Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

10.00.01.59 82.61%
10.00.01.59 4.35%
10.00.01.43 4.35%
9.00.01.32 4.35%
9.00.01.26 4.35%

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegSetValueExW, RegDeleteValueW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryValueExA, RegCreateKeyExW, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, GetSecurityDescriptorDacl, AdjustTokenPrivileges, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, SetSecurityInfo, AllocateAndInitializeSid, DuplicateTokenEx, GetSecurityInfo, LookupPrivilegeValueW, SetTokenInformation, CreateProcessAsUserW, EqualSid, GetTokenInformation, GetSidSubAuthorityCount, GetUserNameW, GetSidSubAuthority, OpenProcessToken, GetSidIdentifierAuthority, LookupAccountSidW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, QueryServiceStatus, StartServiceW, OpenServiceW, OpenSCManagerW, CloseServiceHandle, RegOpenKeyExA
kernel32.dll
GetDateFormatW, CopyFileW, GetTimeFormatW, GetCurrentProcess, OpenProcess, GetStartupInfoW, Process32FirstW, Process32NextW, CreateToolhelp32Snapshot, lstrcpynW, lstrlenW, MoveFileW, CreateSemaphoreW, SetFileAttributesW, DeviceIoControl, WaitForMultipleObjects, ConnectNamedPipe, GetModuleHandleW, CreateNamedPipeW, GetVersionExW, GetOverlappedResult, SetLastError, QueryPerformanceFrequency, GetWindowsDirectoryW, WaitForSingleObject, SetEvent, GetLastError, QueryPerformanceCounter, ReleaseSemaphore, GetTickCount, GetExitCodeProcess, GetComputerNameW, SetErrorMode, DeleteFileW, GetCurrentThreadId, GetPrivateProfileIntW, IsBadReadPtr, GetSystemTimeAsFileTime, InterlockedDecrement, InterlockedIncrement, DeleteCriticalSection, QueryDosDeviceW, RemoveDirectoryW, EnterCriticalSection, GetTempPathW, WritePrivateProfileStringW, ReadFile, LeaveCriticalSection, InitializeCriticalSection, WriteFile, GetPrivateProfileStringW, SetEndOfFile, SetFilePointer, CreateMutexW, GetFileSize, GetCurrentProcessId, InterlockedExchangeAdd, GetLocalTime, InterlockedCompareExchange, OpenEventW, LocalAlloc, Sleep, GetProcAddress, GetModuleFileNameW, LoadLibraryW, FreeLibrary, ExpandEnvironmentStringsA, lstrlenA, MultiByteToWideChar, GetExitCodeThread, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoA, InterlockedExchange, LoadLibraryA, GetFileAttributesW, LoadLibraryExW, VerSetConditionMask, VerifyVersionInfoW, CreateEventW, CloseHandle, FormatMessageW, LocalFree, FindFirstFileW, CreateDirectoryW, CreateFileW, FindClose, ResetEvent, CreateProcessW, FindNextFileW
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
OleRun, CoCreateInstance, CLSIDFromProgID, CLSIDFromString, CoUninitialize, CoInitialize
shell32.dll
ShellExecuteW
shlwapi.dll
PathIsDirectoryW
user32.dll
CharUpperW, wsprintfW, LoadStringW, GetForegroundWindow, OemToCharBuffW
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

avguard.exe

AntiVir Desktop by Avira GmbH (Signed)

Remove avguard.exe
Version:   10.00.01.59
MD5:   72d90e56563165984224493069c69ed4
SHA1:   eba9cb3bce962b5c9dc58b30fe7e0191700c22e6
SHA256:   9d279c7842dad567b9501175b91656fa5e6bb23c7cc487531cfcd2a5a3c25b0a

What is avguard.exe?

Antivirus On-Access Service - Avira Antivirus runs as a background process which checks every file opened or downloaded. Like many antivirus programs, it can run a full or custom scan to check the computer for malware in order to remove them. It updates its virus definitions automatically everyday by default using the Internet.

About avguard.exe (from Avira GmbH)

Avira Free Antivirus eliminates many forms of malware including worms, rootkits, and costly dialers. Features include system scanner prevents infection from viruses, worms, and Trojans, blocks new vir

DetailsDetails

File name:avguard.exe
Publisher:Avira GmbH
Product name:AntiVir Desktop
Description:Antivirus On-Access Service
Typical file path:C:\Program Files\avira\antivir desktop\avguard.exe
File version:10.00.01.59
Size:263.16 KB (269,480 bytes)
Certificate
Issued to:Avira GmbH
Authority (CA):VeriSign
Effective date:Tuesday, February 10, 2009
Expiration date:Saturday, February 11, 2012
Digital DNA
PE subsystem:Windows GUI
Entropy:6.532338
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Avira GmbH
24% remove
Avira AntiVir Personal includes a branded version of the Ask.com Toolbar, a web browser extenstion that provides search advertising and results. Upon installation the user is presented with the option to install the Ask toolbar. If accepted, the toolbar will be installed in the user's web browser (Internet Explorer, Chrome and Firefox) and will modify the home page and search settings.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • AntiVirService
  • 'AntiVirService' (Avira AntiVir Guard)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00022687%
0.028634%
Kernel CPU:0.00014059%
0.013761%
User CPU:0.00008628%
0.014873%
Kernel CPU time:1,771,703,357 ms/min
100,923,805ms/min
Memory
Private memory:139.26 MB
21.59 MB
Private (maximum):144.04 MB
Private (minimum):500 KB
Non-paged memory:139.26 MB
21.59 MB
Virtual memory:193 MB
140.96 MB
Virtual memory (peak):292.29 MB
169.69 MB
Working set:24.15 MB
18.61 MB
Working set (peak):202.12 MB
37.95 MB
Resource allocations
Threads:27
12
Handles:167
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\avira\antivir desktop\avguard.exe"
Owner:User
Windows Service
Service name:SYSTEM\CurrentControlSet\Services\AntiVirService
Display name:AntiVirService
Description:“Offers permanent protection against viruses and malware with the AntiVir search engine.”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 38.10%
Windows 7 Ultimate 38.10%
Windows Vista Home Premium 9.52%
Windows 8 4.76%
Windows XP Professional 4.76%
Windows 7 Starter 4.76%

Distribution by countryDistribution by country

United States installs about 25.00% of AntiVir Desktop.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Compaq 26.67%
Dell 26.67%
Acer 20.00%
American Megatrends 13.33%
ASUS 13.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE