Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.0.1497.376 11.80%
8.0.1489.300 20.00%
8.0.1488.286 0.16%
8.0.1483.72 7.54%
8.0.1482.45 3.93%
7.0.1474.765 45.08%
7.0.1473.755 1.15%
7.0.1466.549 5.41%
7.0.1456.418 0.82%
7.0.1455.186 0.16%
7.0.1451.402 0.16%
7.0.1426.0 2.13%
7.0.1407.0 0.49%
6.0.1367.0 0.49%
6.0.1125.0 0.16%
6, 0, 999, 0 0.49%

Relationships


PE structurePE file structure

Show functions
Import table
aavmrpch.dll
AavmRpcRunSystemComponent, AavmRpcCreateBinding, AavmRpcDestroyBinding, AavmRpcRunComponent
advapi32.dll
CloseServiceHandle, RegQueryValueExA, IsTextUnicode, AllocateAndInitializeSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, OpenThreadToken, EqualSid, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegOpenKeyW, RegEnumValueW, OpenServiceW, OpenSCManagerW, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, RegOpenKeyExA, RegSetValueExW, RegDeleteValueW
ashbase.dll
_basShouldSubmit@4, _basGetLanguage@4, _basGetErrorString@12, _basWriteProfileString@12, _basIsComponentInstalled@4, _basFullscreenAppRunning@0, _basGetRegistrationInfo@20, _basGetCurrentProductLicenseInfo@28, _basInitLibrary@4, _basFriendlyShieldName@12, _basGetBaseLang@0, _basFreeLibrary@0, _basA2U@16, _basGetLockData@12, _basGetProductLicenseInfo@32, _basGetLicenseFile@8, _basProductInfo@0, _basGetProfileInt@12, _basDoFitFileName@12, _strDecode@12, _strEncode@12, _basValidatePath@8, _basCreatePath@16, _basEnableWriteAccessToEveryone@4, _CallOnSecureDesktop@12, _basFormatNumber@16, _notEvent@4, _basResPwdCheck@4, _basGetComputerName@0, _notRemEvent@4, _notFree@0, _basCheck@0, _notInit@0, _notAddEvent@12, _basInitThreadLocale@0, _basGetProfileString@20, _basDeleteValue@8, _basStoreDWORDValue@12, _basSendAutoRegInfo@8, _notAddEventId@16, _notEventId@8, _basGetLicenseFileCommon@12
ashtask.dll
_tskInitLibrary@8, _tskFreeLibrary@0, _tskFreeData@4, _tskExecData@16, _tskAddArea@8
aswcmnbs.dll
fsGetAvastDataPath, fsGetAvastLogPath, fsGetAvastSumpPath, secPreventHookDllInjection, secCreateSharedEvent, secOpenSharedEvent, iniGetPrivateProfileString, fsGetAvastProgramPath, secCreateSharedMutex, fsGetAvastTempFileName, iniGetPrivateProfileInt, iniWritePrivateProfileInt, iniWritePrivateProfileString, cmnbFree, cmnbInit
aswcmnis.dll
cyphSimpleCode, inflateInit_, inflate, inflateEnd, deflateEnd, deflate, inflateReset, deflateReset, deflateInit2_, crcGenerate32c, mdaGenerate
aswcmnos.dll
dep_osIsWow64, dep_fsGetFileSizeHandle, dep_fsReadFile, dep_fsCloseFile, dep_osIsWinVistaOrBetter, dep_osIsWinXPOrBetter, dep_osIsWin64, dep_secGetPublicSecurity, dep_fsEnableWow64FsRedirection, dep_fsWriteFile, dep_fsExistFile, dep_fsRemoveFolderRecursive, dep_fsDeleteFileX, dep_fsOpenFileX, dep_osIsWin8OrBetter, dep_fsCopyFile, dep_procGetFileName
aswlog.dll
logDebugA, _logFree@0, _logInit@8
aswproperty.dll
aswGetPropertyInt, aswGetProperty, aswPropertyFreeLibrary, aswGetAvastPropertyInt, aswPropertyInitLibrary, aswGetIntFromCache, aswGetStrFromCache, aswSetAvastProperty, aswGetAvastProperty, aswSetPropertyInt, aswSetProperty
comctl32.dll
_TrackMouseEvent, ImageList_Draw, ImageList_GetImageInfo, ImageList_DrawEx, ImageList_GetIconSize
comdlg32.dll
GetOpenFileNameW
crypt32.dll
CertCreateCertificateContext, CertFreeCertificateContext
cryptui.dll
CryptUIDlgViewCertificateW
dnsapi.dll
DnsRecordListFree, DnsQuery_W, DnsQuery_A
gdi32.dll
SetWindowOrgEx, SetLayout, BitBlt, SetViewportOrgEx, GetTextMetricsA, SetWindowExtEx, GetWindowExtEx, SetTextColor, DeleteDC, SetBkColor, GetObjectW, LPtoDP, ExcludeClipRect, CreateCompatibleDC, CreateRectRgnIndirect, DPtoLP, CombineRgn, SetMapMode, CreateCompatibleBitmap, GetMapMode, SaveDC, GetClipBox, SetViewportExtEx, GetViewportExtEx, GetObjectA, GetStockObject, RestoreDC, CreateSolidBrush, DeleteObject, CreateRoundRectRgn, SelectObject, GetDeviceCaps, SetTextAlign, GetTextAlign, GetTextExtentPointW, TextOutA, TextOutW, GetPixel, IntersectClipRect, RectVisible, CreatePen, CreatePatternBrush, GetTextExtentExPointW, Rectangle, SetBkMode, CreateBitmap, SetPixel, Polygon, GetCurrentPositionEx, ExtCreatePen, Polyline, PtVisible, ExtTextOutW, Escape, CreateFontIndirectW, GetCurrentObject, SetBrushOrgEx, CreateDIBPatternBrushPt, CreateDIBSection, StretchBlt, GetDIBits, StretchDIBits, SetStretchBltMode, CreateFontA, EnumFontFamiliesExA, AddFontMemResourceEx, EnumFontFamiliesExW, GetWindowOrgEx, CreateHatchBrush, GetTextExtentPoint32A, GetTextExtentPoint32W, PatBlt, GetDeviceGammaRamp, SetDeviceGammaRamp, GetKerningPairsA, GetGlyphOutlineW, AddFontResourceExW
kernel32.dll
GetLocaleInfoA, TlsGetValue, GetCurrentProcess, QueryPerformanceCounter, QueryPerformanceFrequency, InterlockedIncrement, DeleteCriticalSection, FreeLibrary, GetProcAddress, LoadLibraryA, GetSystemDirectoryA, GetLocaleInfoW, IsBadReadPtr, MulDiv, FlushFileBuffers, SetEvent, GetProcessHeap, TlsSetValue, GetExitCodeProcess, CallNamedPipeW, CreateProcessW, HeapFree, WriteFile, ReadFile, ConnectNamedPipe, TerminateThread, WaitForSingleObject, ExitThread, GetPrivateProfileStringW, GetSystemTime, LocalFree, CreateDirectoryW, LocalAlloc, GetUserDefaultLCID, VirtualFree, ExpandEnvironmentStringsA, Process32NextW, Process32FirstW, LCMapStringW, FindResourceExW, LocalUnlock, CreateFileMappingA, FlushViewOfFile, SetEndOfFile, UnmapViewOfFile, MapViewOfFile, GetThreadLocale, GetVersionExA, GlobalAlloc, SetThreadLocale, GetCPInfo, GetCurrencyFormatW, DeleteFileA, MoveFileA, SetLastError, GetShortPathNameA, CreateEventA, VirtualAlloc, GetVersionExW, DeviceIoControl, CreateFileW, GetDiskFreeSpaceExW, GetVolumeInformationW, GetDriveTypeW, GetLogicalDrives, Sleep, GetLastError, FileTimeToLocalFileTime, FileTimeToSystemTime, GetTimeFormatW, GetDateFormatW, CreateThread, CloseHandle, InitializeCriticalSection, GetACP, EnterCriticalSection, LeaveCriticalSection, WideCharToMultiByte, MultiByteToWideChar, GetTickCount, DeleteFileW, GetTempFileNameW, GetTempPathW, HeapAlloc, WaitForMultipleObjects, InterlockedExchange, InitializeCriticalSectionAndSpinCount, LoadLibraryW, OpenEventW, TerminateProcess, ExitProcess, GetPrivateProfileIntW, GetModuleFileNameW, ExpandEnvironmentStringsW, GetCurrentThreadId, GetCommandLineW, GetCurrentProcessId, CopyFileW, GlobalLock, GlobalUnlock, SetThreadPriority, GetSystemInfo, WaitNamedPipeW, LoadLibraryExW, GetShortPathNameW, FindFirstFileW, FindNextFileW, FindClose, GetSystemDirectoryW, GetWindowsDirectoryW, CreateEventW, GetNumberFormatW, GetFileAttributesW, GetLocalTime, SetFilePointer, GetFileSize, SystemTimeToFileTime, GetSystemTimeAsFileTime, InterlockedDecrement, DisconnectNamedPipe, GetUserDefaultLangID, CreateIoCompletionPort, CreateNamedPipeW, GetQueuedCompletionStatus, GetTempFileNameA, TlsAlloc, GetTempPathA, FindResourceA, FindResourceW, LoadResource, SizeofResource, LockResource, GetModuleHandleW, GetStringTypeA, GetStringTypeW, ReleaseMutex, lstrcmpiW, lstrcmpW, GetExitCodeThread, CreateToolhelp32Snapshot, OutputDebugStringW, OpenProcess, GetCurrentThread, RaiseException, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, IsDebuggerPresent, SetProcessWorkingSetSize, DllMain, GetVersion, CreateMutexW, MoveFileExW, ResumeThread, WritePrivateProfileStringW
mfc90u.dll
DllMain
msimg32.dll
GradientFill
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoCreateGuid, CoTaskMemFree, StringFromCLSID, CoInitialize, CoCreateInstance, CoUninitialize, StringFromGUID2, CoInitializeEx, CLSIDFromString
oleacc.dll
CreateStdAccessibleObject, AccessibleObjectFromWindow, LresultFromObject
psapi.dll
GetModuleFileNameExW, EnumProcessModules, EnumProcesses
rpcrt4.dll
RpcBindingFromStringBindingW, RpcStringFreeW, RpcBindingFree, RpcStringBindingComposeW, UuidCreate, NdrConformantArrayMarshall, RpcRaiseException, NdrClientInitializeNew, NdrConformantArrayBufferSize, NdrFreeBuffer, NdrGetBuffer, NdrConformantStringBufferSize, NdrConformantArrayUnmarshall, NdrSendReceive, NdrConvert, NdrConformantStringMarshall, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, I_RpcGetBuffer, NdrAllocate, NdrServerInitializeNew, NdrConformantStringUnmarshall, NdrPointerFree, RpcAsyncInitializeHandle, RpcBindingSetAuthInfoExA, RpcAsyncCancelCall, RpcBindingFromStringBindingA, RpcStringBindingComposeA, RpcAsyncCompleteCall, NdrAsyncClientCall, NdrClientCall2, RpcStringFreeA
shell32.dll
SHGetPathFromIDListW, SHGetFileInfoW, SHChangeNotify, SHGetDesktopFolder, SHGetMalloc, SHGetSpecialFolderLocation, Shell_NotifyIconW, SHBrowseForFolderW, ShellExecuteW, ShellExecuteExW, SHGetFolderPathW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathCompactPathW, ColorHLSToRGB, ColorRGBToHLS, PathIsDirectoryW, UrlCombineA
urlmon.dll
FindMimeFromData
user32.dll
DllMain
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winhttp.dll
WinHttpSetOption, WinHttpSendRequest, WinHttpConnect, WinHttpCloseHandle, WinHttpSetTimeouts, WinHttpOpen, WinHttpOpenRequest, WinHttpReadData, WinHttpReceiveResponse, WinHttpQueryOption, WinHttpQueryHeaders
wininet.dll
InternetReadFile, InternetCombineUrlA, HttpOpenRequestA, InternetGetLastResponseInfoA, InternetOpenA, InternetCloseHandle, InternetQueryOptionA, InternetConnectA, HttpQueryInfoA, HttpSendRequestA, InternetCrackUrlW, InternetSetOptionA, InternetCanonicalizeUrlW, InternetSetOptionW, InternetConnectW, HttpOpenRequestW, HttpSendRequestW, InternetOpenW
winmm.dll
timeSetEvent, timeKillEvent, timeGetTime, timeGetDevCaps, PlaySoundA

AvastUi.exe

avast! Antivirus by AVAST Software (Signed)

Remove AvastUi.exe
Version:   6.0.1125.0
MD5:   4c6898f15701ae7c41775c14e423fe25
SHA1:   51bd8752fe51e83d593c9c220b5fd09e999c381f

What is AvastUi.exe?

avast! Antivirus is a full-featured antivirus and anti-spyware scanning and removal product. Avast offers a web-reputation browser extension as well as virtualization technology. Accurate threat updates via avast updates are delivered automatically using PUSH update technology in Avast! Antivirus.

About AvastUi.exe (from AVAST Software)

Free antivirus with anti-spyware protection for Windows. AVAST Software leads the security software industry – protecting 160 million PCs, Macs and Mobiles around the globe – by distributing FREE anti

DetailsDetails

File name:avastui.exe
Publisher:AVAST Software
Product name:avast! Antivirus
Typical file path:C:\Program Files\avast software\avast\avastui.exe
File version:6.0.1125.0
Product version:6.0.0.0
Size:3.3 MB (3,459,712 bytes)
Certificate
Issued to:AVAST Software
Authority (CA):VeriSign
Expiration date:Friday, January 31, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'avast5' → C:\Program Files1\ALWILS~1\Avast5\avastUI.exe /nogui
  • 'avast' → "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
Scheduled tasks
  • Entry path '\{BE644B67-0FC9-4E09-8921-3C92C4187F59}'
  • Entry path '\{A2010245-7908-40CE-A115-79DFB422FB5C}'
  • Entry path '\{83E22DC4-C629-429D-A5B9-3DBF2B43476D}'
  • Entry path '\{59B20A91-C364-4477-841A-79D826383F80}'
  • Entry path '\{D9C949DF-1FF9-49D3-92E4-FF09ADEE4B9E}'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\AVAST Software\Avast\AvastUI.exe'
  • Firewall exception for 'C:\Programmer\Alwil Software\Avast5\AvastUI.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00041717%
0.028634%
Kernel CPU:0.00026259%
0.013761%
User CPU:0.00015458%
0.014873%
Kernel CPU time:265,625 ms/min
100,923,805ms/min
Context switches:56/sec
284/sec
Memory
Private memory:6.78 MB
21.59 MB
Private (maximum):7.69 MB
Private (minimum):2.41 MB
Non-paged memory:6.78 MB
21.59 MB
Virtual memory:73.22 MB
140.96 MB
Virtual memory (peak):76.69 MB
169.69 MB
Working set:4.06 MB
18.61 MB
Working set (peak):9.2 MB
37.95 MB
Resource allocations
Threads:13
12
Handles:204
600
GUI GDI count:93
103
GUI USER count:32
49

BehaviorsProcess properties

Tray notification:Yes
Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\avast software\avast\avastui.exe" /nogui
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 29.00%
Windows 7 Ultimate 23.50%
Microsoft Windows XP 17.00%
Windows 7 Professional 10.00%
Windows Vista Home Premium 5.50%
Windows 8 4.00%
Windows 8 Pro 3.00%
Windows Vista Home Basic 2.00%
Windows 7 Home Basic 2.00%
Windows Vista Business 1.00%
Windows 7 Enterprise 1.00%
Windows Seven Black Edition 1.00%
Windows 7 Starter 1.00%

Distribution by countryDistribution by country

United States installs about 31.66% of avast! Antivirus.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 21.29%
Toshiba 15.97%
Hewlett-Packard 13.69%
Acer 12.93%
ASUS 10.65%
Intel 7.60%
Lenovo 4.56%
Samsung 3.80%
American Megatrends 2.28%
GIGABYTE 1.90%
Sony 1.52%
MSI 1.52%
Medion 1.52%
Packard Bell 0.76%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE