.44% of Rapport.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 54.55%
Sony 18.18%
Hewlett-Packard 18.18%
GIGABYTE 9.09%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE