SBAMTray.exe
VIPRE Antivirus by Sunbelt Software (Signed)
Overview
There are 2 versions of SBAMTray.exe in the wild, the latest version being 4.0.4280. SBAMTray.exe is run as a standard windows process with the logged in user's account privileges. The process displays a GUI (graphical user interface) which allows the user to interact with it as well as displays a notification icon in the taskbar. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 1.29 MB. The file is a digitally signed and issued to Sunbelt Software by VeriSign. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 2.37 MB. Addionally, typically read and write I/O disk operations is about 3.74 KB per minute for reads and 776 Bytes per minute for writes.
What is SBAMTray.exe?
SBAMTray Application (the program that run in the notifications area of the system tray) for GFI (Sunbelt)/VIPRE Antivirus combines antispyware and antivirus together which detects and removes viruses, spyware, rootkits, bots, Trojans and all other types of malware.
About SBAMTray.exe (from Sunbelt Software)
“Get everything you need to protect your PC with Vipre Internet Security (Sunbelt Software/ GFI). This anti-malware solution includes a firewall and spam blocker for highly efficient online security th”
 Details
|
| File name: | SBAMTray.exe |
| Publisher: | Sunbelt Software |
| Product name: | VIPRE Antivirus |
| Description: | SBAMTray Application |
| Typical file path: | C:\Program Files\sunbelt software\vipre\sbamtray.exe |
| Certificate |
| Issued to: | Sunbelt Software |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, October 20, 2009 |
| Expiration date: | Saturday, October 27, 2012 |
Behaviors
(Note, the behaviors below are for all versions of SBAMTray.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'SBAMTray' → "C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe"
All file variations of SBAMTray.exe
