Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

7.0.0.34 33.33%
7.0.0.24 66.67%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenProcessToken, LookupPrivilegeValueW, GetTokenInformation, GetLengthSid, FreeSid, AllocateAndInitializeSid, AdjustTokenPrivileges, SetNamedSecurityInfoW, GetKernelObjectSecurity
comctl32.dll
ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetIcon, ImageList_ReplaceIcon, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
kernel32.dll
TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, LocalFree, LocalAlloc, lstrlenW, lstrcmpA, WriteProcessMemory, WritePrivateProfileStringW, WideCharToMultiByte, WaitForSingleObject, WaitForMultipleObjectsEx, VirtualQueryEx, VirtualQuery, VirtualProtectEx, VirtualProtect, VirtualFree, VirtualAlloc, UnmapViewOfFile, TerminateThread, TerminateProcess, SuspendThread, Sleep, SetThreadPriority, SetThreadContext, SetThreadAffinityMask, SetPriorityClass, SetLastError, SetEvent, ResumeThread, ResetEvent, ReleaseMutex, ReadProcessMemory, PulseEvent, OutputDebugStringA, OpenProcess, OpenFileMappingA, OpenEventA, MapViewOfFile, LoadLibraryExA, LoadLibraryA, LeaveCriticalSection, IsBadReadPtr, InitializeCriticalSection, GlobalUnlock, GlobalSize, GlobalLock, GlobalFree, GlobalAlloc, GetWindowsDirectoryW, GetWindowsDirectoryA, GetVersionExW, GetVersionExA, GetVersion, GetThreadPriority, GetThreadLocale, GetThreadContext, GetSystemDirectoryW, GetSystemDirectoryA, GetStartupInfoA, GetProcessVersion, GetProcessAffinityMask, GetProcAddress, GetPrivateProfileStringW, GetPriorityClass, GetModuleHandleW, GetModuleHandleA, GetModuleFileNameW, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetFileAttributesW, GetFileAttributesA, GetExitCodeThread, GetExitCodeProcess, GetCurrentThreadId, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, GetCommandLineA, GetACP, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, ExpandEnvironmentStringsW, ExpandEnvironmentStringsA, ExitProcess, EnterCriticalSection, DuplicateHandle, DeleteCriticalSection, CreateThread, CreateSemaphoreA, CreateMutexA, CreateFileMappingW, CreateFileMappingA, CreateFileW, CreateFileA, CreateEventA, CopyFileW, CopyFileA, CloseHandle
ole32.dll
CreateStreamOnHGlobal, CoTaskMemFree, CoCreateInstance, GetHGlobalFromStream
oleaut32.dll
SysFreeString, SysStringLen, SysStringByteLen, SysReAllocStringLen, SysReAllocString, SysAllocStringLen, SysAllocStringByteLen, SysAllocString
rtl100.bpl
DllMain, @Sysutils@initialization$qqrv, @Sysutils@Finalization$qqrv, @Sysutils@FreeAndNil$qqrpv, @Sysutils@RaiseLastOSError$qqrv, @Sysutils@FindCmdLineSwitch$qqrx17System@AnsiStringo, @Sysutils@ExcludeTrailingPathDelimiter$qqrx17System@AnsiString, @Sysutils@IncludeTrailingPathDelimiter$qqrx17System@AnsiString, @Sysutils@Exception@$bctr$qqrp20System@TResStringRecpx14System@TVarRecxi, @Sysutils@Exception@$bctr$qqrx17System@AnsiStringpx14System@TVarRecxi, @Sysutils@Exception@$bctr$qqrx17System@AnsiString, @Sysutils@ShowException$qqrp14System@TObjectpv, @Sysutils@SysErrorMessage$qqri, @Sysutils@StrToDateTime$qqrx17System@AnsiString, @Sysutils@StrToTime$qqrx17System@AnsiString, @Sysutils@StrToDate$qqrx17System@AnsiString, @Sysutils@DateTimeToStr$qqrx16System@TDateTime, @Sysutils@TimeToStr$qqrx16System@TDateTime, @Sysutils@DateToStr$qqrx16System@TDateTime, @Sysutils@StrToFloat$qqrx17System@AnsiString, @Sysutils@FloatToStr$qqrg, @Sysutils@Format$qqrx17System@AnsiStringpx14System@TVarRecxi, @Sysutils@StrPLCopy$qqrpcx17System@AnsiStringui, @Sysutils@StrPCopy$qqrpcx17System@AnsiString, @Sysutils@ExtractFileExt$qqrx17System@AnsiString, @Sysutils@ExtractFileName$qqrx17System@AnsiString, @Sysutils@ExtractFileDrive$qqrx17System@AnsiString, @Sysutils@ExtractFilePath$qqrx17System@AnsiString, @Sysutils@ForceDirectories$qqr17System@AnsiString, @Sysutils@FileExists$qqrx17System@AnsiString, @Sysutils@StrToBoolDef$qqrx17System@AnsiStringxo, @Sysutils@StrToIntDef$qqrx17System@AnsiStringi, @Sysutils@StrToInt$qqrx17System@AnsiString, @Sysutils@IntToHex$qqrji, @Sysutils@IntToStr$qqri, @Sysutils@TrimLeft$qqrx17System@WideString, @Sysutils@Trim$qqrx17System@WideString, @Sysutils@Trim$qqrx17System@AnsiString, @Sysutils@WideSameText$qqrx17System@WideStringt1, @Sysutils@WideCompareText$qqrx17System@WideStringt1, @Sysutils@WideSameStr$qqrx17System@WideStringt1, @Sysutils@WideCompareStr$qqrx17System@WideStringt1, @Sysutils@WideLowerCase$qqrx17System@WideString, @Sysutils@WideUpperCase$qqrx17System@WideString, @Sysutils@CompareText$qqrx17System@AnsiStringt1, @Sysutils@CompareMem$qqrpvt1i, @Sysutils@SysLocale, @Sysutils@Win32Platform, @Sysutils@EmptyWideStr, @Sysutils@EmptyStr, @Sysutils@EConvertError@, @Sysutils@EExternal@, @Sysutils@Exception@, @Classes@initialization$qqrv, @Classes@Finalization$qqrv, @Classes@TStreamAdapter@$bctr$qqrp15Classes@TStream24Classes@TStreamOwnership, @Classes@TThread@DoTerminate$qqrv, @Classes@TThread@AfterConstruction$qqrv, @Classes@TThread@$bdtr$qqrv, @Classes@HexToBin$qqrpct1i, @Classes@BinToHex$qqrpct1i, @Classes@TWriter@WriteWideString$qqrx17System@WideString, @Classes@TWriter@WriteListEnd$qqrv, @Classes@TWriter@WriteListBegin$qqrv, @Classes@TReader@ReadWideString$qqrv, @Classes@TReader@ReadListEnd$qqrv, @Classes@TReader@ReadListBegin$qqrv, @Classes@TReader@EndOfList$qqrv, @Classes@TFileStream@$bctr$qqrx17System@AnsiStringus, @Classes@TStream@CopyFrom$qqrp15Classes@TStreamj, @Classes@TStream@WriteBuffer$qqrpxvi, @Classes@TStream@SetPosition$qqrxj, @Classes@TStream@GetPosition$qqrv, @Classes@TStrings@SetNameValueSeparator$qqrxc, @Classes@TStrings@GetNameValueSeparator$qqrv, @Classes@TStrings@SetStrictDelimiter$qqrxo, @Classes@TStrings@SetQuoteChar$qqrxc, @Classes@TStrings@SetLineBreak$qqrx17System@AnsiString, @Classes@TStrings@SetDelimiter$qqrxc, @Classes@TStrings@GetStrictDelimiter$qqrv, @Classes@TStrings@GetQuoteChar$qqrv, @Classes@TStrings@GetLineBreak$qqrv, @Classes@TStrings@GetDelimiter$qqrv, @Classes@TStrings@EndUpdate$qqrv, @Classes@TStrings@BeginUpdate$qqrv, @Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler, @Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent, @Classes@TPersistent@Assign$qqrp19Classes@TPersistent, @Classes@TPersistent@$bdtr$qqrv, @Classes@TList@Put$qqripv, @Classes@TList@Get$qqri, @Classes@TList@Delete$qqri, @Classes@TList@Add$qqrpv, @Classes@UnRegisterClasses$qqrpp17System@TMetaClassxi, @Classes@RegisterClasses$qqrpp17System@TMetaClassxi, @Classes@FindClass$qqrx17System@AnsiString, @Classes@SyncEvent, @Classes@TThread@, @Classes@EThread@, @Classes@TStreamAdapter@, @Classes@TMemoryStream@, @Classes@TFileStream@, @Classes@TStringList@, @Classes@TStrings@, @$xp$19Classes@TPersistent, @Classes@TPersistent@, @Classes@TList@, @Classes@EStringListError@, @Activex@Failed$qqrl, @Activex@Succeeded$qqrl, @Typinfo@initialization$qqrv, @Typinfo@Finalization$qqrv, @Variants@initialization$qqrv, @Variants@Finalization$qqrv, @Variants@VarToWideStr$qqrrx14System@Variant, @Variants@VarIsNull$qqrrx14System@Variant, @Variants@@VarAddRef$qqrr8TVarData, @Variants@@OleVarFromLStr$qqrr8TVarDatax17System@AnsiString, @Variants@@VarFromDisp$qqrr8TVarDatax36System@%DelphiInterface$t9IDispatch%, @Variants@@VarFromIntf$qqrr8TVarDatax45System@%DelphiInterface$t17System@IInterface%, @Variants@@VarFromWStr$qqrr8TVarDatax17System@WideString, @Variants@@OleVarFromInt$qqrr8TVarDataxixzc, @Variants@@VarToWStr$qqrr17System@WideStringrx8TVarData, @Variants@@VarClr$qqrr8TVarData, @Varutils@initialization$qqrv, @Varutils@Finalization$qqrv, @Rtlconsts@_SThreadCreateError, @Rtlconsts@_SSortedListError, @Rtlconsts@_SRegSetDataFailed, @Rtlconsts@_SRegGetDataFailed, @Rtlconsts@_SRegCreateFailed, @Rtlconsts@_SListIndexError, @Rtlconsts@_SInvalidRegType, @Rtlconsts@_SIniFileWriteError, @Rtlconsts@_SDuplicateString, @Registry@initialization$qqrv, @Registry@Finalization$qqrv, @Inifiles@initialization$qqrv, @Inifiles@Finalization$qqrv, @Inifiles@TMemIniFile@WriteString$qqrx17System@AnsiStringt1t1, @Inifiles@TMemIniFile@UpdateFile$qqrv, @Inifiles@TMemIniFile@ReadString$qqrx17System@AnsiStringt1t1, @Inifiles@TMemIniFile@ReadSectionValues$qqrx17System@AnsiStringp16Classes@TStrings, @Inifiles@TMemIniFile@ReadSections$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@ReadSection$qqrx17System@AnsiStringp16Classes@TStrings, @Inifiles@TMemIniFile@EraseSection$qqrx17System@AnsiString, @Inifiles@TMemIniFile@DeleteKey$qqrx17System@AnsiStringt1, @Inifiles@TMemIniFile@$bdtr$qqrv, @Inifiles@TMemIniFile@$bctr$qqrx17System@AnsiString, @Inifiles@TCustomIniFile@ReadSections$qqrx17System@AnsiStringp16Classes@TStrings, @Inifiles@TCustomIniFile@WriteBinaryStream$qqrx17System@AnsiStringt1p15Classes@TStream, @Inifiles@TCustomIniFile@ReadBinaryStream$qqrx17System@AnsiStringt1p15Classes@TStream, @Inifiles@TCustomIniFile@ValueExists$qqrx17System@AnsiStringt1, @Inifiles@TCustomIniFile@WriteBool$qqrx17System@AnsiStringt1o, @Inifiles@TCustomIniFile@WriteTime$qqrx17System@AnsiStringt116System@TDateTime, @Inifiles@TCustomIniFile@WriteFloat$qqrx17System@AnsiStringt1d, @Inifiles@TCustomIniFile@WriteDateTime$qqrx17System@AnsiStringt116System@TDateTime, @Inifiles@TCustomIniFile@WriteDate$qqrx17System@AnsiStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadTime$qqrx17System@AnsiStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadFloat$qqrx17System@AnsiStringt1d, @Inifiles@TCustomIniFile@ReadDateTime$qqrx17System@AnsiStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadDate$qqrx17System@AnsiStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadBool$qqrx17System@AnsiStringt1o, @Inifiles@TCustomIniFile@WriteInteger$qqrx17System@AnsiStringt1i, @Inifiles@TCustomIniFile@ReadInteger$qqrx17System@AnsiStringt1i, @Inifiles@TCustomIniFile@$bctr$qqrx17System@AnsiString, @Inifiles@TIniFile@, @Inifiles@TMemIniFile@, @Inifiles@EIniFileException@, @Widestrutils@inOpSet$qqrbrx29System@%Set$tc$iuc$0$iuc$255%, @Widestrutils@WideReplaceText$qqrx17System@WideStringt1t1, @Widestrutils@WideReplaceStr$qqrx17System@WideStringt1t1, @Widestrutils@WideStringReplace$qqrx17System@WideStringt1t149System@%Set$t21Sysutils@SysUtils__94$iuc$0$iuc$1%, @Widestrutils@WideDequotedStr$qqrx17System@WideStringb, @Widestrutils@WideExtractQuotedStr$qqrrpbb, @Widestrutils@WideQuotedStr$qqrx17System@WideStringb, @Widestrutils@WideLastChar$qqrx17System@WideString, @Widestrutils@WStrScan$qqrpbb, @Widestrutils@WStrPCopy$qqrpbx17System@WideString, @Widestrutils@WStrLen$qqrpxb, @Widestrutils@WStrNew$qqrpxb, @Math@IntPower$qqrxgxi, @Widestrings@initialization$qqrv, @Widestrings@Finalization$qqrv, @Widestrings@TWideStrings@SetValueFromIndex$qqrix17System@WideString, @Widestrings@TWideStrings@GetValueFromIndex$qqri, @Widestrings@TWideStrings@SetCommaText$qqrx17System@WideString, @Widestrings@TWideStrings@GetValue$qqrx17System@WideString, @Widestrings@TWideStrings@GetName$qqri, @Widestrings@TWideStringList@, @Strutils@MidStr$qqrx17System@WideStringxixi, @Strutils@RightStr$qqrx17System@WideStringxi, @Strutils@LeftStr$qqrx17System@WideStringxi, @Strutils@LeftStr$qqrx17System@AnsiStringxi, @$xp$17Msxml@IXMLDOMText, @$xp$22Msxml@IXMLDOMAttribute, @$xp$21Msxml@IXMLDOMDocument, @$xp$25Msxml@IXMLDOMNamedNodeMap, @$xp$21Msxml@IXMLDOMNodeList, @$xp$17Msxml@IXMLDOMNode, @$xp$27Msxml@IXMLDOMImplementation, @Msxml@CLASS_DOMDocument, @Comobj@initialization$qqrv, @Comobj@Finalization$qqrv, @Comobj@OleCheck$qqrl, @Comobj@HandleSafeCallException$qqrp14System@TObjectpvrx5_GUIDx17System@WideStringt4, @Comobj@EOleException@, @Uxtheme@initialization$qqrv, @Uxtheme@Finalization$qqrv, @Multimon@initialization$qqrv, @Multimon@Finalization$qqrv, @Dwmapi@initialization$qqrv, @Dwmapi@Finalization$qqrv, @Helpintfs@initialization$qqrv, @Helpintfs@Finalization$qqrv, @Flatsb@initialization$qqrv, @Flatsb@Finalization$qqrv
shell32.dll
Shell_NotifyIconA, SHGetFileInfoA, SHGetPathFromIDListA, SHGetDesktopFolder
sysaccess.dll
GetSDWrapper
user32.dll
WaitForInputIdle, UnregisterClassA, TranslateMessage, SystemParametersInfoA, ShowWindow, ShowOwnedPopups, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetPropA, SetParent, SetForegroundWindow, SetClassLongA, SendMessageTimeoutA, SendMessageCallbackA, SendMessageW, SendMessageA, RemovePropA, RegisterClassA, PostThreadMessageA, PostMessageA, OffsetRect, MsgWaitForMultipleObjects, IsZoomed, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsIconic, GetWindowThreadProcessId, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetTopWindow, GetSystemMetrics, GetPropA, GetParent, GetWindow, GetMessageA, GetMenu, GetForegroundWindow, GetClientRect, GetClassNameA, GetClassLongA, GetClassInfoA, FindWindowExA, FindWindowA, EnumWindows, EnumThreadWindows, EnableWindow, DispatchMessageA, DestroyWindow, DestroyIcon, ChildWindowFromPointEx, CharUpperBuffW, CharUpperW, CharNextW, CharLowerBuffW, CharLowerW, AttachThreadInput, CharLowerA, CharUpperA, AdjustWindowRectEx
vcl100.bpl
@Buttons@initialization$qqrv, @Buttons@Finalization$qqrv, @Menus@initialization$qqrv, @Menus@Finalization$qqrv, @Actnlist@initialization$qqrv, @Actnlist@Finalization$qqrv, @Graphics@initialization$qqrv, @Graphics@Finalization$qqrv, @Themes@initialization$qqrv, @Themes@Finalization$qqrv, @Controls@initialization$qqrv, @Controls@Finalization$qqrv, @Forms@initialization$qqrv, @Forms@Finalization$qqrv, @Dialogs@initialization$qqrv, @Dialogs@Finalization$qqrv, @Printers@initialization$qqrv, @Printers@Finalization$qqrv, @Extctrls@initialization$qqrv, @Extctrls@Finalization$qqrv, @Graphutil@initialization$qqrv, @Graphutil@Finalization$qqrv, @Clipbrd@initialization$qqrv, @Clipbrd@Finalization$qqrv
version.dll
VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
Export table
GetStartupHelper
Resolve
ResolveCmdLineToFile
ResolveCmdLineToFileEx
SetOptionsSH

sh.dll

By PC Tools (Signed)

Remove sh.dll
Version:   7.0.0.34
MD5:   b9823e6792a469b47c7e358041ad0f00
SHA1:   5456219c7c944cf4b5f588dd604c4b95a7c1655d
SHA256:   a2ae0e041aa933362e4e65b67dfe14f0e28bb6119aaff590b6d2cc4b0408f343

Overview

sh.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Spyware Doctor 8.0 published by PC Tools Software, Spyware Doctor with AntiVirus 8.0 from PC Tools Software and Spyware Doctor with AntiVirus 8.0 by PC Tools Software. The file is digitally signed by PC Tools which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:sh.dll
Publisher:PC Tools
Typical file path:C:\Program Files\spyware doctor\sh.dll
File version:7.0.0.34
Product version:7.0
Size:397.96 KB (407,512 bytes)
Certificate
Issued to:PC Tools
Authority (CA):VeriSign
Effective date:Thursday, July 9, 2009
Expiration date:Wednesday, August 15, 2012
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
PC Tools Software
8% remove
Behavior Guard, built on ThreatFire?s patent-pending ActiveDefense technology, intelligently scans and analyzes computer processes to accurately detect and block any malicious activity when you simply add the plug-in. Spyware Doctor is a spyware remover and provides real-time protection against spyware, adware, Trojan horses, keyloggers, spyware cookies, adbots, spybots, browser hijackers, and phishing attacks. Spyware Doctor is easy to...
PC Tools Software
4% remove
As part of Symantec's commitment to your online protection, we are streamlining our product range to offer you fewer, better solutions.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 33.33%
Windows 7 Professional 33.33%
Windows 7 Enterprise 33.33%

Distribution by countryDistribution by country

United States installs about 100.00% of sh.dll.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE