Should I block it?

No, this file is 100% safe to run.

Additional versions

12.1.2015.2015	37.50%
12.1.1000.157	50.00%
12.1.671.4971	12.50%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsW, UnregisterTraceGuids, TraceMessage, GetTraceLoggerHandle

kernel32.dll

UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, InterlockedIncrement, InterlockedDecrement, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CloseHandle, SetEvent, CreateEventW, WaitForSingleObject, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapDestroy, DecodePointer, EncodePointer, InitializeCriticalSectionAndSpinCount, GetLastError

msvcr100.dll

DllMain

msvcr90.dll

DllMain

ole32.dll

OleRun, CoCreateInstance

user32.dll

PeekMessageW, TranslateMessage, DispatchMessageW, MsgWaitForMultipleObjects

Export table

SAVStatusFinderEnableDisableProvider

SAVStatusFinderGetCorruptDefsStatus

SAVStatusFinderGetEnabledState

SAVStatusFinderGetOldDefsStatus

SAVStatusFinderGetSignal

SAVStatusFinderGetTrayStatus

SAVStatusFinderInit

SAVStatusFinderUnInit

savstatusfinder.dll

Symantec Endpoint Protection by Symantec Corporation (Signed)

Remove savstatusfinder.dll

Version:	12.1.1000.157
MD5:	d78bc74e59448c6638087a86e1489eb9
SHA1:	b6e82b1c571d5238f1934f195e32e58f6a777636
SHA256:	4c0ecfdb66d3b99f82142c7eef34dbf5bbc616d0bccaddbee324cebe8c1ab556

Overview

savstatusfinder.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	savstatusfinder.dll
Publisher:	Symantec Corporation
Product name:	Symantec Endpoint Protection
Typical file path:	C:\Program Files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\savstatusfinder.dll
File version:	12.1.1000.157
Size:	32.92 KB (33,712 bytes)
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Wednesday, September 8, 2010
Expiration date:	Sunday, November 24, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No