Should I block it?

No, this file is 100% safe to run.

Additional versions

10.00.01.59	82.61%
10.00.01.59	4.35%
10.00.01.43	4.35%
9.00.01.32	4.35%
9.00.01.26	4.35%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

avshadow.exe (AntiVir Desktop by Avira GmbH)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegSetValueExW, RegDeleteValueW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryValueExA, RegCreateKeyExW, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, GetSecurityDescriptorDacl, AdjustTokenPrivileges, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, SetSecurityInfo, AllocateAndInitializeSid, DuplicateTokenEx, GetSecurityInfo, LookupPrivilegeValueW, SetTokenInformation, CreateProcessAsUserW, EqualSid, GetTokenInformation, GetSidSubAuthorityCount, GetUserNameW, GetSidSubAuthority, OpenProcessToken, GetSidIdentifierAuthority, LookupAccountSidW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, QueryServiceStatus, StartServiceW, OpenServiceW, OpenSCManagerW, CloseServiceHandle, RegOpenKeyExA

kernel32.dll

GetDateFormatW, CopyFileW, GetTimeFormatW, GetCurrentProcess, OpenProcess, GetStartupInfoW, Process32FirstW, Process32NextW, CreateToolhelp32Snapshot, lstrcpynW, lstrlenW, MoveFileW, CreateSemaphoreW, SetFileAttributesW, DeviceIoControl, WaitForMultipleObjects, ConnectNamedPipe, GetModuleHandleW, CreateNamedPipeW, GetVersionExW, GetOverlappedResult, SetLastError, QueryPerformanceFrequency, GetWindowsDirectoryW, WaitForSingleObject, SetEvent, GetLastError, QueryPerformanceCounter, ReleaseSemaphore, GetTickCount, GetExitCodeProcess, GetComputerNameW, SetErrorMode, DeleteFileW, GetCurrentThreadId, GetPrivateProfileIntW, IsBadReadPtr, GetSystemTimeAsFileTime, InterlockedDecrement, InterlockedIncrement, DeleteCriticalSection, QueryDosDeviceW, RemoveDirectoryW, EnterCriticalSection, GetTempPathW, WritePrivateProfileStringW, ReadFile, LeaveCriticalSection, InitializeCriticalSection, WriteFile, GetPrivateProfileStringW, SetEndOfFile, SetFilePointer, CreateMutexW, GetFileSize, GetCurrentProcessId, InterlockedExchangeAdd, GetLocalTime, InterlockedCompareExchange, OpenEventW, LocalAlloc, Sleep, GetProcAddress, GetModuleFileNameW, LoadLibraryW, FreeLibrary, ExpandEnvironmentStringsA, lstrlenA, MultiByteToWideChar, GetExitCodeThread, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoA, InterlockedExchange, LoadLibraryA, GetFileAttributesW, LoadLibraryExW, VerSetConditionMask, VerifyVersionInfoW, CreateEventW, CloseHandle, FormatMessageW, LocalFree, FindFirstFileW, CreateDirectoryW, CreateFileW, FindClose, ResetEvent, CreateProcessW, FindNextFileW

msvcp90.dll

DllMain

msvcr90.dll

DllMain

ole32.dll

OleRun, CoCreateInstance, CLSIDFromProgID, CLSIDFromString, CoUninitialize, CoInitialize

shell32.dll

ShellExecuteW

shlwapi.dll

PathIsDirectoryW

user32.dll

CharUpperW, wsprintfW, LoadStringW, GetForegroundWindow, OemToCharBuffW

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

avguard.exe

AntiVir Desktop by Avira GmbH (Signed)

Remove avguard.exe

Version:	10.00.01.59
MD5:	df5a3016052755c910a206058b4a1729
SHA1:	81dced513f598fa52809512049eed31cd5de5edc
SHA256:	0e15807370b8ea28002d713490fd8ddd3e7fcfae78477197ce2c0efb5f176896

What is avguard.exe?

Antivirus On-Access Service - Avira Antivirus runs as a background process which checks every file opened or downloaded. Like many antivirus programs, it can run a full or custom scan to check the computer for malware in order to remove them. It updates its virus definitions automatically everyday by default using the Internet.

About avguard.exe (from Avira GmbH)

“Avira Free Antivirus eliminates many forms of malware including worms, rootkits, and costly dialers. Features include system scanner prevents infection from viruses, worms, and Trojans, blocks new vir”

Details

File name:	avguard.exe
Publisher:	Avira GmbH
Product name:	AntiVir Desktop
Description:	Antivirus On-Access Service
Typical file path:	C:\Program Files\avira\antivir desktop\avguard.exe
File version:	10.00.01.59
Size:	263.16 KB (269,480 bytes)
Certificate
Issued to:	Avira GmbH
Authority (CA):	VeriSign
Effective date:	Tuesday, February 10, 2009
Expiration date:	Saturday, February 11, 2012
Digital DNA
PE subsystem:	Windows GUI
Entropy:	6.532338
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following programs will install this file

Avira AntiVir Personal - Free Antivirus

Avira GmbH

24% remove

Avira AntiVir Personal includes a branded version of the Ask.com Toolbar, a web browser extenstion that provides search advertising and results. Upon installation the user is presented with the option to install the Ask toolbar. If accepted, the toolbar will be installed in the user's web browser (Internet Explorer, Chrome and Firefox) and will modify the home page and search settings.

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

AntiVirService
'AntiVirService' (Avira AntiVir Guard)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.02826674%	0.028634%
Kernel CPU:	0.01579726%	0.013761%
User CPU:	0.01246948%	0.014873%
Kernel CPU time:	48,975,565 ms/min	100,923,805ms/min
User CPU time:	161 ms/min	0 ms/min
CPU cycles:	5,279,331/sec	17,470,203/sec
Context switches:	30/sec	284/sec
Memory
Private memory:	141.58 MB	21.59 MB
Private (maximum):	87.71 MB
Private (minimum):	10.38 MB
Non-paged memory:	141.58 MB	21.59 MB
Virtual memory:	206.52 MB	140.96 MB
Virtual memory (peak):	264.57 MB	169.69 MB
Working set:	38.83 MB	18.61 MB
Working set (peak):	194.35 MB	37.95 MB
Page faults:	1,682,456/min	2,039/min
I/O
I/O read transfer:	31.28 MB/sec	1.02 MB/min
I/O read operations:	2,040/sec	343/min
I/O write transfer:	1.45 MB/sec	274.99 KB/min
I/O write operations:	104/sec	227/min
I/O other transfer:	29.86 MB/sec	448.09 KB/min
I/O other operations:	6,067/sec	1,671/min
Resource allocations
Threads:	26	12
Handles:	154	600
GUI GDI count:	6	103
GUI USER count:	1	49

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\avira\antivir desktop\avguard.exe"
Owner:	SYSTEM
Windows Service
Service name:	SYSTEM\CurrentControlSet\Services\AntiVirService
Display name:	AntiVirService
Description:	“Offers permanent protection against viruses and malware with the AntiVir search engine.”
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ADVAPI32.dll
Total CPU:	0.55274956%	0.272967%
Kernel CPU:	0.04767039%	0.107585%
User CPU:	0.50507917%	0.165382%
Context switches:	3/sec	79/sec
Memory:	620 KB	1.16 MB
MSVCR90.dll
Total CPU:	0.17862857%
Kernel CPU:	0.04683999%
User CPU:	0.13178858%
CPU cycles:	2,625,228/sec
Memory:	652 KB
sechost.dll
Total CPU:	0.11284790%
Kernel CPU:	0.02441915%
User CPU:	0.08842875%
CPU cycles:	1,652,988/sec
Memory:	100 KB
wow64.dll
Total CPU:	0.01906038%
Kernel CPU:	0.00222371%
User CPU:	0.01683667%
CPU cycles:	378,652/sec
Memory:	252 KB
avguard.exe (main module)
Total CPU:	0.01271576%
Kernel CPU:	0.00296849%
User CPU:	0.00974726%
CPU cycles:	250,728/sec
Context switches:	1/sec
Memory:	280 KB
avevtlog.dll (AntiVir Desktop by Avira GmbH)
Total CPU:	0.00038945%
Kernel CPU:	0.00033662%
User CPU:	0.00005283%
CPU cycles:	5,555/sec
Memory:	216 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	38.10%
Windows 7 Ultimate	38.10%
Windows Vista Home Premium	9.52%
Windows 8	4.76%
Windows XP Professional	4.76%
Windows 7 Starter	4.76%

Distribution by country

United States installs about 25.00% of AntiVir Desktop.

Distribution by PC manufacturer

PC Manufacturer	distribution
Compaq	26.67%
Dell	26.67%
Acer	20.00%
American Megatrends	13.33%
ASUS	13.33%

Remove Adware and Spyware Programs, FREE Download!