Should I block it?

16%

16% of PCs block this file from running.

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryInfoKeyW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegNotifyChangeKeyValue, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, RegSetKeySecurity, ImpersonateSelf, OpenThreadToken, IsValidSid, TraceEvent, RegEnumKeyExW, RegDeleteKeyW, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, GetLengthSid, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, GetTokenInformation, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, RegGetKeySecurity

kernel32.dll

SetErrorMode, ReadFile, QueryPerformanceCounter, SetUnhandledExceptionFilter, UnhandledExceptionFilter, RtlUnwind, DebugBreak, GetThreadLocale, GetUserDefaultLCID, GetSystemDefaultLCID, TerminateProcess, Sleep, DeleteCriticalSection, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, LoadLibraryW, LeaveCriticalSection, EnterCriticalSection, InterlockedCompareExchange, InterlockedExchange, TlsSetValue, TlsGetValue, GetLastError, GetSystemDirectoryW, TlsFree, CloseHandle, TlsAlloc, CreateEventW, InitializeCriticalSection, GetVersionExW, GetModuleFileNameW, ResetEvent, WaitForSingleObject, WaitForMultipleObjects, CreateThread, SetEvent, GetCurrentProcess, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, GetCommandLineW, GetCurrentProcessId, GetTickCount, LoadLibraryExW, VirtualProtect, SetFilePointer, WriteFile, CreateFileW, GetTempFileNameW, GetSystemTimeAsFileTime, IsBadReadPtr, MultiByteToWideChar, GetModuleHandleW, LoadLibraryA, lstrlenW, FindClose, FindNextFileW, DeleteFileW, FindFirstFileW, CopyFileW, CreateDirectoryW, GetFileAttributesW, GetCurrentThread, FormatMessageW

msvcrt.dll

DllMain

rpcrt4.dll

RpcBindingSetAuthInfoExW, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcBindingFree, NdrClientCall2

shell32.dll

SHGetFolderPathW

user32.dll

LoadStringW, wsprintfW, CharUpperW

Export table

DllCanUnloadNow

DllGetClassObject

DllInstall

DllRegisterServer

DllUnregisterServer

FFExit

FFInit

FFScanScript

InitInstallCheck

UninitInstallCheck

scriptsn.20121116183205.dll

VSCORE by McAfee (Signed)

Remove scriptsn.20121116183205.dll

Version:	VSCORE.14.4.0.354.x86
MD5:	c4cc2931531abfb63b0c4c17d3a3b411
SHA1:	10c6bc100592540b008020232b9a26086005197d
SHA256:	538068adb6045dceb790afc356f08117db7aadc9b1c9a51627f6870028ce09ba

What is scriptsn.20121116183205.dll?

VSCore Script Scanner is part of McAfee SecurityCenter, a security solution that allows users to monitor their computer's security status and to know instantly whether their computer's virus, spyware, e-mail, and firewall protection services are up-to-date. Most McAfee SecurityCenter builds offer trial subscriptions to McAfee’s security software.

Overview

scriptsn.20121116183205.dll is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

Details

File name:	scriptsn.20121116183205.dll
Publisher:	McAfee, Inc.
Product name:	VSCORE
Description:	VSCore Script Scanner
Typical file path:	C:\Program Files\common files\mcafee\systemcore\scriptsn.20121116183205.dll
File version:	VSCORE.14.4.0.354.x86
Size:	77.62 KB (79,480 bytes)
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Expiration date:	Monday, October 10, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No