AVP.exe
Kaspersky Anti-Virus by Kaspersky Lab (Signed)
| Version: | 6.0.4.1424 |
| MD5: | 5e3f0aaea4642bf184deea311c7201de |
| SHA1: | 7f1984a24c8e2e9888a1de1774d072027040ae62 |
| SHA256: | 5bc4e0930f7d303f6bdf71d2ae9de10ea53b5cfdff456b16f842e26a80b86fba |
Overview
avp.exe runs as a service under the name Kaspersky PURE (AVP) within the local user context. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Kaspersky Anti-Virus 6.0 for Windows Workstations published by Kaspersky Lab. The file is digitally signed by Kaspersky Lab which was issued by the VeriSign certificate authority (CA).
Details
| File name: | avp.exe |
| Publisher: | Kaspersky Lab |
| Product name: | Kaspersky Anti-Virus |
| Typical file path: | C:\Program Files\kaspersky lab\kaspersky internet security 2010\avp.exe |
| File version: | 6.0.4.1424 |
| Size: | 304.38 KB (311,680 bytes) |
| Build date: | 3/12/2010 9:42 PM |
| Certificate |
| Issued to: | Kaspersky Lab |
| Authority (CA): | VeriSign |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“Kaspersky Anti-Virus for Windows Workstations 6.0 provides centralized protection of all workstations on a corporate network, and pushes protection beyond the office network to reach remote and laptop users. The solution provides comprehensive protection from all types of contemporary cyber threats, including viruses, spyware, hacker attacks and spam.All incoming and outgoing files and data streams on workstations are scanned for malici...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'AVP' → "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\avp.exe"
Network connections
[TCP] srv39-131.vkontakte.ru (87.240.134.39:80)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00056804% | |
| Kernel CPU: | 0.00026108% | |
| User CPU: | 0.00030696% | |
| Kernel CPU time: | 1,794,012 ms/min | |
| Context switches: | 74/sec | |
| Memory |
| Private memory: | 215.53 MB | |
| Private (maximum): | 37.43 MB | |
| Private (minimum): | 15.51 MB | |
| Non-paged memory: | 215.53 MB | |
| Virtual memory: | 380.19 MB | |
| Virtual memory (peak): | 446.02 MB | |
| Working set: | 19 MB | |
| Working set (peak): | 196.03 MB | |
| Resource allocations |
| Threads: | 42 | |
| Handles: | 4253 | |
| GUI GDI count: | 30 | |
| GUI GDI peak: | 118 | |
| GUI USER count: | 20 | |
| GUI USER peak: | 48 | |
Process properties
| Integrety level: | High |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\kaspersky lab\kaspersky anti-virus 6.0 for windows workstations mp4\avp.exe"
- "C:\Program Files\kaspersky lab\kaspersky anti-virus 6.0 for windows workstations mp4\avp.exe" -r
|
| Owner: | User |
| Windows Service |
| Service name: | AVP |
| Display name: | Kaspersky PURE |
| Description: | “Provides computer protection against viruses, dangerous software, network attacks, internet fraud and spam.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
50.00% |
|
| Microsoft Windows XP |
33.33% |
|
| Windows 7 Home Premium |
16.67% |
|
Distribution by country
Russia installs about 66.67% of Kaspersky Anti-Virus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
50.00% |
|
| Hewlett-Packard |
16.67% |
|
| GIGABYTE |
16.67% |
|
| American Megatrends |
16.67% |
|
