Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenKeyExA, RegEnumValueW, RegQueryValueExA, TraceMessage, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegEnumKeyW, RegQueryValueExW
gdi32.dll
DeleteDC
kernel32.dll
FreeLibrary, SetThreadLocale, GetModuleHandleW, RaiseException, LoadLibraryExW, FormatMessageW, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, Sleep, GetDateFormatW, GetCurrentProcessId, GetCurrentThreadId, GetCurrentProcess, GetWindowsDirectoryW, FindFirstFileW, FindNextFileW, FindClose, GetVersionExW, LoadLibraryW, GetProcAddress, InterlockedIncrement, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, lstrlenW, DeleteCriticalSection, GetModuleFileNameW, InitializeCriticalSection, OutputDebugStringW, GetLocaleInfoW, GetUserDefaultLangID, InterlockedExchange, TryEnterCriticalSection, LoadLibraryA, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, LocalFree, LocalAlloc, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, ExpandEnvironmentStringsA, GetLastError, GetSystemTimeAsFileTime, GetTickCount, GetSystemDefaultLangID, GetThreadLocale
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoTaskMemFree, CLSIDFromString, StringFromGUID2, OleRun, CoCreateInstance, CoTaskMemAlloc, StringFromCLSID
shlwapi.dll
PathAddBackslashW
user32.dll
MessageBoxW, LoadStringW, GetDesktopWindow
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

protectionutil.dll

Symantec Endpoint Protection by Symantec Corporation (Signed)

Remove protectionutil.dll
Version:   12.1.1000.157
MD5:   99f5ab07c7b06aadacc13deee60faa05
SHA1:   94105fde081d0671ddea8b7a98be8a6a52f67ef4
SHA256:   9030c49d806daff6c99e04a2af480254672ab5b0813372cc0637a8ff109983ba

Overview

protectionutil.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:protectionutil.dll
Publisher:Symantec Corporation
Product name:Symantec Endpoint Protection
Typical file path:C:\Program Files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\protectionutil.dll
File version:12.1.1000.157
Size:212.42 KB (217,520 bytes)
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Wednesday, September 8, 2010
Expiration date:Sunday, November 24, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 75.00%
Windows 7 Starter 25.00%

Distribution by countryDistribution by country

Hong Kong installs about 50.00% of Symantec Endpoint Protection.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE