Should I block it?

No, this file is 100% safe to run.

Additional versions

12.1.2015.2015	14.29%
12.1.2015.2015	14.29%
12.1.1000.157	57.14%
12.1.671.4971	14.29%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

CryptReleaseContext, CryptCreateHash, RegDeleteKeyW, RegEnumValueW, RegOpenKeyExW, RegCreateKeyExW, RegQueryValueExA, CryptHashData, CryptGetHashParam, CryptAcquireContextA, CryptGenRandom, RegCloseKey, QueryServiceStatus, OpenServiceA, OpenSCManagerA, CloseServiceHandle, RegCreateKeyExA, RegSetValueExW, RegOpenKeyW, RegDeleteKeyA, RegCreateKeyA, RegEnumKeyA, RegSetValueExA, RegDeleteValueA, RegEnumValueA, RegOpenKeyExA, RegOpenKeyA, CryptDestroyHash, LookupAccountSidA, OpenProcessToken, OpenThreadToken, GetLengthSid, CopySid, GetTokenInformation, GetSidSubAuthority, GetSidSubAuthorityCount, GetSidIdentifierAuthority, IsValidSid

crypt32.dll

CryptProtectData

kernel32.dll

RaiseException, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, GetProcessHeap, LoadLibraryExW, FreeLibrary, GetProcAddress, GetFileAttributesW, WideCharToMultiByte, OutputDebugStringA, LocalFree, LocalAlloc, GetLastError, GetTickCount, SizeofResource, LockResource, LoadResource, FindResourceA, FindResourceExA, GetCurrentProcessId, GetCurrentThreadId, Sleep, MultiByteToWideChar, CloseHandle, CreateEventA, CreateFileW, WaitForMultipleObjects, SetEvent, WaitForSingleObject, FormatMessageA, InterlockedIncrement, InterlockedDecrement, lstrlenA, InitializeCriticalSection, DeleteCriticalSection, HeapSize, LeaveCriticalSection, GetModuleHandleA, LoadLibraryA, ReleaseMutex, CreateMutexA, OpenMutexA, GetSystemTimeAsFileTime, FindFirstFileW, FindNextFileW, FindClose, SystemTimeToFileTime, GetFileAttributesA, SetFileAttributesA, GetCurrentProcess, EnterCriticalSection, GetVersionExA, GetModuleFileNameA, GetEnvironmentVariableA, QueryPerformanceFrequency, QueryPerformanceCounter, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, InterlockedExchange, DecodePointer, EncodePointer, InitializeCriticalSectionAndSpinCount, GetExitCodeThread, FindResourceW, FindResourceExW, SetLastError, lstrlenW, GetComputerNameA, GetCurrentThread

msvcp100.dll

DllMain

msvcp90.dll

DllMain

msvcr100.dll

DllMain

msvcr90.dll

DllMain

ole32.dll

CoTaskMemFree, CoInitialize, CoUninitialize, CoInitializeEx, CoCreateInstance, CoCreateGuid

pdh.dll

PdhLookupPerfNameByIndexA, PdhAddCounterA, PdhCollectQueryData, PdhGetRawCounterValue, PdhCloseQuery, PdhOpenQueryA, PdhMakeCounterPathA, PdhRemoveCounter

shlwapi.dll

PathAddBackslashW

user32.dll

CharNextA, GetSystemMetrics

Export table

AddNewCommand

Destroy

GetFactory

GetForwardingEnabled

GetObjectCount

GetOpStateObject

ParsePolicyXml

RefreshCommandStatus

SetForwardingEnabled

StartEventForwarder

StartEventForwarderEx

StopEventForwarder

AvPluginImpl.dll

Symantec Endpoint Protection by Symantec Corporation (Signed)

Remove AvPluginImpl.dll

Version:	12.1.2015.2015
MD5:	84b5c77a4604fd03ee66f4dd849e6db6
SHA1:	d2e255715517e8d65e5b0ac3f310e2ed4dff7a3d

Overview

avpluginimpl.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program Symantec Endpoint Protection published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	avpluginimpl.dll
Publisher:	Symantec Corporation
Product name:	Symantec Endpoint Protection
Description:	AvPluginImpl
Typical file path:	C:\Program Files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\avpluginimpl.dll
File version:	12.1.2015.2015
Size:	341.45 KB (349,648 bytes)
Build date:	11/3/2012 10:56 PM
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Wednesday, September 8, 2010
Expiration date:	Sunday, November 24, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following program will install this file

Symantec Endpoint Protection

Symantec Corporation

9% remove

“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...”