Should I block it?
60% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
Relationships
Parent process
Related files
AdvancedSystemProtector.exe
Advanced System Protector by Systweak Inc (Signed)
| Version: | 2.1.1000.9885 |
| MD5: | 578f95358ee3bb14cf55fbdb5a84f765 |
| SHA1: | 597d391149a9aac9fd404fd75f13f4bba514a4d4 |
| SHA256: | 6dbc4612076e4ce11b127b5400c7031284ca76fc7ab5b698e826fb6a410be6ee |
What is AdvancedSystemProtector.exe?
advancedsystemprotector.exe is the core UI and partial engine of Advanced System Protector, an antivirus product. Advanced System Protector is a software application designed to find and remove malware infections and also provides protection shields against virus and spyware threats.
About AdvancedSystemProtector.exe (from Systweak Inc)
“Advanced System Protector is an effective solution to find and remove malware infections present on your PC. It also provides protection shields against malware threats.”
Overview
advancedsystemprotector.exe executes as a process with the local user's privileges typically within the context of its parent
pokki.exe (Pokki by Pokki). It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program Advanced System Protector published by Systweak Inc. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Systweak Inc which was issued by the VeriSign certificate authority (CA).
Details
| File name: | advancedsystemprotector.exe |
| Publisher: | Systweak |
| Product name: | Advanced System Protector |
| Typical file path: | C:\Program Files\advanced system protector\advancedsystemprotector.exe |
| File version: | 2.1.1000.9885 |
| Size: | 6 MB (6,294,440 bytes) |
| Certificate |
| Issued to: | Systweak Inc |
| Authority (CA): | VeriSign |
| Expiration date: | Sunday, March 10, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following program will install this file
“Advanced System Protector is a solution to detect and remove the malicious programs intruding your computer. It offers protection against deceptive applications that affect start-up programs, cookies, Registry entries, and files and folders to hide themselves in your system. Check for infections in all vulnerable areas and safeguard your hard work and personal data. With the vast database of malware detections you can efficiently contro...”
Behaviors
Scheduled tasks
- The job 'Advanced System Protector_startup' runs on logon in the path '\Advanced System Protector_startup'
- Entry path '\Advanced System Protector_startup'
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Advanced System Protector' → "C:\Program Files\Advanced System Protector\advancedsystemprotector.exe" autolaunch
- 'Advanced System Protector_startup' → "C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe" autolaunch
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\Advanced System Protector_startup'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Advanced System Protector' → "C:\Program Files\Advanced System Protector\advancedsystemprotector.exe" autolaunch
Network connections
[UDP] listens on port 52037
[UDP] listens on port 52203
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.02092847% | |
| Kernel CPU: | 0.01179075% | |
| User CPU: | 0.00913772% | |
| Kernel CPU time: | 29,718 ms/min | |
| Context switches: | 12/sec | |
| Memory |
| Private memory: | 88.28 MB | |
| Private (maximum): | 9.33 MB | |
| Private (minimum): | 4.43 MB | |
| Non-paged memory: | 88.28 MB | |
| Virtual memory: | 361.92 MB | |
| Virtual memory (peak): | 524.1 MB | |
| Working set: | 9.81 MB | |
| Working set (peak): | 223.47 MB | |
| Resource allocations |
| Threads: | 20 | |
| Handles: | 802 | |
| GUI GDI count: | 354 | |
| GUI GDI peak: | 378 | |
| GUI USER count: | 100 | |
| GUI USER peak: | 129 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\advanced system protector\advancedsystemprotector.exe" -silentscan |
| Owner: | User |
| Parent process: | pokki.exe (Pokki by Pokki) |
Threads
Averages
| AdvancedSystemProtector.exe (main module) |
| Total CPU: | 0.16420585% | |
| Kernel CPU: | 0.05962849% | |
| User CPU: | 0.10457736% | |
| CPU cycles: | 7,158,002/sec | |
| Context switches: | 6/sec | |
| Memory: | 6.02 MB | |
| sendori.dll (Sendori.dll by Sendori) |
| Total CPU: | 0.00783074% | |
| Kernel CPU: | 0.00535787% | |
| User CPU: | 0.00247287% | |
| CPU cycles: | 383,668/sec | |
| Memory: | 312 KB | |
| mscorwks.dll |
| Total CPU: | 0.00391372% | |
| Kernel CPU: | 0.00115002% | |
| User CPU: | 0.00276370% | |
| CPU cycles: | 109,306/sec | |
| Memory: | 5.67 MB | |
| ole32.dll |
| Total CPU: | 0.00302384% | |
| Kernel CPU: | 0.00222960% | |
| User CPU: | 0.00079424% | |
| CPU cycles: | 59,326/sec | |
| Memory: | 1.36 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
25.00% |
|
| Windows 7 Home Premium |
25.00% |
|
| Windows 7 Ultimate N |
18.75% |
|
| Windows 7 Professional |
12.50% |
|
| Windows 7 Ultimate |
6.25% |
|
| Windows Vista Home Premium |
6.25% |
|
| Windows 8 Pro |
6.25% |
|
Distribution by country
Japan installs about 16.00% of Advanced System Protector.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
44.44% |
|
| Acer |
22.22% |
|
| Samsung |
22.22% |
|
| Hewlett-Packard |
11.11% |
|
