Should I block it?

No, this file is 100% safe to run.

Additional versions

15.5.0.23	25.00%
15.0.0.58	50.00%
14.2.0.29	25.00%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, GetUserNameW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegOpenKeyExA

kernel32.dll

InterlockedExchange, DisableThreadLibraryCalls, InterlockedIncrement, InterlockedDecrement, FreeLibrary, LoadLibraryW, lstrcatW, GetLastError, GetTempPathW, GetPrivateProfileStringW, GetProcAddress, lstrlenW, LoadLibraryExW, LocalAlloc, FormatMessageW, GetFileAttributesW, GetModuleHandleW, SetThreadPriority, GetTickCount, RaiseException, InitializeCriticalSection, WaitForSingleObject, lstrcpyA, lstrlenA, LoadLibraryExA, CloseHandle, WriteFile, ReadFile, GetFileSize, CreateFileW, SetFilePointer, GlobalAlloc, GlobalFree, FileTimeToSystemTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileAttributesW, GetFileAttributesExW, GetSystemTime, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, ExitProcess, GetProcessHeap, LocalFree, FindResourceExW, FindResourceW, LoadResource, LockResource, DeleteCriticalSection, SizeofResource, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, LeaveCriticalSection, EnterCriticalSection, GetVersionExA, LoadLibraryA, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, GetTempFileNameW, lstrcmpiW, MultiByteToWideChar, GetModuleFileNameW, GetModuleHandleA, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, GetThreadLocale, GetLocaleInfoA, GetACP

msvcp71.dll

DllMain

msvcp80.dll

DllMain

msvcr71.dll

DllMain

msvcr80.dll

DllMain

ole32.dll

CoCreateGuid, CoCreateInstance, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc

shell32.dll

SHGetSpecialFolderPathA

shlwapi.dll

PathAddBackslashW, PathAppendW, PathRemoveBackslashA, PathAddBackslashA

user32.dll

GetSystemMetrics, wsprintfA, wsprintfW, CharNextW, UnregisterClassA

Export table

GetFactory

GetObjectCount

AVSubmit.dll

Norton AntiVirus by Symantec Corporation (Signed)

Remove AVSubmit.dll

Version:	14.2.0.29
MD5:	60d5cf9370081090f760d1d1e05e159b
SHA1:	5c118d6a079137ea5cafa01f39b3e23180065d4c
SHA256:	011f13927e3c89a242bff1811e9fab09c2510a6c44815ed48c6ba98e30b56f40

Overview

avsubmit.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Norton AntiVirus Online (Symantec Corporation) published by Symantec Corporation and Norton AntiVirus (Symantec Corporation) published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	avsubmit.dll
Publisher:	Symantec Corporation
Product name:	Norton AntiVirus
Description:	Norton AntiVirus AnitVirus Submission Module
Typical file path:	C:\Program Files\norton internet security\norton antivirus\avsubmit.dll
File version:	14.2.0.29
Product version:	14.2.0
Size:	261.61 KB (267,888 bytes)
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Sunday, September 10, 2006
Expiration date:	Saturday, November 24, 2007
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 7.1
.NET CLR:	No

More details

Programs

The following programs will install this file

Norton AntiVirus Online Symantec Corporation

Symantec Corporation

10% remove

“Norton AntiVirus Online defends your PC against viruses, spyware, bots, worms and more without slowing you down.”

Norton AntiVirus Symantec Corporation

Symantec Corporation

11% remove

“Basic antivirus protection that stops viruses and spyware, so you can safely go online and share. Five patented layers of protection quickly and accurately detect and eliminate viruses and spyware. Protects your privacy and prevents your passwords and identity from being stolen when you surf the Web. Deep clean your PC – our powerful Threat-Removal Layer targets and scrubs out aggressive, hard-to-remove infections that less sophisticate...”