Versions

4,4,3,64051	6.25%
4,0,3,57478	6.25%
3,6,2,47687	6.25%
3,6,2,44641	6.25%
3,4,2,41470	6.25%
3,3,1,33119	6.25%
3,1,1,30291	31.25%
3,1,1,29578	18.75%
3,1,1,28642	6.25%
3,1,1,21903	6.25%

There are 10 versions of bavsvc.exe in the wild, the latest version being 4,4,3,64051. It is started as a Windows Service called 'BAVSvc' with the name 'BAVSvc' and described as “Baidu Antivirus Service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.65 MB. The file is a digitally signed and issued to Baidu Online Network Technology (Beijing)Co. by VeriSign. Some variations of the file have been seen to be installed with the program Baidu Antivirus from Baidu, Inc.. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 14.26 MB. Addionally, typically read and write I/O disk operations is about 151.95 KB per minute for reads and 103 Bytes per minute for writes.