Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.0.1497.376 11.80%
8.0.1489.300 20.00%
8.0.1488.286 0.16%
8.0.1483.72 7.54%
8.0.1482.45 3.93%
7.0.1474.765 45.08%
7.0.1473.755 1.15%
7.0.1466.549 5.41%
7.0.1456.418 0.82%
7.0.1455.186 0.16%
7.0.1451.402 0.16%
7.0.1426.0 2.13%
7.0.1407.0 0.49%
6.0.1367.0 0.49%
6.0.1125.0 0.16%
6, 0, 999, 0 0.49%

Relationships

Parent processes
Child process
Related files

PE structurePE file structure

Show functions
Import table
aavmrpch.dll
AavmRpcRunSystemComponent, AavmRpcCreateBinding, AavmRpcDestroyBinding, AavmRpcRunComponent
advapi32.dll
CloseServiceHandle, RegQueryValueExA, IsTextUnicode, AllocateAndInitializeSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, OpenThreadToken, EqualSid, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegOpenKeyW, RegEnumValueW, OpenServiceW, OpenSCManagerW, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, RegOpenKeyExA, RegSetValueExW, RegDeleteValueW
ashbase.dll
_basShouldSubmit@4, _basGetLanguage@4, _basGetErrorString@12, _basWriteProfileString@12, _basIsComponentInstalled@4, _basFullscreenAppRunning@0, _basGetRegistrationInfo@20, _basGetCurrentProductLicenseInfo@28, _basInitLibrary@4, _basFriendlyShieldName@12, _basGetBaseLang@0, _basFreeLibrary@0, _basA2U@16, _basGetLockData@12, _basGetProductLicenseInfo@32, _basGetLicenseFile@8, _basProductInfo@0, _basGetProfileInt@12, _basDoFitFileName@12, _strDecode@12, _strEncode@12, _basValidatePath@8, _basCreatePath@16, _basEnableWriteAccessToEveryone@4, _CallOnSecureDesktop@12, _basFormatNumber@16, _notEvent@4, _basResPwdCheck@4, _basGetComputerName@0, _notRemEvent@4, _notFree@0, _basCheck@0, _notInit@0, _notAddEvent@12, _basInitThreadLocale@0, _basGetProfileString@20, _basDeleteValue@8, _basStoreDWORDValue@12, _basSendAutoRegInfo@8, _notAddEventId@16, _notEventId@8, _basGetLicenseFileCommon@12
ashtask.dll
_tskInitLibrary@8, _tskFreeLibrary@0, _tskFreeData@4, _tskExecData@16, _tskAddArea@8
aswcmnbs.dll
fsGetAvastDataPath, fsGetAvastLogPath, fsGetAvastSumpPath, secPreventHookDllInjection, secCreateSharedEvent, secOpenSharedEvent, iniGetPrivateProfileString, fsGetAvastProgramPath, secCreateSharedMutex, fsGetAvastTempFileName, iniGetPrivateProfileInt, iniWritePrivateProfileInt, iniWritePrivateProfileString, cmnbFree, cmnbInit
aswcmnis.dll
cyphSimpleCode, inflateInit_, inflate, inflateEnd, deflateEnd, deflate, inflateReset, deflateReset, deflateInit2_, crcGenerate32c, mdaGenerate
aswcmnos.dll
dep_osIsWow64, dep_fsGetFileSizeHandle, dep_fsReadFile, dep_fsCloseFile, dep_osIsWinVistaOrBetter, dep_osIsWinXPOrBetter, dep_osIsWin64, dep_secGetPublicSecurity, dep_fsEnableWow64FsRedirection, dep_fsWriteFile, dep_fsExistFile, dep_fsRemoveFolderRecursive, dep_fsDeleteFileX, dep_fsOpenFileX, dep_osIsWin8OrBetter, dep_fsCopyFile, dep_procGetFileName
aswlog.dll
logDebugA, _logFree@0, _logInit@8
aswproperty.dll
aswGetPropertyInt, aswGetProperty, aswPropertyFreeLibrary, aswGetAvastPropertyInt, aswPropertyInitLibrary, aswGetIntFromCache, aswGetStrFromCache, aswSetAvastProperty, aswGetAvastProperty, aswSetPropertyInt, aswSetProperty
comctl32.dll
_TrackMouseEvent, ImageList_Draw, ImageList_GetImageInfo, ImageList_DrawEx, ImageList_GetIconSize
comdlg32.dll
GetOpenFileNameW
crypt32.dll
CertCreateCertificateContext, CertFreeCertificateContext
cryptui.dll
CryptUIDlgViewCertificateW
dnsapi.dll
DnsRecordListFree, DnsQuery_W, DnsQuery_A
gdi32.dll
SetWindowOrgEx, SetLayout, BitBlt, SetViewportOrgEx, GetTextMetricsA, SetWindowExtEx, GetWindowExtEx, SetTextColor, DeleteDC, SetBkColor, GetObjectW, LPtoDP, ExcludeClipRect, CreateCompatibleDC, CreateRectRgnIndirect, DPtoLP, CombineRgn, SetMapMode, CreateCompatibleBitmap, GetMapMode, SaveDC, GetClipBox, SetViewportExtEx, GetViewportExtEx, GetObjectA, GetStockObject, RestoreDC, CreateSolidBrush, DeleteObject, CreateRoundRectRgn, SelectObject, GetDeviceCaps, SetTextAlign, GetTextAlign, GetTextExtentPointW, TextOutA, TextOutW, GetPixel, IntersectClipRect, RectVisible, CreatePen, CreatePatternBrush, GetTextExtentExPointW, Rectangle, SetBkMode, CreateBitmap, SetPixel, Polygon, GetCurrentPositionEx, ExtCreatePen, Polyline, PtVisible, ExtTextOutW, Escape, CreateFontIndirectW, GetCurrentObject, SetBrushOrgEx, CreateDIBPatternBrushPt, CreateDIBSection, StretchBlt, GetDIBits, StretchDIBits, SetStretchBltMode, CreateFontA, EnumFontFamiliesExA, AddFontMemResourceEx, EnumFontFamiliesExW, GetWindowOrgEx, CreateHatchBrush, GetTextExtentPoint32A, GetTextExtentPoint32W, PatBlt, GetDeviceGammaRamp, SetDeviceGammaRamp, GetKerningPairsA, GetGlyphOutlineW, AddFontResourceExW
kernel32.dll
GetLocaleInfoA, TlsGetValue, GetCurrentProcess, QueryPerformanceCounter, QueryPerformanceFrequency, InterlockedIncrement, DeleteCriticalSection, FreeLibrary, GetProcAddress, LoadLibraryA, GetSystemDirectoryA, GetLocaleInfoW, IsBadReadPtr, MulDiv, FlushFileBuffers, SetEvent, GetProcessHeap, TlsSetValue, GetExitCodeProcess, CallNamedPipeW, CreateProcessW, HeapFree, WriteFile, ReadFile, ConnectNamedPipe, TerminateThread, WaitForSingleObject, ExitThread, GetPrivateProfileStringW, GetSystemTime, LocalFree, CreateDirectoryW, LocalAlloc, GetUserDefaultLCID, VirtualFree, ExpandEnvironmentStringsA, Process32NextW, Process32FirstW, LCMapStringW, FindResourceExW, LocalUnlock, CreateFileMappingA, FlushViewOfFile, SetEndOfFile, UnmapViewOfFile, MapViewOfFile, GetThreadLocale, GetVersionExA, GlobalAlloc, SetThreadLocale, GetCPInfo, GetCurrencyFormatW, DeleteFileA, MoveFileA, SetLastError, GetShortPathNameA, CreateEventA, VirtualAlloc, GetVersionExW, DeviceIoControl, CreateFileW, GetDiskFreeSpaceExW, GetVolumeInformationW, GetDriveTypeW, GetLogicalDrives, Sleep, GetLastError, FileTimeToLocalFileTime, FileTimeToSystemTime, GetTimeFormatW, GetDateFormatW, CreateThread, CloseHandle, InitializeCriticalSection, GetACP, EnterCriticalSection, LeaveCriticalSection, WideCharToMultiByte, MultiByteToWideChar, GetTickCount, DeleteFileW, GetTempFileNameW, GetTempPathW, HeapAlloc, WaitForMultipleObjects, InterlockedExchange, InitializeCriticalSectionAndSpinCount, LoadLibraryW, OpenEventW, TerminateProcess, ExitProcess, GetPrivateProfileIntW, GetModuleFileNameW, ExpandEnvironmentStringsW, GetCurrentThreadId, GetCommandLineW, GetCurrentProcessId, CopyFileW, GlobalLock, GlobalUnlock, SetThreadPriority, GetSystemInfo, WaitNamedPipeW, LoadLibraryExW, GetShortPathNameW, FindFirstFileW, FindNextFileW, FindClose, GetSystemDirectoryW, GetWindowsDirectoryW, CreateEventW, GetNumberFormatW, GetFileAttributesW, GetLocalTime, SetFilePointer, GetFileSize, SystemTimeToFileTime, GetSystemTimeAsFileTime, InterlockedDecrement, DisconnectNamedPipe, GetUserDefaultLangID, CreateIoCompletionPort, CreateNamedPipeW, GetQueuedCompletionStatus, GetTempFileNameA, TlsAlloc, GetTempPathA, FindResourceA, FindResourceW, LoadResource, SizeofResource, LockResource, GetModuleHandleW, GetStringTypeA, GetStringTypeW, ReleaseMutex, lstrcmpiW, lstrcmpW, GetExitCodeThread, CreateToolhelp32Snapshot, OutputDebugStringW, OpenProcess, GetCurrentThread, RaiseException, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, IsDebuggerPresent, SetProcessWorkingSetSize, DllMain, GetVersion, CreateMutexW, MoveFileExW, ResumeThread, WritePrivateProfileStringW
mfc90u.dll
DllMain
msimg32.dll
GradientFill
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoCreateGuid, CoTaskMemFree, StringFromCLSID, CoInitialize, CoCreateInstance, CoUninitialize, StringFromGUID2, CoInitializeEx, CLSIDFromString
oleacc.dll
CreateStdAccessibleObject, AccessibleObjectFromWindow, LresultFromObject
psapi.dll
GetModuleFileNameExW, EnumProcessModules, EnumProcesses
rpcrt4.dll
RpcBindingFromStringBindingW, RpcStringFreeW, RpcBindingFree, RpcStringBindingComposeW, UuidCreate, NdrConformantArrayMarshall, RpcRaiseException, NdrClientInitializeNew, NdrConformantArrayBufferSize, NdrFreeBuffer, NdrGetBuffer, NdrConformantStringBufferSize, NdrConformantArrayUnmarshall, NdrSendReceive, NdrConvert, NdrConformantStringMarshall, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, I_RpcGetBuffer, NdrAllocate, NdrServerInitializeNew, NdrConformantStringUnmarshall, NdrPointerFree, RpcAsyncInitializeHandle, RpcBindingSetAuthInfoExA, RpcAsyncCancelCall, RpcBindingFromStringBindingA, RpcStringBindingComposeA, RpcAsyncCompleteCall, NdrAsyncClientCall, NdrClientCall2, RpcStringFreeA
shell32.dll
SHGetPathFromIDListW, SHGetFileInfoW, SHChangeNotify, SHGetDesktopFolder, SHGetMalloc, SHGetSpecialFolderLocation, Shell_NotifyIconW, SHBrowseForFolderW, ShellExecuteW, ShellExecuteExW, SHGetFolderPathW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathCompactPathW, ColorHLSToRGB, ColorRGBToHLS, PathIsDirectoryW, UrlCombineA
urlmon.dll
FindMimeFromData
user32.dll
DllMain
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winhttp.dll
WinHttpSetOption, WinHttpSendRequest, WinHttpConnect, WinHttpCloseHandle, WinHttpSetTimeouts, WinHttpOpen, WinHttpOpenRequest, WinHttpReadData, WinHttpReceiveResponse, WinHttpQueryOption, WinHttpQueryHeaders
wininet.dll
InternetReadFile, InternetCombineUrlA, HttpOpenRequestA, InternetGetLastResponseInfoA, InternetOpenA, InternetCloseHandle, InternetQueryOptionA, InternetConnectA, HttpQueryInfoA, HttpSendRequestA, InternetCrackUrlW, InternetSetOptionA, InternetCanonicalizeUrlW, InternetSetOptionW, InternetConnectW, HttpOpenRequestW, HttpSendRequestW, InternetOpenW
winmm.dll
timeSetEvent, timeKillEvent, timeGetTime, timeGetDevCaps, PlaySoundA

AvastUi.exe

avast! Antivirus by AVAST Software (Signed)

Remove AvastUi.exe
Version:   8.0.1483.72
MD5:   148c545849c1379a3d4448f5de768e86
SHA1:   0c6c4ed057319c92d4cb3589068e7b15e37dd582
SHA256:   0b87c4c0c422f16cb425151e4d6f57604fe5100e4eaa84cc3b4579be1c661969

What is AvastUi.exe?

avast! Antivirus is a full-featured antivirus and anti-spyware scanning and removal product. Avast offers a web-reputation browser extension as well as virtualization technology. Accurate threat updates via avast updates are delivered automatically using PUSH update technology in Avast! Antivirus.

About AvastUi.exe (from AVAST Software)

Free antivirus with anti-spyware protection for Windows. AVAST Software leads the security software industry – protecting 160 million PCs, Macs and Mobiles around the globe – by distributing FREE anti

DetailsDetails

File name:avastui.exe
Publisher:AVAST Software
Product name:avast! Antivirus
Typical file path:C:\Program Files\avast software\avast\avastui.exe
File version:8.0.1483.72
Size:4.55 MB (4,767,304 bytes)
Certificate
Issued to:AVAST Software
Authority (CA):VeriSign
Expiration date:Friday, January 31, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
AVAST Software
9% remove
Avast! Free Antivirus is a full-featured antivirus and anti-spyware scanning and removal product that offers a web-reputation browser extension as well as virtualization technology. Accurate threat updates via Avast updates are delivered automatically using PUSH update technology.

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'avast5' → C:\Program Files1\ALWILS~1\Avast5\avastUI.exe /nogui
  • 'avast' → "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
Scheduled tasks
  • Entry path '\{BE644B67-0FC9-4E09-8921-3C92C4187F59}'
  • Entry path '\{A2010245-7908-40CE-A115-79DFB422FB5C}'
  • Entry path '\{83E22DC4-C629-429D-A5B9-3DBF2B43476D}'
  • Entry path '\{59B20A91-C364-4477-841A-79D826383F80}'
  • Entry path '\{D9C949DF-1FF9-49D3-92E4-FF09ADEE4B9E}'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\AVAST Software\Avast\AvastUI.exe'
  • Firewall exception for 'C:\Programmer\Alwil Software\Avast5\AvastUI.exe'
Network connections
Access through an approved Windows firewall exception
  • [TCP] yyz08s13-in-f7.1e100.net (74.125.226.103:80)
  • [TCP] cache.google.com (62.65.192.240:80)
  • [TCP] ye-in-f101.1e100.net (74.125.140.101:80)
  • [TCP] sea09s01-in-f8.1e100.net (173.194.33.8:80)
  • [TCP] ord08s08-in-f2.1e100.net (74.125.225.98:80)
  • [TCP] sea09s01-in-f1.1e100.net (173.194.33.1:80)
  • [TCP] mil02s06-in-f8.1e100.net (173.194.40.8:80)
  • [TCP] ni-in-f101.1e100.net (74.125.135.101:80)
  • [TCP] a69-192-254-13.deploy.akamaitechnologies.com (69.192.254.13:80)
  • [TCP] a23-59-110-13.deploy.akamaitechnologies.com (23.59.110.13:80)
  • [TCP] hg-in-f138.1e100.net (74.125.128.138:80)
  • [TCP] ni-in-f100.1e100.net (74.125.135.100:80)
  • [TCP] mia04s05-in-f6.1e100.net (74.125.229.198:80)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00805474%
    0.028634%
    Kernel CPU:0.00331972%
    0.013761%
    User CPU:0.00473502%
    0.014873%
    Kernel CPU time:1,298,882 ms/min
    100,923,805ms/min
    CPU cycles:1,133,309/sec
    17,470,203/sec
    Context switches:29/sec
    284/sec
    Memory
    Private memory:15.05 MB
    21.59 MB
    Private (maximum):15.13 MB
    Private (minimum):4.63 MB
    Non-paged memory:15.05 MB
    21.59 MB
    Virtual memory:149.34 MB
    140.96 MB
    Virtual memory (peak):170.33 MB
    169.69 MB
    Working set:10.61 MB
    18.61 MB
    Working set (peak):21.31 MB
    37.95 MB
    Page faults:83,499/min
    2,039/min
    I/O
    I/O read transfer:12.33 KB/sec
    1.02 MB/min
    I/O read operations:7/sec
    343/min
    I/O write transfer:12 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:3.08 KB/sec
    448.09 KB/min
    I/O other operations:163/sec
    1,671/min
    Resource allocations
    Threads:22
    12
    Handles:365
    600
    GUI GDI count:193
    103
    GUI GDI peak:254
    142
    GUI USER count:42
    49
    GUI USER peak:50
    71

    BehaviorsProcess properties

    Tray notification:Yes
    Integrety level:Medium
    Platform:32-bit
    Command lines:
    • "C:\Program Files\avast software\avast\avastui.exe" /nogui
    • "C:\Program Files\alwil software\avast5\avastui.exe" /nogui
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    AvastUI.exe (main module)
    Total CPU:0.02761010%
    0.272967%
    Kernel CPU:0.01020607%
    0.107585%
    User CPU:0.01740403%
    0.165382%
    CPU cycles:366,136/sec
    5,741,424/sec
    Context switches:4/sec
    79/sec
    Memory:4.54 MB
    1.16 MB
    ntdll.dll
    Total CPU:0.00508962%
    Kernel CPU:0.00001229%
    User CPU:0.00507733%
    CPU cycles:321,509/sec
    Context switches:1/sec
    Memory:1.66 MB
    wow64win.dll
    Total CPU:0.00149425%
    Kernel CPU:0.00149425%
    User CPU:0.00000000%
    CPU cycles:2,760/sec
    Memory:360 KB
    aavm4h.dll (avast! Antivirus by AVAST Software)
    Total CPU:0.00073537%
    Kernel CPU:0.00059861%
    User CPU:0.00013676%
    CPU cycles:102,049/sec
    Context switches:1/sec
    Memory:780 KB
    WINMM.dll
    Total CPU:0.00038759%
    Kernel CPU:0.00004845%
    User CPU:0.00033914%
    Memory:180 KB
    wow64cpu.dll
    Total CPU:0.00019086%
    Kernel CPU:0.00012862%
    User CPU:0.00006224%
    CPU cycles:10,724/sec
    Memory:32 KB
    MSVCR90.dll
    Total CPU:0.00018945%
    Kernel CPU:0.00005884%
    User CPU:0.00013061%
    CPU cycles:7,193/sec
    Memory:652 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 29.00%
    Windows 7 Ultimate 23.50%
    Microsoft Windows XP 17.00%
    Windows 7 Professional 10.00%
    Windows Vista Home Premium 5.50%
    Windows 8 4.00%
    Windows 8 Pro 3.00%
    Windows Vista Home Basic 2.00%
    Windows 7 Home Basic 2.00%
    Windows Vista Business 1.00%
    Windows 7 Enterprise 1.00%
    Windows Seven Black Edition 1.00%
    Windows 7 Starter 1.00%

    Distribution by countryDistribution by country

    United States installs about 31.66% of avast! Antivirus.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 21.29%
    Toshiba 15.97%
    Hewlett-Packard 13.69%
    Acer 12.93%
    ASUS 10.65%
    Intel 7.60%
    Lenovo 4.56%
    Samsung 3.80%
    American Megatrends 2.28%
    GIGABYTE 1.90%
    Sony 1.52%
    MSI 1.52%
    Medion 1.52%
    Packard Bell 0.76%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE