Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.122.172 14.29%
11.0.6300.541 14.29%
11.0.6200.513 14.29%
11.0.6100.463 14.29%
11.0.5002.290 14.29%
11.0.4010.14 14.29%
11.0.4000.2263 14.29%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCloseKey, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegDeleteKeyW, RegQueryValueExW, RegOpenKeyExW, RegOpenKeyExA, RegQueryValueExA
gdi32.dll
GetObjectW, CreateCompatibleBitmap, CreateCompatibleDC, BitBlt, GetTextExtentPoint32W, CreateBitmap, GetPixel, DeleteDC, CreateRectRgn, CreateRectRgnIndirect, SetRectRgn, CombineRgn, OffsetRgn, FillRgn, CreatePolygonRgn, CreateFontIndirectW
gdiplus.dll
GdipCloneImage, GdipCreateBitmapFromStream, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromHBITMAP, GdipCreateHBITMAPFromBitmap, GdipDisposeImage, GdipFree, GdipAlloc
imm32.dll
ImmGetContext, ImmGetOpenStatus
kernel32.dll
Sleep, GlobalAlloc, GlobalLock, GlobalUnlock, GlobalFree, InterlockedExchange, GetCurrentProcessId, LoadLibraryA, GetUserDefaultLangID, GetCurrentProcess, FormatMessageW, GetLocaleInfoW, GetACP, GetOEMCP, CreateDirectoryW, GetComputerNameW, GetCurrentDirectoryW, SetCurrentDirectoryW, SetLastError, DeleteFileW, GetSystemDirectoryW, CreateFileW, GetThreadLocale, SetThreadLocale, GetSystemDefaultLangID, GetModuleHandleW, LoadLibraryExW, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, lstrcmpiW, FindResourceW, LoadResource, LockResource, SizeofResource, RaiseException, FindFirstFileW, FindNextFileW, FindClose, CreateSemaphoreW, CreateEventW, GetSystemInfo, WaitForMultipleObjects, GetCurrentThreadId, ResetEvent, ReleaseSemaphore, WaitForSingleObject, SetEvent, CloseHandle, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, ResumeThread, OutputDebugStringW, MultiByteToWideChar, GetTickCount, GetLastError, LocalAlloc, LocalFree, lstrlenW, WideCharToMultiByte, LoadLibraryExA, lstrlenA, lstrcpyA, GetVersionExW, LoadLibraryW, GetProcAddress, FreeLibrary, lstrcatW, GetWindowsDirectoryW, CreateProcessW, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetVersionExA, GetLocaleInfoA
mfc80u.dll
DllMain
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CreateStreamOnHGlobal, StringFromGUID2, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, CoUninitialize, CoInitialize, CoTaskMemFree, OleRun
shell32.dll
SHGetSpecialFolderPathA
shlwapi.dll
PathAddBackslashW, PathRemoveBackslashA, PathAddBackslashA
user32.dll
MsgWaitForMultipleObjects, LoadStringW, PeekMessageW, GetWindowRect, EnableWindow, PtInRect, DrawFocusRect, SendMessageW, GetClientRect, MapWindowPoints, InvalidateRect, IsWindowVisible, TranslateMessage, LoadBitmapW, GetWindowLongW, OffsetRect, GetWindowRgn, GetClassLongW, GetScrollInfo, EndDeferWindowPos, DeferWindowPos, BeginDeferWindowPos, RegisterWindowMessageW, PostMessageW, GetMenu, DispatchMessageW, UnhookWindowsHookEx, SetWindowsHookExW, GetFocus, CallNextHookEx, GetMessagePos, ReleaseCapture, GetSysColor, GetClassNameW, GetNextDlgTabItem, SetCapture, KillTimer, SetTimer, ReleaseDC, ScreenToClient, FillRect, SetRect, MessageBoxW, GetDlgItem, CharNextW, GetDC, GetSystemMetrics, IsWindow, wsprintfA, GetParent, AdjustWindowRectEx, IsMenu, SetWindowRgn, UnregisterClassA
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

HPPProtectionProviderUI.dll

Symantec AntiVirus by Symantec Corporation (Signed)

Remove HPPProtectionProviderUI.dll
Version:   11.0.6300.541
MD5:   784160e2fa70320d418957fdb2d6d704
SHA1:   20893763f80921e8a897076acc607954f9b99569

Overview

hppprotectionproviderui.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Symantec Endpoint Protection published by Symantec Corporation and Symantec Endpoint Protection published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:hppprotectionproviderui.dll
Publisher:Symantec Corporation
Product name:Symantec AntiVirus
Description:Heuristic Process Protection
Typical file path:C:\Program Files\symantec client security\symantec antivirus\hppprotectionproviderui.dll
File version:11.0.6300.541
Size:313.41 KB (320,928 bytes)
Build date:3/10/2011 1:45 PM
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Tuesday, October 30, 2007
Expiration date:Wednesday, November 24, 2010
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Symantec Corporation
9% remove
Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 85.71%
Windows Vista Ultimate 14.29%

Distribution by countryDistribution by country

United States installs about 57.14% of Symantec AntiVirus.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 50.00%
Hewlett-Packard 25.00%
Intel 25.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE