Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.0.1497.376 11.80%
8.0.1489.300 20.00%
8.0.1488.286 0.16%
8.0.1483.72 7.54%
8.0.1482.45 3.93%
7.0.1474.765 45.08%
7.0.1473.755 1.15%
7.0.1466.549 5.41%
7.0.1456.418 0.82%
7.0.1455.186 0.16%
7.0.1451.402 0.16%
7.0.1426.0 2.13%
7.0.1407.0 0.49%
6.0.1367.0 0.49%
6.0.1125.0 0.16%
6, 0, 999, 0 0.49%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
aavmrpch.dll
AavmRpcRunSystemComponent, AavmRpcCreateBinding, AavmRpcDestroyBinding, AavmRpcRunComponent
advapi32.dll
CloseServiceHandle, RegQueryValueExA, IsTextUnicode, AllocateAndInitializeSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, OpenThreadToken, EqualSid, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegOpenKeyW, RegEnumValueW, OpenServiceW, OpenSCManagerW, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, RegOpenKeyExA, RegSetValueExW, RegDeleteValueW
ashbase.dll
_basShouldSubmit@4, _basGetLanguage@4, _basGetErrorString@12, _basWriteProfileString@12, _basIsComponentInstalled@4, _basFullscreenAppRunning@0, _basGetRegistrationInfo@20, _basGetCurrentProductLicenseInfo@28, _basInitLibrary@4, _basFriendlyShieldName@12, _basGetBaseLang@0, _basFreeLibrary@0, _basA2U@16, _basGetLockData@12, _basGetProductLicenseInfo@32, _basGetLicenseFile@8, _basProductInfo@0, _basGetProfileInt@12, _basDoFitFileName@12, _strDecode@12, _strEncode@12, _basValidatePath@8, _basCreatePath@16, _basEnableWriteAccessToEveryone@4, _CallOnSecureDesktop@12, _basFormatNumber@16, _notEvent@4, _basResPwdCheck@4, _basGetComputerName@0, _notRemEvent@4, _notFree@0, _basCheck@0, _notInit@0, _notAddEvent@12, _basInitThreadLocale@0, _basGetProfileString@20, _basDeleteValue@8, _basStoreDWORDValue@12, _basSendAutoRegInfo@8, _notAddEventId@16, _notEventId@8, _basGetLicenseFileCommon@12
ashtask.dll
_tskInitLibrary@8, _tskFreeLibrary@0, _tskFreeData@4, _tskExecData@16, _tskAddArea@8
aswcmnbs.dll
fsGetAvastDataPath, fsGetAvastLogPath, fsGetAvastSumpPath, secPreventHookDllInjection, secCreateSharedEvent, secOpenSharedEvent, iniGetPrivateProfileString, fsGetAvastProgramPath, secCreateSharedMutex, fsGetAvastTempFileName, iniGetPrivateProfileInt, iniWritePrivateProfileInt, iniWritePrivateProfileString, cmnbFree, cmnbInit
aswcmnis.dll
cyphSimpleCode, inflateInit_, inflate, inflateEnd, deflateEnd, deflate, inflateReset, deflateReset, deflateInit2_, crcGenerate32c, mdaGenerate
aswcmnos.dll
dep_osIsWow64, dep_fsGetFileSizeHandle, dep_fsReadFile, dep_fsCloseFile, dep_osIsWinVistaOrBetter, dep_osIsWinXPOrBetter, dep_osIsWin64, dep_secGetPublicSecurity, dep_fsEnableWow64FsRedirection, dep_fsWriteFile, dep_fsExistFile, dep_fsRemoveFolderRecursive, dep_fsDeleteFileX, dep_fsOpenFileX, dep_osIsWin8OrBetter, dep_fsCopyFile, dep_procGetFileName
aswlog.dll
logDebugA, _logFree@0, _logInit@8
aswproperty.dll
aswGetPropertyInt, aswGetProperty, aswPropertyFreeLibrary, aswGetAvastPropertyInt, aswPropertyInitLibrary, aswGetIntFromCache, aswGetStrFromCache, aswSetAvastProperty, aswGetAvastProperty, aswSetPropertyInt, aswSetProperty
comctl32.dll
_TrackMouseEvent, ImageList_Draw, ImageList_GetImageInfo, ImageList_DrawEx, ImageList_GetIconSize
comdlg32.dll
GetOpenFileNameW
crypt32.dll
CertCreateCertificateContext, CertFreeCertificateContext
cryptui.dll
CryptUIDlgViewCertificateW
dnsapi.dll
DnsRecordListFree, DnsQuery_W, DnsQuery_A
gdi32.dll
SetWindowOrgEx, SetLayout, BitBlt, SetViewportOrgEx, GetTextMetricsA, SetWindowExtEx, GetWindowExtEx, SetTextColor, DeleteDC, SetBkColor, GetObjectW, LPtoDP, ExcludeClipRect, CreateCompatibleDC, CreateRectRgnIndirect, DPtoLP, CombineRgn, SetMapMode, CreateCompatibleBitmap, GetMapMode, SaveDC, GetClipBox, SetViewportExtEx, GetViewportExtEx, GetObjectA, GetStockObject, RestoreDC, CreateSolidBrush, DeleteObject, CreateRoundRectRgn, SelectObject, GetDeviceCaps, SetTextAlign, GetTextAlign, GetTextExtentPointW, TextOutA, TextOutW, GetPixel, IntersectClipRect, RectVisible, CreatePen, CreatePatternBrush, GetTextExtentExPointW, Rectangle, SetBkMode, CreateBitmap, SetPixel, Polygon, GetCurrentPositionEx, ExtCreatePen, Polyline, PtVisible, ExtTextOutW, Escape, CreateFontIndirectW, GetCurrentObject, SetBrushOrgEx, CreateDIBPatternBrushPt, CreateDIBSection, StretchBlt, GetDIBits, StretchDIBits, SetStretchBltMode, CreateFontA, EnumFontFamiliesExA, AddFontMemResourceEx, EnumFontFamiliesExW, GetWindowOrgEx, CreateHatchBrush, GetTextExtentPoint32A, GetTextExtentPoint32W, PatBlt, GetDeviceGammaRamp, SetDeviceGammaRamp, GetKerningPairsA, GetGlyphOutlineW, AddFontResourceExW
kernel32.dll
GetLocaleInfoA, TlsGetValue, GetCurrentProcess, QueryPerformanceCounter, QueryPerformanceFrequency, InterlockedIncrement, DeleteCriticalSection, FreeLibrary, GetProcAddress, LoadLibraryA, GetSystemDirectoryA, GetLocaleInfoW, IsBadReadPtr, MulDiv, FlushFileBuffers, SetEvent, GetProcessHeap, TlsSetValue, GetExitCodeProcess, CallNamedPipeW, CreateProcessW, HeapFree, WriteFile, ReadFile, ConnectNamedPipe, TerminateThread, WaitForSingleObject, ExitThread, GetPrivateProfileStringW, GetSystemTime, LocalFree, CreateDirectoryW, LocalAlloc, GetUserDefaultLCID, VirtualFree, ExpandEnvironmentStringsA, Process32NextW, Process32FirstW, LCMapStringW, FindResourceExW, LocalUnlock, CreateFileMappingA, FlushViewOfFile, SetEndOfFile, UnmapViewOfFile, MapViewOfFile, GetThreadLocale, GetVersionExA, GlobalAlloc, SetThreadLocale, GetCPInfo, GetCurrencyFormatW, DeleteFileA, MoveFileA, SetLastError, GetShortPathNameA, CreateEventA, VirtualAlloc, GetVersionExW, DeviceIoControl, CreateFileW, GetDiskFreeSpaceExW, GetVolumeInformationW, GetDriveTypeW, GetLogicalDrives, Sleep, GetLastError, FileTimeToLocalFileTime, FileTimeToSystemTime, GetTimeFormatW, GetDateFormatW, CreateThread, CloseHandle, InitializeCriticalSection, GetACP, EnterCriticalSection, LeaveCriticalSection, WideCharToMultiByte, MultiByteToWideChar, GetTickCount, DeleteFileW, GetTempFileNameW, GetTempPathW, HeapAlloc, WaitForMultipleObjects, InterlockedExchange, InitializeCriticalSectionAndSpinCount, LoadLibraryW, OpenEventW, TerminateProcess, ExitProcess, GetPrivateProfileIntW, GetModuleFileNameW, ExpandEnvironmentStringsW, GetCurrentThreadId, GetCommandLineW, GetCurrentProcessId, CopyFileW, GlobalLock, GlobalUnlock, SetThreadPriority, GetSystemInfo, WaitNamedPipeW, LoadLibraryExW, GetShortPathNameW, FindFirstFileW, FindNextFileW, FindClose, GetSystemDirectoryW, GetWindowsDirectoryW, CreateEventW, GetNumberFormatW, GetFileAttributesW, GetLocalTime, SetFilePointer, GetFileSize, SystemTimeToFileTime, GetSystemTimeAsFileTime, InterlockedDecrement, DisconnectNamedPipe, GetUserDefaultLangID, CreateIoCompletionPort, CreateNamedPipeW, GetQueuedCompletionStatus, GetTempFileNameA, TlsAlloc, GetTempPathA, FindResourceA, FindResourceW, LoadResource, SizeofResource, LockResource, GetModuleHandleW, GetStringTypeA, GetStringTypeW, ReleaseMutex, lstrcmpiW, lstrcmpW, GetExitCodeThread, CreateToolhelp32Snapshot, OutputDebugStringW, OpenProcess, GetCurrentThread, RaiseException, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, IsDebuggerPresent, SetProcessWorkingSetSize, DllMain, GetVersion, CreateMutexW, MoveFileExW, ResumeThread, WritePrivateProfileStringW
mfc90u.dll
DllMain
msimg32.dll
GradientFill
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoCreateGuid, CoTaskMemFree, StringFromCLSID, CoInitialize, CoCreateInstance, CoUninitialize, StringFromGUID2, CoInitializeEx, CLSIDFromString
oleacc.dll
CreateStdAccessibleObject, AccessibleObjectFromWindow, LresultFromObject
psapi.dll
GetModuleFileNameExW, EnumProcessModules, EnumProcesses
rpcrt4.dll
RpcBindingFromStringBindingW, RpcStringFreeW, RpcBindingFree, RpcStringBindingComposeW, UuidCreate, NdrConformantArrayMarshall, RpcRaiseException, NdrClientInitializeNew, NdrConformantArrayBufferSize, NdrFreeBuffer, NdrGetBuffer, NdrConformantStringBufferSize, NdrConformantArrayUnmarshall, NdrSendReceive, NdrConvert, NdrConformantStringMarshall, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, I_RpcGetBuffer, NdrAllocate, NdrServerInitializeNew, NdrConformantStringUnmarshall, NdrPointerFree, RpcAsyncInitializeHandle, RpcBindingSetAuthInfoExA, RpcAsyncCancelCall, RpcBindingFromStringBindingA, RpcStringBindingComposeA, RpcAsyncCompleteCall, NdrAsyncClientCall, NdrClientCall2, RpcStringFreeA
shell32.dll
SHGetPathFromIDListW, SHGetFileInfoW, SHChangeNotify, SHGetDesktopFolder, SHGetMalloc, SHGetSpecialFolderLocation, Shell_NotifyIconW, SHBrowseForFolderW, ShellExecuteW, ShellExecuteExW, SHGetFolderPathW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathCompactPathW, ColorHLSToRGB, ColorRGBToHLS, PathIsDirectoryW, UrlCombineA
urlmon.dll
FindMimeFromData
user32.dll
DllMain
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winhttp.dll
WinHttpSetOption, WinHttpSendRequest, WinHttpConnect, WinHttpCloseHandle, WinHttpSetTimeouts, WinHttpOpen, WinHttpOpenRequest, WinHttpReadData, WinHttpReceiveResponse, WinHttpQueryOption, WinHttpQueryHeaders
wininet.dll
InternetReadFile, InternetCombineUrlA, HttpOpenRequestA, InternetGetLastResponseInfoA, InternetOpenA, InternetCloseHandle, InternetQueryOptionA, InternetConnectA, HttpQueryInfoA, HttpSendRequestA, InternetCrackUrlW, InternetSetOptionA, InternetCanonicalizeUrlW, InternetSetOptionW, InternetConnectW, HttpOpenRequestW, HttpSendRequestW, InternetOpenW
winmm.dll
timeSetEvent, timeKillEvent, timeGetTime, timeGetDevCaps, PlaySoundA

AvastUi.exe

avast! Antivirus by AVAST Software (Signed)

Remove AvastUi.exe
Version:   7.0.1455.186
MD5:   34a3539b15a361f2a92e28c3124d148d
SHA1:   6a76f3a0216915401457b7104bd094bdf22a9369
SHA256:   c1048f22f578a49430ab4d188099b3bb907a33a484dbd287e51e3aff937479ab

What is AvastUi.exe?

avast! Antivirus is a full-featured antivirus and anti-spyware scanning and removal product. Avast offers a web-reputation browser extension as well as virtualization technology. Accurate threat updates via avast updates are delivered automatically using PUSH update technology in Avast! Antivirus.

About AvastUi.exe (from AVAST Software)

Free antivirus with anti-spyware protection for Windows. AVAST Software leads the security software industry – protecting 160 million PCs, Macs and Mobiles around the globe – by distributing FREE anti

DetailsDetails

File name:avastui.exe
Publisher:AVAST Software
Product name:avast! Antivirus
Typical file path:C:\Program Files\avast software\avast\avastui.exe
File version:7.0.1455.186
Size:4.05 MB (4,251,328 bytes)
Certificate
Issued to:AVAST Software
Authority (CA):VeriSign
Expiration date:Friday, January 31, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'avast5' → C:\Program Files1\ALWILS~1\Avast5\avastUI.exe /nogui
  • 'avast' → "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
Scheduled tasks
  • Entry path '\{BE644B67-0FC9-4E09-8921-3C92C4187F59}'
  • Entry path '\{A2010245-7908-40CE-A115-79DFB422FB5C}'
  • Entry path '\{83E22DC4-C629-429D-A5B9-3DBF2B43476D}'
  • Entry path '\{59B20A91-C364-4477-841A-79D826383F80}'
  • Entry path '\{D9C949DF-1FF9-49D3-92E4-FF09ADEE4B9E}'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\AVAST Software\Avast\AvastUI.exe'
  • Firewall exception for 'C:\Programmer\Alwil Software\Avast5\AvastUI.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00128896%
0.028634%
Kernel CPU:0.00017474%
0.013761%
User CPU:0.00111421%
0.014873%
Kernel CPU time:1,094 ms/min
100,923,805ms/min
CPU cycles:426,292/sec
17,470,203/sec
Memory
Private memory:10.2 MB
21.59 MB
Private (maximum):10.86 MB
Private (minimum):2.85 MB
Non-paged memory:10.2 MB
21.59 MB
Virtual memory:119.04 MB
140.96 MB
Virtual memory (peak):134.47 MB
169.69 MB
Working set:4.68 MB
18.61 MB
Working set (peak):12.92 MB
37.95 MB
Page faults:79,977/min
2,039/min
I/O
I/O read transfer:9.09 KB/sec
1.02 MB/min
I/O read operations:4/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:671 Bytes/sec
448.09 KB/min
I/O other operations:55/sec
1,671/min
Resource allocations
Threads:16
12
Handles:279
600
GUI GDI count:74
103
GUI GDI peak:138
142
GUI USER count:21
49
GUI USER peak:26
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:"C:\Program Files\avast software\avast\avastui.exe" /nogui
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

ResourcesThreads

Averages
 
AvastUI.exe (main module)
Total CPU:0.00516236%
0.272967%
Kernel CPU:0.00090927%
0.107585%
User CPU:0.00425309%
0.165382%
CPU cycles:153,878/sec
5,741,424/sec
Memory:4.05 MB
1.16 MB
aavm4h.dll (avast! Antivirus by AVAST Software)
Total CPU:0.00014665%
Kernel CPU:0.00014665%
User CPU:0.00000000%
CPU cycles:49,745/sec
Memory:356 KB
WINMM.dll
Total CPU:0.00010067%
Kernel CPU:0.00003356%
User CPU:0.00006711%
CPU cycles:3,516/sec
Memory:200 KB
MSVCR90.dll
Total CPU:0.00002933%
Kernel CPU:0.00000000%
User CPU:0.00002933%
CPU cycles:983/sec
Memory:652 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 29.00%
Windows 7 Ultimate 23.50%
Microsoft Windows XP 17.00%
Windows 7 Professional 10.00%
Windows Vista Home Premium 5.50%
Windows 8 4.00%
Windows 8 Pro 3.00%
Windows Vista Home Basic 2.00%
Windows 7 Home Basic 2.00%
Windows Vista Business 1.00%
Windows 7 Enterprise 1.00%
Windows Seven Black Edition 1.00%
Windows 7 Starter 1.00%

Distribution by countryDistribution by country

United States installs about 31.66% of avast! Antivirus.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 21.29%
Toshiba 15.97%
Hewlett-Packard 13.69%
Acer 12.93%
ASUS 10.65%
Intel 7.60%
Lenovo 4.56%
Samsung 3.80%
American Megatrends 2.28%
GIGABYTE 1.90%
Sony 1.52%
MSI 1.52%
Medion 1.52%
Packard Bell 0.76%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE