Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegDeleteValueW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, OpenThreadToken, OpenProcessToken, ControlService, DeleteService, CreateServiceW, GetTokenInformation, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, IsValidSid, GetLengthSid, CopySid, RegQueryInfoKeyW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegEnumKeyExW, RegSetValueExW, RegCreateKeyExW, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey
kernel32.dll
lstrcatW, SetEvent, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, GetCommandLineW, WideCharToMultiByte, GetOverlappedResult, DeviceIoControl, CreateFileW, GetSystemInfo, CreateEventW, SetStdHandle, FlushFileBuffers, SetFilePointer, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, GetCPInfo, GetOEMCP, CreateThread, Sleep, GetCurrentThread, WaitForSingleObject, CloseHandle, GetCurrentThreadId, HeapAlloc, GetProcessHeap, HeapFree, GetCurrentProcess, FlushInstructionCache, EnterCriticalSection, LeaveCriticalSection, lstrcpynW, InterlockedExchange, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, GetModuleHandleW, lstrcpyW, lstrcmpiW, lstrlenW, GetLastError, DeleteCriticalSection, InitializeCriticalSection, RaiseException, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, IsBadCodePtr, IsBadReadPtr, TlsGetValue, LoadLibraryA, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStdHandle, WriteFile, TlsSetValue, TlsFree, SetLastError, TlsAlloc, SetUnhandledExceptionFilter, GetModuleFileNameA, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, IsBadWritePtr, VirtualFree, HeapCreate, GetStartupInfoW, GetModuleHandleA, ExitThread, VirtualQuery, VirtualAlloc, VirtualProtect, RtlUnwind, UnhandledExceptionFilter, TerminateProcess, GetVersionExA, HeapDestroy, HeapReAlloc, HeapSize, ExitProcess, GetProcAddress
ole32.dll
StringFromCLSID, CoUninitialize, CoInitialize, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemAlloc, CoTaskMemRealloc, StringFromGUID2, CoCreateInstance, CoInitializeSecurity, CoTaskMemFree
shell32.dll
SHGetFileInfoW
shlwapi.dll
PathFindExtensionW
user32.dll
CharNextW, SetWindowLongW, GetClassInfoExW, UnregisterClassW, LoadCursorW, DestroyWindow, DefWindowProcW, RegisterClassExW, CreateWindowExW, wsprintfW, PostMessageW, MessageBoxW, CharUpperW, LoadStringW, PostThreadMessageW, GetMessageW, DispatchMessageW, TranslateMessage, CallWindowProcW, GetWindowLongW

dvpapi.exe

Command AntiVirus for Windows by Authentium (Signed)

Remove dvpapi.exe
Version:   4,93,3,51102
MD5:   68c9a40ea00417df63f541fd8dfa65a1
SHA1:   2b11156993eca0761584472a4b8b4fa7d407aa70
SHA256:   03e91cfa4714e61f5e09d5b4db203158c5fd9c0017ebcc6e84d0ca0cfddde746

Overview

dvpapi.exe runs as a service under the name dvpapi with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Authentium which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows Vista (TM) Home Premium (6.0.6002.131072).

DetailsDetails

File name:dvpapi.exe
Publisher:Command Software Systems, Inc.
Product name:Command AntiVirus for Windows
Typical file path:C:\Program Files\common files\command software\dvpapi.exe
File version:4,93,3,51102
Product version:4,80,2,30128
Size:139.08 KB (142,416 bytes)
Build date:1/18/2006 1:50 PM
Certificate
Issued to:Authentium
Authority (CA):VeriSign
Effective date:Thursday, November 3, 2005
Expiration date:Saturday, November 4, 2006
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'dvpapi'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00004917%
0.028634%
Kernel CPU:0.00003278%
0.013761%
User CPU:0.00001639%
0.014873%
Kernel CPU time:125 ms/min
100,923,805ms/min
CPU cycles:1,686/sec
17,470,203/sec
Memory
Private memory:1.37 MB
21.59 MB
Private (maximum):3.97 MB
Private (minimum):84 KB
Non-paged memory:1.37 MB
21.59 MB
Virtual memory:43.93 MB
140.96 MB
Virtual memory (peak):45.93 MB
169.69 MB
Working set:712 KB
18.61 MB
Working set (peak):3.99 MB
37.95 MB
Page faults:19,071/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:3
12
Handles:64
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\common files\command software\dvpapi.exe"
Owner:SYSTEM
Windows Service
Service name:dvpapi
Description:“Dynamic Virus Protection”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ADVAPI32.dll
Total CPU:0.00002474%
0.272967%
Kernel CPU:0.00000000%
0.107585%
User CPU:0.00002474%
0.165382%
CPU cycles:268/sec
5,741,424/sec
Memory:792 KB
1.16 MB
dvpapi.exe (main module)
Total CPU:0.00001649%
Kernel CPU:0.00001649%
User CPU:0.00000000%
CPU cycles:318/sec
Memory:140 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE