Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
crypt32.dll
CertNameToStrW, CertGetEnhancedKeyUsage, CryptQueryObject, CryptMsgGetParam, CertFindCertificateInStore, CertFreeCertificateContext, CertCloseStore, CryptMsgClose, CertGetNameStringW
kernel32.dll
GetProcessTimes, GetSystemTimeAsFileTime, GetCurrentThreadId, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, Sleep, lstrcmpW, lstrcmpA, SetLastError, QueryDosDeviceW, ExpandEnvironmentStringsW, ReadProcessMemory, VirtualQuery, GetTickCount, GetCurrentProcessId, OpenProcess, GetLongPathNameW, GetSystemDirectoryW, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InterlockedDecrement, InterlockedIncrement, VirtualAlloc, VirtualFree, GetModuleHandleW, InterlockedCompareExchange, GetModuleFileNameW, OutputDebugStringW, CreateFileW, GetFileSize, ReadFile, lstrlenW, GetVersionExW, GetSystemInfo, GetCurrentThread, CloseHandle, GetCurrentProcess, VerSetConditionMask, VerifyVersionInfoW, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, MultiByteToWideChar, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, RaiseException, LoadLibraryA, InterlockedExchange, FreeLibrary, GetLastError, GetFileAttributesW, GetProcAddress, lstrlenA, LoadLibraryExW, LocalAlloc
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
StringFromIID, CoTaskMemFree, StringFromGUID2
user32.dll
wsprintfW
wintrust.dll
CryptCATAdminReleaseContext, CryptCATAdminEnumCatalogFromHash, CryptCATAdminReleaseCatalogContext, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext, CryptCATCatalogInfoFromContext, WintrustGetRegPolicyFlags, WinVerifyTrust

buVss.exe

Backup Component by Symantec Corporation (Signed)

Remove buVss.exe
Version:   6.8.00.4
MD5:   f0fa7e62ea303c5e323becd20a5a2a04
SHA1:   4acbc7f661f973479630abcf9126aa08ae363a49

Overview

buvss.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation). It is installed with a couple of know programs including Norton 360 published by Symantec Corporation, Norton Security Suite from Symantec Corporation and Norton Security Suite by Symantec Corporation. This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

DetailsDetails

File name:buvss.exe
Publisher:Symantec Corporation
Product name:Backup Component
Description:Backup Volume Shadow Support
Typical file path:C:\Program Files\norton 360\engine\6.4.1.14\buvss.exe
File version:6.8.00.4
Product version:6.8
Size:155.46 KB (159,192 bytes)
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Tuesday, September 7, 2010
Expiration date:Saturday, November 23, 2013
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Norton 360
 Symantec Corporation
12% remove
Norton 360, developed by Symantec, is marketed as an "all-in-one" computer security suite. The package includes an antivirus, a personal firewall, a phishing protection program and a backup program. What distinguishes this suite from Norton Internet Security is the inclusion of file backup and PC maintenance capabilities.
Norton Security Suite
 Symantec Corporation
50% remove
“Powered by Norton 360 Technology. XFINITY Internet customers can now get the #1 ranked Norton Security Suite at no additional charge. Protects against viruses, spyware, Trojan horses, worms, bots, and rootkits. Blocks browser, OS, and application threats; protects against infected Web sites. Blocks phishing Web sites and authenticates trusted sites. Available at no extra cost to XFINITY Internet customers, Norton Security Suite protects...”
Norton 360 Premier Edition
 Symantec Corporation
3% remove
Norton 360, developed by Symantec, is marketed as an "all-in-one" computer security suite. The package includes an antivirus, a personal firewall, a phishing protection program and a backup program. What distinguishes this suite from Norton Internet Security is the inclusion of file backup and PC maintenance capabilities. The Premier Edition has all the functions of the standard edition, with the difference that it comes with 25 GB of o...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00044058%
0.028634%
Kernel CPU:0.00035360%
0.013761%
User CPU:0.00008698%
0.014873%
Kernel CPU time:203 ms/min
100,923,805ms/min
Memory
Private memory:10.32 MB
21.59 MB
Private (maximum):11.71 MB
Private (minimum):10.2 MB
Non-paged memory:10.32 MB
21.59 MB
Virtual memory:34.53 MB
140.96 MB
Virtual memory (peak):41.58 MB
169.69 MB
Working set:10.2 MB
18.61 MB
Working set (peak):11.73 MB
37.95 MB
Page faults:3,018/min
2,039/min
I/O
I/O read transfer:296 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:181 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:5
12
Handles:146
600
GUI GDI count:4
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\norton 360\engine\6.4.1.14\buvss.exe"
Owner:SYSTEM
Parent process:ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE