AvastUi.exe
avast! Antivirus by AVAST Software a.s. (Signed)
| Version: | 9.0.2011.263 |
| MD5: | afebf9e0b223ff04709f747c172d3540 |
| SHA1: | 1d6eee952d428627d08bc7a696cf1a75fbccaefb |
Overview
avastui.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including avast! Free Antivirus published by AVAST Software, avast! Pro Antivirus from AVAST Software and avast! Pro Antivirus by AVAST Software. The file is digitally signed by AVAST Software a.s. which was issued by the DigiCert Inc certificate authority (CA).
Details
| File name: | avastui.exe |
| Publisher: | AVAST Software |
| Product name: | avast! Antivirus |
| Typical file path: | C:\Program Files\avast software\avast\avastui.exe |
| File version: | 9.0.2011.263 |
| Size: | 3.59 MB (3,764,024 bytes) |
| Build date: | 12/16/2013 11:34 PM |
| Certificate |
| Issued to: | AVAST Software a.s. |
| Authority (CA): | DigiCert Inc |
| Effective date: | Thursday, July 11, 2013 |
| Expiration date: | Wednesday, September 14, 2016 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Avast! Free Antivirus is a full-featured antivirus and anti-spyware scanning and removal product that offers a web-reputation browser extension as well as virtualization technology. Accurate threat updates via Avast updates are delivered automatically using PUSH update technology.
“Avast Pro Antivirus is for individuals or companies that want customizable computer security that will integrate easily with an existing firewall. It has all the features of Avast Free Antivirus, plus a command-line scanner, full-scale virtualization, and the new Avast SafeZone (a clean, isolated desktop, so that other applications--even keyloggers--cannot see what's happening), designed specifically for secure online shopping or bankin...”
“avast! Internet Security provides complete antivirus, anti-spyware, antispam, and firewall protection, complemented by avast! SafeZone™ and new hybrid cloud technologies, for best protection against viruses, spyware, and other types of malware. SafeZone creates a private and isolated virtual window on your desktop for safely making your sensitive financial transactions when shopping or banking online.”
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'avast5' → "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
- 'AvastUI.exe' → "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
User start menu folder
Shortcut pointer placed in '%appdata%\Microsoft\Windows\Start Menu'
- Shortcut to 'avastui.exe'
Scheduled tasks
- The job '{CB5ADC7C-4068-40D2-A566-CC9C33284650}' runs on registration in the path '\{CB5ADC7C-4068-40D2-A566-CC9C33284650}'
- The job '{A179C8A8-D5FB-4462-B06A-0F05BE77859E}' runs on registration in the path '\{A179C8A8-D5FB-4462-B06A-0F05BE77859E}'
- The job '{1C69521F-CCE3-43C0-9CBE-2C42C7F1655F}' runs on registration in the path '\{1C69521F-CCE3-43C0-9CBE-2C42C7F1655F}'
- The job '{0628E510-6D5C-4A6E-9131-7028E1FB1EBF}' runs on registration in the path '\{0628E510-6D5C-4A6E-9131-7028E1FB1EBF}'
Network connections
[TCP] avast.co.jp.ssl.ldc.d3.sc.omtrdc.net (63.140.40.220:443)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00155689% | |
| Kernel CPU: | 0.00129896% | |
| User CPU: | 0.00025793% | |
| Kernel CPU time: | 4,820,800 ms/min | |
| CPU cycles: | 1,238,329/sec | |
| Context switches: | 29/sec | |
| Memory |
| Private memory: | 28.53 MB | |
| Private (maximum): | 26.74 MB | |
| Private (minimum): | 8.95 MB | |
| Non-paged memory: | 28.53 MB | |
| Virtual memory: | 221.9 MB | |
| Virtual memory (peak): | 255.19 MB | |
| Working set: | 19.02 MB | |
| Working set (peak): | 37.68 MB | |
| Page faults: | 204,412/min | |
| I/O |
| I/O read transfer: | 2.75 KB/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 48 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 3.56 KB/sec | |
| I/O other operations: | 236/sec | |
| Resource allocations |
| Threads: | 33 | |
| Handles: | 503 | |
| GUI GDI count: | 222 | |
| GUI GDI peak: | 264 | |
| GUI USER count: | 64 | |
| GUI USER peak: | 72 | |
Process properties
Threads
Averages
| wow64win.dll |
| Total CPU: | 0.01296800% | |
| Kernel CPU: | 0.01107393% | |
| User CPU: | 0.00189407% | |
| CPU cycles: | 301,126/sec | |
| Context switches: | 3/sec | |
| Memory: | 360 KB | |
| ntdll.dll |
| Total CPU: | 0.00147555% | |
| Kernel CPU: | 0.00027982% | |
| User CPU: | 0.00119573% | |
| CPU cycles: | 54,313/sec | |
| Memory: | 1.66 MB | |
| AvastUI.exe (main module) |
| Total CPU: | 0.00031902% | |
| Kernel CPU: | 0.00016463% | |
| User CPU: | 0.00015440% | |
| CPU cycles: | 122,069/sec | |
| Context switches: | 1/sec | |
| Memory: | 3.59 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
34.65% |
|
| Windows 7 Ultimate |
16.54% |
|
| Windows 8.1 |
11.81% |
|
| Windows 7 Professional |
5.51% |
|
| Windows 8.1 Pro |
5.51% |
|
| Windows 8 |
4.72% |
|
| Microsoft Windows XP |
3.94% |
|
| Windows 8 Pro |
3.15% |
|
| Windows 8 Single Language |
2.36% |
|
| Windows 7 Home Basic |
2.36% |
|
| Windows 8 Enterprise Evaluation |
2.36% |
|
| Windows 8.1 Enterprise |
2.36% |
|
| Windows 8.1 Single Language |
1.57% |
|
| Windows Vista Home Premium |
1.57% |
|
| Windows 8 Enterprise |
0.79% |
|
| Windows 7 Starter |
0.79% |
|
Distribution by country
United States installs about 33.07% of avast! Antivirus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
18.50% |
|
| Hewlett-Packard |
16.18% |
|
| ASUS |
13.87% |
|
| Toshiba |
13.87% |
|
| Acer |
12.72% |
|
| Lenovo |
10.40% |
|
| GIGABYTE |
6.94% |
|
| Alienware |
2.31% |
|
| Intel |
2.31% |
|
| Samsung |
1.73% |
|
| Sahara |
1.16% |
|
