Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.0.1497.376 11.80%
8.0.1489.300 20.00%
8.0.1488.286 0.16%
8.0.1483.72 7.54%
8.0.1482.45 3.93%
7.0.1474.765 45.08%
7.0.1473.755 1.15%
7.0.1466.549 5.41%
7.0.1456.418 0.82%
7.0.1455.186 0.16%
7.0.1451.402 0.16%
7.0.1426.0 2.13%
7.0.1407.0 0.49%
6.0.1367.0 0.49%
6.0.1125.0 0.16%
6, 0, 999, 0 0.49%

Relationships

Parent processes
Related files

PE structurePE file structure

Show functions
Import table
aavmrpch.dll
AavmRpcRunSystemComponent, AavmRpcCreateBinding, AavmRpcDestroyBinding, AavmRpcRunComponent
advapi32.dll
CloseServiceHandle, RegQueryValueExA, IsTextUnicode, AllocateAndInitializeSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, OpenThreadToken, EqualSid, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegOpenKeyW, RegEnumValueW, OpenServiceW, OpenSCManagerW, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, RegOpenKeyExA, RegSetValueExW, RegDeleteValueW
ashbase.dll
_basShouldSubmit@4, _basGetLanguage@4, _basGetErrorString@12, _basWriteProfileString@12, _basIsComponentInstalled@4, _basFullscreenAppRunning@0, _basGetRegistrationInfo@20, _basGetCurrentProductLicenseInfo@28, _basInitLibrary@4, _basFriendlyShieldName@12, _basGetBaseLang@0, _basFreeLibrary@0, _basA2U@16, _basGetLockData@12, _basGetProductLicenseInfo@32, _basGetLicenseFile@8, _basProductInfo@0, _basGetProfileInt@12, _basDoFitFileName@12, _strDecode@12, _strEncode@12, _basValidatePath@8, _basCreatePath@16, _basEnableWriteAccessToEveryone@4, _CallOnSecureDesktop@12, _basFormatNumber@16, _notEvent@4, _basResPwdCheck@4, _basGetComputerName@0, _notRemEvent@4, _notFree@0, _basCheck@0, _notInit@0, _notAddEvent@12, _basInitThreadLocale@0, _basGetProfileString@20, _basDeleteValue@8, _basStoreDWORDValue@12, _basSendAutoRegInfo@8, _notAddEventId@16, _notEventId@8, _basGetLicenseFileCommon@12
ashtask.dll
_tskInitLibrary@8, _tskFreeLibrary@0, _tskFreeData@4, _tskExecData@16, _tskAddArea@8
aswcmnbs.dll
fsGetAvastDataPath, fsGetAvastLogPath, fsGetAvastSumpPath, secPreventHookDllInjection, secCreateSharedEvent, secOpenSharedEvent, iniGetPrivateProfileString, fsGetAvastProgramPath, secCreateSharedMutex, fsGetAvastTempFileName, iniGetPrivateProfileInt, iniWritePrivateProfileInt, iniWritePrivateProfileString, cmnbFree, cmnbInit
aswcmnis.dll
cyphSimpleCode, inflateInit_, inflate, inflateEnd, deflateEnd, deflate, inflateReset, deflateReset, deflateInit2_, crcGenerate32c, mdaGenerate
aswcmnos.dll
dep_osIsWow64, dep_fsGetFileSizeHandle, dep_fsReadFile, dep_fsCloseFile, dep_osIsWinVistaOrBetter, dep_osIsWinXPOrBetter, dep_osIsWin64, dep_secGetPublicSecurity, dep_fsEnableWow64FsRedirection, dep_fsWriteFile, dep_fsExistFile, dep_fsRemoveFolderRecursive, dep_fsDeleteFileX, dep_fsOpenFileX, dep_osIsWin8OrBetter, dep_fsCopyFile, dep_procGetFileName
aswlog.dll
logDebugA, _logFree@0, _logInit@8
aswproperty.dll
aswGetPropertyInt, aswGetProperty, aswPropertyFreeLibrary, aswGetAvastPropertyInt, aswPropertyInitLibrary, aswGetIntFromCache, aswGetStrFromCache, aswSetAvastProperty, aswGetAvastProperty, aswSetPropertyInt, aswSetProperty
comctl32.dll
_TrackMouseEvent, ImageList_Draw, ImageList_GetImageInfo, ImageList_DrawEx, ImageList_GetIconSize
comdlg32.dll
GetOpenFileNameW
crypt32.dll
CertCreateCertificateContext, CertFreeCertificateContext
cryptui.dll
CryptUIDlgViewCertificateW
dnsapi.dll
DnsRecordListFree, DnsQuery_W, DnsQuery_A
gdi32.dll
SetWindowOrgEx, SetLayout, BitBlt, SetViewportOrgEx, GetTextMetricsA, SetWindowExtEx, GetWindowExtEx, SetTextColor, DeleteDC, SetBkColor, GetObjectW, LPtoDP, ExcludeClipRect, CreateCompatibleDC, CreateRectRgnIndirect, DPtoLP, CombineRgn, SetMapMode, CreateCompatibleBitmap, GetMapMode, SaveDC, GetClipBox, SetViewportExtEx, GetViewportExtEx, GetObjectA, GetStockObject, RestoreDC, CreateSolidBrush, DeleteObject, CreateRoundRectRgn, SelectObject, GetDeviceCaps, SetTextAlign, GetTextAlign, GetTextExtentPointW, TextOutA, TextOutW, GetPixel, IntersectClipRect, RectVisible, CreatePen, CreatePatternBrush, GetTextExtentExPointW, Rectangle, SetBkMode, CreateBitmap, SetPixel, Polygon, GetCurrentPositionEx, ExtCreatePen, Polyline, PtVisible, ExtTextOutW, Escape, CreateFontIndirectW, GetCurrentObject, SetBrushOrgEx, CreateDIBPatternBrushPt, CreateDIBSection, StretchBlt, GetDIBits, StretchDIBits, SetStretchBltMode, CreateFontA, EnumFontFamiliesExA, AddFontMemResourceEx, EnumFontFamiliesExW, GetWindowOrgEx, CreateHatchBrush, GetTextExtentPoint32A, GetTextExtentPoint32W, PatBlt, GetDeviceGammaRamp, SetDeviceGammaRamp, GetKerningPairsA, GetGlyphOutlineW, AddFontResourceExW
kernel32.dll
GetLocaleInfoA, TlsGetValue, GetCurrentProcess, QueryPerformanceCounter, QueryPerformanceFrequency, InterlockedIncrement, DeleteCriticalSection, FreeLibrary, GetProcAddress, LoadLibraryA, GetSystemDirectoryA, GetLocaleInfoW, IsBadReadPtr, MulDiv, FlushFileBuffers, SetEvent, GetProcessHeap, TlsSetValue, GetExitCodeProcess, CallNamedPipeW, CreateProcessW, HeapFree, WriteFile, ReadFile, ConnectNamedPipe, TerminateThread, WaitForSingleObject, ExitThread, GetPrivateProfileStringW, GetSystemTime, LocalFree, CreateDirectoryW, LocalAlloc, GetUserDefaultLCID, VirtualFree, ExpandEnvironmentStringsA, Process32NextW, Process32FirstW, LCMapStringW, FindResourceExW, LocalUnlock, CreateFileMappingA, FlushViewOfFile, SetEndOfFile, UnmapViewOfFile, MapViewOfFile, GetThreadLocale, GetVersionExA, GlobalAlloc, SetThreadLocale, GetCPInfo, GetCurrencyFormatW, DeleteFileA, MoveFileA, SetLastError, GetShortPathNameA, CreateEventA, VirtualAlloc, GetVersionExW, DeviceIoControl, CreateFileW, GetDiskFreeSpaceExW, GetVolumeInformationW, GetDriveTypeW, GetLogicalDrives, Sleep, GetLastError, FileTimeToLocalFileTime, FileTimeToSystemTime, GetTimeFormatW, GetDateFormatW, CreateThread, CloseHandle, InitializeCriticalSection, GetACP, EnterCriticalSection, LeaveCriticalSection, WideCharToMultiByte, MultiByteToWideChar, GetTickCount, DeleteFileW, GetTempFileNameW, GetTempPathW, HeapAlloc, WaitForMultipleObjects, InterlockedExchange, InitializeCriticalSectionAndSpinCount, LoadLibraryW, OpenEventW, TerminateProcess, ExitProcess, GetPrivateProfileIntW, GetModuleFileNameW, ExpandEnvironmentStringsW, GetCurrentThreadId, GetCommandLineW, GetCurrentProcessId, CopyFileW, GlobalLock, GlobalUnlock, SetThreadPriority, GetSystemInfo, WaitNamedPipeW, LoadLibraryExW, GetShortPathNameW, FindFirstFileW, FindNextFileW, FindClose, GetSystemDirectoryW, GetWindowsDirectoryW, CreateEventW, GetNumberFormatW, GetFileAttributesW, GetLocalTime, SetFilePointer, GetFileSize, SystemTimeToFileTime, GetSystemTimeAsFileTime, InterlockedDecrement, DisconnectNamedPipe, GetUserDefaultLangID, CreateIoCompletionPort, CreateNamedPipeW, GetQueuedCompletionStatus, GetTempFileNameA, TlsAlloc, GetTempPathA, FindResourceA, FindResourceW, LoadResource, SizeofResource, LockResource, GetModuleHandleW, GetStringTypeA, GetStringTypeW, ReleaseMutex, lstrcmpiW, lstrcmpW, GetExitCodeThread, CreateToolhelp32Snapshot, OutputDebugStringW, OpenProcess, GetCurrentThread, RaiseException, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, IsDebuggerPresent, SetProcessWorkingSetSize, DllMain, GetVersion, CreateMutexW, MoveFileExW, ResumeThread, WritePrivateProfileStringW
mfc90u.dll
DllMain
msimg32.dll
GradientFill
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoCreateGuid, CoTaskMemFree, StringFromCLSID, CoInitialize, CoCreateInstance, CoUninitialize, StringFromGUID2, CoInitializeEx, CLSIDFromString
oleacc.dll
CreateStdAccessibleObject, AccessibleObjectFromWindow, LresultFromObject
psapi.dll
GetModuleFileNameExW, EnumProcessModules, EnumProcesses
rpcrt4.dll
RpcBindingFromStringBindingW, RpcStringFreeW, RpcBindingFree, RpcStringBindingComposeW, UuidCreate, NdrConformantArrayMarshall, RpcRaiseException, NdrClientInitializeNew, NdrConformantArrayBufferSize, NdrFreeBuffer, NdrGetBuffer, NdrConformantStringBufferSize, NdrConformantArrayUnmarshall, NdrSendReceive, NdrConvert, NdrConformantStringMarshall, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, I_RpcGetBuffer, NdrAllocate, NdrServerInitializeNew, NdrConformantStringUnmarshall, NdrPointerFree, RpcAsyncInitializeHandle, RpcBindingSetAuthInfoExA, RpcAsyncCancelCall, RpcBindingFromStringBindingA, RpcStringBindingComposeA, RpcAsyncCompleteCall, NdrAsyncClientCall, NdrClientCall2, RpcStringFreeA
shell32.dll
SHGetPathFromIDListW, SHGetFileInfoW, SHChangeNotify, SHGetDesktopFolder, SHGetMalloc, SHGetSpecialFolderLocation, Shell_NotifyIconW, SHBrowseForFolderW, ShellExecuteW, ShellExecuteExW, SHGetFolderPathW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathCompactPathW, ColorHLSToRGB, ColorRGBToHLS, PathIsDirectoryW, UrlCombineA
urlmon.dll
FindMimeFromData
user32.dll
DllMain
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winhttp.dll
WinHttpSetOption, WinHttpSendRequest, WinHttpConnect, WinHttpCloseHandle, WinHttpSetTimeouts, WinHttpOpen, WinHttpOpenRequest, WinHttpReadData, WinHttpReceiveResponse, WinHttpQueryOption, WinHttpQueryHeaders
wininet.dll
InternetReadFile, InternetCombineUrlA, HttpOpenRequestA, InternetGetLastResponseInfoA, InternetOpenA, InternetCloseHandle, InternetQueryOptionA, InternetConnectA, HttpQueryInfoA, HttpSendRequestA, InternetCrackUrlW, InternetSetOptionA, InternetCanonicalizeUrlW, InternetSetOptionW, InternetConnectW, HttpOpenRequestW, HttpSendRequestW, InternetOpenW
winmm.dll
timeSetEvent, timeKillEvent, timeGetTime, timeGetDevCaps, PlaySoundA

AvastUi.exe

avast! Antivirus by AVAST Software (Signed)

Remove AvastUi.exe
Version:   8.0.1497.376
MD5:   cbc7d8e5416ad30cf16dc2fd4a6aa399
SHA1:   3f604b5bb0601534852e3017d69e8161e02fc8d8
SHA256:   8158d11583c09ddff0f39ceaca489accd546082d0f77e4bd2a5831cb17de4a17

What is AvastUi.exe?

avast! Antivirus is a full-featured antivirus and anti-spyware scanning and removal product. Avast offers a web-reputation browser extension as well as virtualization technology. Accurate threat updates via avast updates are delivered automatically using PUSH update technology in Avast! Antivirus.

About AvastUi.exe (from AVAST Software)

Free antivirus with anti-spyware protection for Windows. AVAST Software leads the security software industry – protecting 160 million PCs, Macs and Mobiles around the globe – by distributing FREE anti

DetailsDetails

File name:avastui.exe
Publisher:AVAST Software
Product name:avast! Antivirus
Typical file path:C:\Program Files\avast software\avast\avastui.exe
File version:8.0.1497.376
Size:4.63 MB (4,858,968 bytes)
Build date:8/30/2013 2:41 AM
Certificate
Issued to:AVAST Software
Authority (CA):VeriSign
Expiration date:Friday, January 31, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'avast5' → C:\Program Files1\ALWILS~1\Avast5\avastUI.exe /nogui
  • 'avast' → "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
Scheduled tasks
  • Entry path '\{BE644B67-0FC9-4E09-8921-3C92C4187F59}'
  • Entry path '\{A2010245-7908-40CE-A115-79DFB422FB5C}'
  • Entry path '\{83E22DC4-C629-429D-A5B9-3DBF2B43476D}'
  • Entry path '\{59B20A91-C364-4477-841A-79D826383F80}'
  • Entry path '\{D9C949DF-1FF9-49D3-92E4-FF09ADEE4B9E}'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\AVAST Software\Avast\AvastUI.exe'
  • Firewall exception for 'C:\Programmer\Alwil Software\Avast5\AvastUI.exe'
Network connections
Access through an approved Windows firewall exception
  • [TCP] a92-123-166-13.deploy.akamaitechnologies.com (92.123.166.13:80)
  • [TCP] qe-in-f138.1e100.net (173.194.74.138:80)
  • [TCP] 213.57.24.27:80
  • [TCP] 62.0.54.93:80
  • [TCP] lax17s01-in-f8.1e100.net (74.125.224.40:80)
  • [TCP] nuq05s02-in-f8.1e100.net (74.125.239.136:80)
  • [TCP] iad23s08-in-f6.1e100.net (74.125.228.102:80)
  • [TCP] dfw06s27-in-f1.1e100.net (173.194.46.1:80)
  • [TCP] a23-72-254-13.deploy.static.akamaitechnologies.com (23.72.254.13:80)
  • [TCP] par10s12-in-f9.1e100.net (173.194.40.201:80)
  • [TCP] 173.194.113.193:80
  • [TCP] par10s12-in-f14.1e100.net (173.194.40.206:80)
  • [TCP] bud02s02-in-f1.1e100.net (173.194.39.97:80)
  • [TCP] mrs02s04-in-f4.1e100.net (173.194.39.36:80)
  • [TCP] a23-66-190-13.deploy.static.akamaitechnologies.com (23.66.190.13:80)
  • [TCP] lax17s02-in-f7.1e100.net (74.125.224.71:80)
  • [TCP] maa03s04-in-f5.1e100.net (74.125.236.37:80)
  • [TCP] a23-37-14-13.deploy.static.akamaitechnologies.com (23.37.14.13:443)
  • [TCP] a184-86-142-13.deploy.static.akamaitechnologies.com (184.86.142.13:80)
  • [TCP] hg-in-f102.1e100.net (74.125.128.102:80)
  • [TCP] 178-102-241.dynamic.cyta.gr (178.59.102.241:80)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.01040241%
    0.028634%
    Kernel CPU:0.00502228%
    0.013761%
    User CPU:0.00538012%
    0.014873%
    Kernel CPU time:11,060,591 ms/min
    100,923,805ms/min
    CPU cycles:1,121,378/sec
    17,470,203/sec
    Context switches:22/sec
    284/sec
    Memory
    Private memory:15.41 MB
    21.59 MB
    Private (maximum):17.88 MB
    Private (minimum):4.52 MB
    Non-paged memory:15.41 MB
    21.59 MB
    Virtual memory:146.03 MB
    140.96 MB
    Virtual memory (peak):168.71 MB
    169.69 MB
    Working set:10.67 MB
    18.61 MB
    Working set (peak):24.49 MB
    37.95 MB
    Page faults:172,875/min
    2,039/min
    I/O
    I/O read transfer:8.38 KB/sec
    1.02 MB/min
    I/O read operations:7/sec
    343/min
    I/O write transfer:5 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:2.23 KB/sec
    448.09 KB/min
    I/O other operations:112/sec
    1,671/min
    Resource allocations
    Threads:22
    12
    Handles:404
    600
    GUI GDI count:201
    103
    GUI GDI peak:270
    142
    GUI USER count:46
    49
    GUI USER peak:56
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:32-bit
    Command lines:
    • "C:\Program Files\avast software\avast\avastui.exe" /nogui
    • "C:\Program Files\alwil software\avast5\avastui.exe" /nogui
    • "C:\programs\net\security\avast\avastui.exe" /nogui
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.00916859%
    0.272967%
    Kernel CPU:0.00645417%
    0.107585%
    User CPU:0.00271442%
    0.165382%
    CPU cycles:199,736/sec
    5,741,424/sec
    Memory:1.23 MB
    1.16 MB
    AvastUI.exe (main module)
    Total CPU:0.00481861%
    Kernel CPU:0.00245607%
    User CPU:0.00236254%
    CPU cycles:216,844/sec
    Context switches:3/sec
    Memory:4.63 MB
    MSVCR90.dll
    Total CPU:0.00215256%
    Kernel CPU:0.00107627%
    User CPU:0.00107629%
    CPU cycles:33,597/sec
    Memory:652 KB
    lavasoftproxy.dll (LavasoftProxy.dll by Lavasoft Limited)
    Total CPU:0.00070452%
    Kernel CPU:0.00043019%
    User CPU:0.00027432%
    CPU cycles:182,048/sec
    Context switches:6/sec
    Memory:360 KB
    aavm4h.dll (avast! Antivirus by AVAST Software)
    Total CPU:0.00048133%
    Kernel CPU:0.00033529%
    User CPU:0.00014604%
    CPU cycles:56,997/sec
    Context switches:1/sec
    Memory:900 KB
    WINMM.dll
    Total CPU:0.00022804%
    Kernel CPU:0.00000000%
    User CPU:0.00022804%
    CPU cycles:6,182/sec
    Memory:200 KB
    wow64.dll
    Total CPU:0.00006795%
    Kernel CPU:0.00002372%
    User CPU:0.00004423%
    CPU cycles:5,319/sec
    Memory:252 KB
    aswproperty.dll (avast! Antivirus by AVAST Software)
    Total CPU:0.00005283%
    Kernel CPU:0.00003962%
    User CPU:0.00001321%
    Memory:264 KB
    wow64win.dll
    Total CPU:0.00004994%
    Kernel CPU:0.00002857%
    User CPU:0.00002137%
    CPU cycles:14,091/sec
    Memory:360 KB
    wdmaud.drv
    Total CPU:0.00001520%
    Kernel CPU:0.00001520%
    User CPU:0.00000000%
    CPU cycles:440/sec
    Memory:188 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 29.00%
    Windows 7 Ultimate 23.50%
    Microsoft Windows XP 17.00%
    Windows 7 Professional 10.00%
    Windows Vista Home Premium 5.50%
    Windows 8 4.00%
    Windows 8 Pro 3.00%
    Windows Vista Home Basic 2.00%
    Windows 7 Home Basic 2.00%
    Windows Vista Business 1.00%
    Windows 7 Enterprise 1.00%
    Windows Seven Black Edition 1.00%
    Windows 7 Starter 1.00%

    Distribution by countryDistribution by country

    United States installs about 31.66% of avast! Antivirus.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 21.29%
    Toshiba 15.97%
    Hewlett-Packard 13.69%
    Acer 12.93%
    ASUS 10.65%
    Intel 7.60%
    Lenovo 4.56%
    Samsung 3.80%
    American Megatrends 2.28%
    GIGABYTE 1.90%
    Sony 1.52%
    MSI 1.52%
    Medion 1.52%
    Packard Bell 0.76%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE