Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

7, 0, 315459, 4132 10.00%
6, 3, 294583, 2937 15.00%
6, 3, 294583, 2937 5.00%
6, 2, 282872, 2847 30.00%
6, 2, 282872, 2847 15.00%
6, 1, 276821, 2811 15.00%
6, 0, 264710, 2708 10.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
ImpersonateLoggedOnUser, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, QueryServiceStatus, OpenSCManagerW, OpenServiceW, ChangeServiceConfigW, CloseServiceHandle, QueryServiceConfigW, StartServiceW, OpenProcessToken, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExA, RegEnumKeyExA, RegEnumValueA, RegQueryValueA, RegQueryValueExA, RegSetValueExA, RegQueryInfoKeyA, RegDeleteValueA, RegDeleteKeyA, RegEnumKeyW, RegEnumValueW, DuplicateTokenEx, GetUserNameW, LookupAccountSidW, LookupPrivilegeValueW, AdjustTokenPrivileges, GetLengthSid, IsValidSid, CopySid, RegFlushKey, ConvertStringSidToSidW, RegConnectRegistryW, RegLoadKeyW, RevertToSelf, LookupAccountNameW, ConvertSidToStringSidW
comctl32.dll
ImageList_GetIconSize
comdlg32.dll
GetFileTitleW
crypt32.dll
CryptVerifyMessageSignature, CertGetNameStringW, CertFreeCertificateContext
dbghelp.dll
MiniDumpWriteDump
gdi32.dll
ExtTextOutW, GetTextExtentPoint32W, SaveDC, RestoreDC, SetBkMode, SetPolyFillMode, SetROP2, SetMapMode, GetClipBox, ExcludeClipRect, IntersectClipRect, LineTo, MoveToEx, SetTextAlign, GetLayout, SetLayout, SelectClipRgn, CreateRectRgn, GetViewportExtEx, GetWindowExtEx, GetPixel, PtVisible, RectVisible, TextOutW, Escape, SelectObject, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, ExtSelectClipRgn, DeleteDC, CreatePatternBrush, GetStockObject, SelectPalette, GetObjectType, CreateDCW, CreatePen, CreateSolidBrush, BitBlt, CreateDIBitmap, CreateCompatibleBitmap, CreateRectRgnIndirect, GetTextMetricsW, EnumFontFamiliesW, GetTextCharsetInfo, SetRectRgn, CombineRgn, PatBlt, DPtoLP, CreateDIBSection, CreateRoundRectRgn, CreatePolygonRgn, GetBkColor, GetTextColor, CreateEllipticRgn, Polyline, Ellipse, Polygon, CreatePalette, GetPaletteEntries, GetNearestPaletteIndex, RealizePalette, GetSystemPaletteEntries, OffsetRgn, GetRgnBox, SetDIBColorTable, StretchBlt, SetPixel, Rectangle, EnumFontFamiliesExW, LPtoDP, GetWindowOrgEx, GetViewportOrgEx, PtInRegion, FillRgn, FrameRgn, GetBoundsRect, ExtFloodFill, SetPaletteEntries, GetTextFaceW, SetPixelV, CreateCompatibleDC, CreateFontIndirectW, CopyMetaFileW, GetDeviceCaps, DeleteObject, GetObjectW, SetBkColor, SetTextColor, CreateHatchBrush, CreateBitmap
gdiplus.dll
GdipDisposeImage, GdipDrawImageI, GdipGetImageGraphicsContext, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipCreateBitmapFromScan0, GdipCreateBitmapFromStream, GdipGetImagePalette, GdipGetImagePaletteSize, GdipGetImagePixelFormat, GdipGetImageHeight, GdipGetImageWidth, GdipCloneImage, GdipDrawImageRectI, GdipSetInterpolationMode, GdipCreateFromHDC, GdiplusShutdown, GdiplusStartup, GdipCreateBitmapFromHBITMAP, GdipDeleteGraphics, GdipAlloc, GdipFree
imagehlp.dll
ImageGetCertificateHeader, ImageGetCertificateData
imm32.dll
ImmReleaseContext, ImmGetContext, ImmGetOpenStatus
kernel32.dll
DllMain
msimg32.dll
TransparentBlt, AlphaBlend
ole32.dll
DoDragDrop, CreateStreamOnHGlobal, OleLockRunning, IsAccelerator, OleTranslateAccelerator, OleDestroyMenuDescriptor, OleCreateMenuDescriptor, CoInitialize, OleDuplicateData, RegisterDragDrop, CoLockObjectExternal, RevokeDragDrop, ReleaseStgMedium, CoInitializeSecurity, CoRevokeClassObject, CoResumeClassObjects, CoCreateInstance, CoUninitialize, CoInitializeEx, CoRegisterClassObject, CoReleaseServerProcess, CoAddRefServerProcess, StringFromGUID2, CoCreateGuid, CoTaskMemAlloc, OleGetClipboard, CoTaskMemRealloc, CoTaskMemFree
oleacc.dll
CreateStdAccessibleObject, AccessibleObjectFromWindow, LresultFromObject
psapi.dll
GetModuleFileNameExW, GetProcessMemoryInfo, EnumProcesses, EnumProcessModules
shell32.dll
SHGetDesktopFolder, SHCreateDirectoryExW, SHGetFileInfoW, SHGetPathFromIDListW, SHGetSpecialFolderLocation, ShellExecuteW, DragFinish, DragQueryFileW, SHAppBarMessage, SHBrowseForFolderW, SHGetFolderPathW
shlwapi.dll
PathRemoveBackslashW, PathRemoveFileSpecW, SHDeleteKeyW, PathFindFileNameW, PathStripToRootW, PathIsUNCW, PathFindExtensionW, PathIsFileSpecW, PathAppendW
user32.dll
DllMain
winmm.dll
PlaySoundW, timeGetTime
winspool.drv
OpenPrinterW, DocumentPropertiesW, ClosePrinter
wintrust.dll
WTHelperGetProvSignerFromChain, WTHelperGetProvCertFromChain, WinVerifyTrust, WTHelperProvDataFromStateData
wtsapi32.dll
WTSQueryUserToken

cavwp.exe

COMODO Internet Security by Comodo Security Solutions (Signed)

Remove cavwp.exe
Version:   6, 0, 264710, 2708
MD5:   cfb984f12161d2f2cf5abd301a2de81b
SHA1:   ee0cf36ad0b0f95001ea3796d348d384995590e2
SHA256:   b4bda46d61a3de74cad29fca5be29a19265bce2a970f3dca8adc50a16878654d

Overview

cavwp.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). It is installed with a couple of know programs including COMODO Internet Security published by COMODO and COMODO Internet Security published by COMODO. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Comodo Security Solutions which was issued by the COMODO CA Limited certificate authority (CA).

DetailsDetails

File name:cavwp.exe
Publisher:COMODO
Product name:COMODO Internet Security
Typical file path:C:\Program Files\comodo\comodo internet security\cavwp.exe
File version:6, 0, 264710, 2708
Size:476.7 KB (488,144 bytes)
Certificate
Issued to:Comodo Security Solutions
Authority (CA):COMODO CA Limited
Effective date:Wednesday, June 13, 2012
Expiration date:Friday, June 14, 2013
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesPrograms

The following programs will install this file
COMODO
27% remove
Comodo Internet Security (CIS), developed by Comodo Group, is an Internet security suite available for Microsoft Windows. It offers anti-malware (antivirus) protection, a personal firewall, a sandbox and a Host-based Intrusion Prevention System (HIPS) called Defense+. Comodo Internet Security (CIS) is available in four editions: Comodo Internet Security (the standard edition), Comodo Internet Security Plus, Comodo Internet Security Pro ...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00042872%
0.028634%
Kernel CPU:0.00002706%
0.013761%
User CPU:0.00040165%
0.014873%
Kernel CPU time:1,630 ms/min
100,923,805ms/min
CPU cycles:2,623,856/sec
17,470,203/sec
Memory
Private memory:34.94 MB
21.59 MB
Private (maximum):29.19 MB
Private (minimum):2.3 MB
Non-paged memory:34.94 MB
21.59 MB
Virtual memory:156.26 MB
140.96 MB
Virtual memory (peak):251.99 MB
169.69 MB
Working set:19.83 MB
18.61 MB
Working set (peak):114.95 MB
37.95 MB
Page faults:283,045/min
2,039/min
I/O
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:6
12
Handles:118
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\comodo\comodo internet security\cavwp.exe" /modeavmonitor -embedding
Owner:SYSTEM
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.06271630%
0.272967%
Kernel CPU:0.00125922%
0.107585%
User CPU:0.06145708%
0.165382%
CPU cycles:858,816/sec
5,741,424/sec
Memory:1.74 MB
1.16 MB
cavwp.exe (main module)
Total CPU:0.00006104%
Kernel CPU:0.00003953%
User CPU:0.00002151%
CPU cycles:616/sec
Memory:528 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 25.00%
Windows 8 25.00%
Windows 7 Ultimate 15.00%
Windows 7 Professional 10.00%
Windows 8 Pro 10.00%
Windows 8.1 5.00%
Windows 8.1 Pro 5.00%
Microsoft Windows XP 5.00%

Distribution by countryDistribution by country

United States installs about 55.00% of COMODO Internet Security.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 38.46%
Lenovo 15.38%
Sony 15.38%
Acer 7.69%
ASUS 7.69%
Hewlett-Packard 7.69%
Samsung 3.85%
GIGABYTE 3.85%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE