AVP.exe
Kaspersky Anti-Virus by Kaspersky Lab (Signed)
| Version: | 9.1.0.124 |
| MD5: | a2b790f9a751f24f17967f9a5574186d |
| SHA1: | d2493929f9906f6f8d0b2d2e909697538fa24d67 |
| SHA256: | 21ae87fd5bc85036cd47562a4a3f1adbb64befd2199ad3a5329578fab7b61f7a |
Overview
avp.exe runs as a service under the name Kaspersky PURE (AVP) with extensive SYSTEM privileges (full administrator access). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Dell PhotoStage published by ArcSoft. The file is digitally signed by Kaspersky Lab which was issued by the VeriSign certificate authority (CA).
Details
| File name: | avp.exe |
| Publisher: | Kaspersky Lab |
| Product name: | Kaspersky Anti-Virus |
| Typical file path: | C:\Program Files\kaspersky lab\kaspersky internet security 2010\avp.exe |
| File version: | 9.1.0.124 |
| Size: | 340.59 KB (348,760 bytes) |
| Build date: | 10/1/2010 1:25 PM |
| Certificate |
| Issued to: | Kaspersky Lab |
| Authority (CA): | VeriSign |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“Stage delivers photos, videos, music, Web pages and more right to your fingertips, with your most recent content always front and center. You’ll effortlessly toggle between photos, videos, music, Web pages and more. Want to listen to the new song you played this morning or watch the rest of the video you saw last night? Just select your music or video tile and your content is right there, without needing to search through your folders t...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'AVP' → "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\avp.exe"
Network connections
[TCP] d3-1-0-0-27-0.a03.nycmny01.us.ra.verio.net (165.254.94.105:80)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00012398% | |
| Kernel CPU: | 0.00004136% | |
| User CPU: | 0.00008261% | |
| Kernel CPU time: | 2,070,289 ms/min | |
| CPU cycles: | 6,840,997/sec | |
| Memory |
| Private memory: | 153.66 MB | |
| Private (maximum): | 155.77 MB | |
| Private (minimum): | 1.87 MB | |
| Non-paged memory: | 153.66 MB | |
| Virtual memory: | 356.85 MB | |
| Virtual memory (peak): | 552.53 MB | |
| Working set: | 56.06 MB | |
| Working set (peak): | 210 MB | |
| Page faults: | 152,917,508/min | |
| I/O |
| I/O read transfer: | 1.14 MB/sec | |
| I/O read operations: | 270/sec | |
| I/O write transfer: | 664.73 KB/sec | |
| I/O write operations: | 2,798/sec | |
| I/O other transfer: | 1.34 MB/sec | |
| I/O other operations: | 2,549/sec | |
| Resource allocations |
| Threads: | 46 | |
| Handles: | 1876 | |
| GUI GDI count: | 49 | |
| GUI GDI peak: | 439 | |
| GUI USER count: | 27 | |
| GUI USER peak: | 160 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\kaspersky lab\kaspersky pure\avp.exe" -r
- "C:\Program Files\kaspersky lab\kaspersky pure\avp.exe"
|
| Owner: | SYSTEM |
| Windows Service |
| Service name: | AVP |
| Display name: | Kaspersky PURE |
| Description: | “Provides computer protection against viruses, dangerous software, network attacks, internet fraud and spam.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| avp.exe (main module) |
| Total CPU: | 1.39760702% | |
| Kernel CPU: | 0.64250424% | |
| User CPU: | 0.75510278% | |
| CPU cycles: | 20,937,488/sec | |
| Memory: | 336 KB | |
| ntdll.dll |
| Total CPU: | 0.03411173% | |
| Kernel CPU: | 0.01831773% | |
| User CPU: | 0.01579400% | |
| CPU cycles: | 1,551,382/sec | |
| Memory: | 1.66 MB | |
| wow64.dll (Win32 Emulation on NT64 by Microsoft) |
| Total CPU: | 0.00084420% | |
| Kernel CPU: | 0.00026029% | |
| User CPU: | 0.00058390% | |
| CPU cycles: | 24,690/sec | |
| Memory: | 252 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
50.00% |
|
| Microsoft Windows XP |
33.33% |
|
| Windows 7 Home Premium |
16.67% |
|
Distribution by country
Russia installs about 66.67% of Kaspersky Anti-Virus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
50.00% |
|
| Hewlett-Packard |
16.67% |
|
| GIGABYTE |
16.67% |
|
| American Megatrends |
16.67% |
|
