Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

17.0.1.12 33.33%
15.2.0.5 33.33%
15.2.0.5 33.33%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
GetLengthSid, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegEnumKeyExW, RegQueryInfoKeyW, RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegCreateKeyExW, RegDeleteKeyW, RegCloseKey, OpenProcessToken, RegQueryValueExW, LookupPrivilegeValueW, RegFlushKey, AdjustTokenPrivileges, GetTokenInformation, CreateProcessAsUserW, DuplicateTokenEx, CheckTokenMembership, CreateWellKnownSid, CryptDeriveKey, CryptReleaseContext, CryptAcquireContextA, CryptEncrypt, CryptCreateHash, CryptDestroyKey, CryptDecrypt, CryptDestroyHash, CryptHashData, SetNamedSecurityInfoW, GetNamedSecurityInfoW, InitializeAcl, AllocateAndInitializeSid, AddAccessAllowedAce, SetEntriesInAclW, FreeSid, RegSetKeySecurity, CryptGetHashParam, CryptAcquireContextW
crypt32.dll
CryptProtectData
gdi32.dll
CreateRoundRectRgn, CombineRgn, GetStockObject, GetObjectW, CreateSolidBrush, GetDeviceCaps, BitBlt, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, DeleteObject, DeleteDC, CreateRectRgn
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, OleLockRunning, CoGetClassObject, CLSIDFromProgID, CLSIDFromString, CoCreateInstance, CreateStreamOnHGlobal, CoTaskMemFree, OleUninitialize, CoRevokeClassObject, CoRegisterClassObject, CoInitialize, CoUninitialize, CoSuspendClassObjects, CoTaskMemRealloc, OleInitialize, CoTaskMemAlloc
rpcrt4.dll
IUnknown_Release_Proxy, NdrOleFree, NdrOleAllocate, NdrCStdStubBuffer2_Release, RpcStringFreeW, UuidToStringW, NdrStubCall2, NdrStubForwardingFunction, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy
sensapi.dll
IsNetworkAlive
shell32.dll
ShellExecuteExW, SHGetSpecialFolderPathW, ShellExecuteW
shlwapi.dll
PathFileExistsW, UrlUnescapeW, PathFileExistsA
user32.dll
InvalidateRgn, RedrawWindow, ScreenToClient, InvalidateRect, GetDC, IsChild, GetParent, LoadStringW, ReleaseDC, GetClassNameW, ReleaseCapture, FillRect, CallWindowProcW, CharUpperW, CharNextW, EndDialog, DestroyWindow, SetWindowLongW, ClientToScreen, GetClientRect, MoveWindow, GetSysColor, GetWindowLongW, SetWindowPos, ShowWindow, SetTimer, KillTimer, SendDlgItemMessageW, GetDlgItem, SetWindowRgn, IsWindow, SendMessageW, SetWindowContextHelpId, DefWindowProcW, SetCapture, FindWindowW, PostMessageW, PostThreadMessageW, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, EndPaint, GetSystemMetrics, EnumWindows, wsprintfW, SetLayeredWindowAttributes, UnregisterClassA, MapDialogRect, DialogBoxIndirectParamW, RegisterWindowMessageW, GetWindowTextLengthW, GetWindowTextW, SetWindowTextW, SystemParametersInfoW, CreateAcceleratorTableW, CreateWindowExW, RegisterClassExW, LoadCursorW, GetClassInfoExW, GetFocus, GetWindow, SetFocus, DestroyAcceleratorTable, GetDesktopWindow, BeginPaint, UnregisterClassW
userenv.dll
CreateEnvironmentBlock
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
wininet.dll
DeleteUrlCacheEntryW, FindNextUrlCacheEntryW, InternetOpenW, InternetReadFile, InternetConnectW, HttpSendRequestW, InternetSetOptionW, HttpAddRequestHeadersW, HttpQueryInfoW, HttpOpenRequestW, InternetCloseHandle, FindFirstUrlCacheEntryW
wtsapi32.dll
WTSEnumerateSessionsW

ScriptHelper.exe

By AVG Technologies (Signed)

Remove ScriptHelper.exe
Version:   17.0.1.12
MD5:   70fe4506b73afcae40d89c348ada819e
SHA1:   44d0e627c111ad150f4bf9af5cd60a01d5e16c99

Overview

scripthelper.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The file is digitally signed by AVG Technologies which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:scripthelper.exe
Publisher:AVG Secure Search
Typical file path:C:\Program Files\common files\avg secure search\scripthelperinstaller\15.2.0\scripthelper.exe
File version:17.0.1.12
Size:2.26 MB (2,374,168 bytes)
Build date:8/27/2013 1:46 PM
Certificate
Issued to:AVG Technologies
Authority (CA):VeriSign
Effective date:Friday, March 22, 2013
Expiration date:Wednesday, April 22, 2015
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00030028%
0.028634%
Kernel CPU:0.00025758%
0.013761%
User CPU:0.00004270%
0.014873%
Kernel CPU time:187 ms/min
100,923,805ms/min
Memory
Private memory:3.92 MB
21.59 MB
Private (maximum):9.61 MB
Private (minimum):9.3 MB
Non-paged memory:3.92 MB
21.59 MB
Virtual memory:92.04 MB
140.96 MB
Virtual memory (peak):95.79 MB
169.69 MB
Working set:9.56 MB
18.61 MB
Working set (peak):9.61 MB
37.95 MB
Resource allocations
Threads:5
12
Handles:152
600
GUI GDI count:9
103
GUI GDI peak:9
142
GUI USER count:3
49
GUI USER peak:5
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command line:"C:\Program Files\common files\avg secure search\scripthelperinstaller\17.0.12\scripthelper.exe" -embedding
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 66.67%
Windows 8 33.33%

Distribution by countryDistribution by country

Germany installs about 33.33% of scripthelper.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 50.00%
Acer 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE