Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Child processes

PE structurePE file structure
Show functions
Import table
comctl32.dll
ImageList_DrawEx, ImageList_DragMove, ImageList_GetIcon, ImageList_AddIcon, ImageList_DragLeave, ImageList_DragEnter, ImageList_BeginDrag, InitCommonControlsEx, ImageList_EndDrag, ImageList_GetIconSize, ImageList_GetImageCount, ImageList_Create, DllGetVersion, ImageList_DragShowNolock, ImageList_Draw, ImageList_AddMasked, InitCommonControls, ImageList_Destroy
gdi32.dll
GetObjectA, SelectObject, GetDeviceCaps, CreateFontIndirectA, DeleteDC, CreateCompatibleDC, CreateDCA, CreateDIBSection, GetPixel, SetTextColor, CreateBrushIndirect, CreatePenIndirect, OffsetWindowOrgEx, StretchDIBits, DeleteObject, CreateCompatibleBitmap, GetTextExtentPoint32A, BitBlt, SetBkColor
kernel32.dll
GetProcAddress, VirtualProtect, RtlMoveMemory, HeapFree, GetModuleHandleA, GetProcessHeap, RtlZeroMemory, LoadLibraryA, lstrcmpA, FreeLibrary, lstrlenA, GetVersion, MulDiv, lstrlenW, lstrcmpiA, HeapAlloc, MultiByteToWideChar
msvbvm60.dll
DllMain
ole32.dll
CoTaskMemAlloc, CoInitialize, CoUninitialize
olepro32.dll
OleTranslateColor
shell32.dll
SHGetFileInfoA
user32.dll
SetWindowPos, DestroyIcon, LoadImageA, RemovePropA, GetWindowRect, CreateWindowExA, ScreenToClient, SetWindowsHookExA, ReleaseCapture, FillRect, InvalidateRect, DrawStateA, GetKeyState, UnhookWindowsHookEx, IsRectEmpty, UnionRect, VkKeyScanA, FindWindowExA, EnableWindow, MoveWindow, SetActiveWindow, OffsetRect, DestroyWindow, GetSysColor, RedrawWindow, DrawTextA, SetFocus, GetScrollInfo, SetWindowLongA, SystemParametersInfoA, SendMessageA, ReleaseDC, VkKeyScanW, WindowFromPoint, DestroyAcceleratorTable, PostMessageA, CreateAcceleratorTableA, InflateRect, GetFocus, GetDC, CallNextHookEx, GetSystemMetrics, GetAsyncKeyState, SetPropA, SetTimer, DestroyCursor, GetActiveWindow, KillTimer, GetClientRect, GetCursorPos, GetPropA, UpdateWindow, IntersectRect

smδrtp.exe

Smadav by Smadsoft

Remove smδrtp.exe
Version:   4.93.0001
MD5:   00fc1bb5a162d1e946f1f4d2b448cb90
SHA1:   5eb0bd1c21c5ce55ed15ff84ff7cc3f8b3d37638

Overview

smδrtp.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This particular version is usually found on Windows 7 Professional (6.1.7600.0).

DetailsDetails

File name:smδrtp.exe
Publisher:Smadsoft
Product name:Smadav
Description:Smadav USB Antivirus & Additional Protection
Typical file path:C:\Program Files\smadav\smδrtp.exe
Original name:Smadav 2013 Rev. 9.3.exe
File version:4.93.0001
Size:1.5 MB (1,568,768 bytes)
Build date:5/10/2013 11:11 AM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual Basic
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'SMΔRT-Protection' → C:\Program Files\Smadav\SMΔRTP.exe rtp

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00269785%
0.028634%
Kernel CPU:0.00072073%
0.013761%
User CPU:0.00197713%
0.014873%
Kernel CPU time:7,359 ms/min
100,923,805ms/min
Memory
Private memory:3.8 MB
21.59 MB
Private (maximum):10.42 MB
Private (minimum):9.13 MB
Non-paged memory:3.8 MB
21.59 MB
Virtual memory:89.13 MB
140.96 MB
Virtual memory (peak):261.04 MB
169.69 MB
Working set:9.18 MB
18.61 MB
Working set (peak):11.5 MB
37.95 MB
Resource allocations
Threads:6
12
Handles:209
600
GUI GDI count:76
103
GUI GDI peak:83
142
GUI USER count:56
49
GUI USER peak:58
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:"C:\Program Files\smadav\sm?rtp.exe" rtp
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

ResourcesThreads

Averages
 
SMΔRTP.exe (main module)
Total CPU:0.05811563%
0.272967%
Kernel CPU:0.03494535%
0.107585%
User CPU:0.02317029%
0.165382%
CPU cycles:11,812,339/sec
5,741,424/sec
Memory:1.55 MB
1.16 MB
ntdll.dll
Total CPU:0.00790037%
Kernel CPU:0.00790037%
User CPU:0.00000000%
CPU cycles:707,838/sec
Memory:1.23 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Professional 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
MSI 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE