Should I block it?

6% of PCs block this file from running.

Additional versions

14.2.0.1	4.00%
13.2.0.4	8.00%
12.2.5.34	4.00%
12.2.0.5	84.00%

Relationships

Parent process

svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegCloseKey, RegCreateKeyExW, CryptAcquireContextW, CryptGetHashParam, CryptHashData, CryptDestroyHash, CryptDestroyKey, CryptCreateHash, CryptEncrypt, CryptAcquireContextA, CryptReleaseContext, CryptDeriveKey, AdjustTokenPrivileges, RegSetKeySecurity, FreeSid, SetEntriesInAclW, AddAccessAllowedAce, AllocateAndInitializeSid, InitializeAcl, GetNamedSecurityInfoW, LookupPrivilegeValueW, SetNamedSecurityInfoW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegFlushKey, GetLengthSid, RegQueryValueExW, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteValueW, RegDeleteKeyW, RegSetValueExW

crypt32.dll

CryptProtectData

kernel32.dll

DllMain

ole32.dll

CoInitialize, CoUninitialize, CoTaskMemAlloc, CoTaskMemRealloc, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, StringFromGUID2, CoCreateInstance, CLSIDFromProgID

rpcrt4.dll

NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, NdrCStdStubBuffer2_Release, UuidToStringW, NdrStubCall2, NdrStubForwardingFunction, IUnknown_Release_Proxy, IUnknown_AddRef_Proxy

shell32.dll

ShellExecuteW, SHGetSpecialFolderPathW

shlwapi.dll

PathFileExistsW

user32.dll

CharUpperW, GetMessageW, PostThreadMessageW, DispatchMessageW, TranslateMessage, CharNextW, LoadStringW, PostMessageW, FindWindowW, wsprintfW, EnumWindows, GetClassNameW, IsWindow, GetSystemMetrics

version.dll

GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW

wininet.dll

FindFirstUrlCacheEntryW, InternetOpenW, InternetConnectW, DeleteUrlCacheEntryW, FindNextUrlCacheEntryW, InternetReadFile, InternetCloseHandle, HttpOpenRequestW, HttpQueryInfoW, HttpAddRequestHeadersW, InternetSetOptionW, HttpSendRequestW

ScriptHelper.exe

By AVG Technologies (Signed)

Remove ScriptHelper.exe

Version:	13.2.0.4
MD5:	7178bb14407fc4531a4370e2f4fea73d
SHA1:	4d1918c888b2f277c47e11ecd909b62898ad3694
SHA256:	7869d4fe583a21f2d8b19e4850cf097c07c78e95ded2d2371d0d8f46be564ea0

What is ScriptHelper.exe?

AVG Secure Search is a toolbar, that is installed in many cases through third party bundled installations, is a security tool that is constantly on the lookout for you, showing you safety rating for any sites you search for. This browser plugin can be used with Internet Explorer, Firefox and Chrome, and it uses a custom Google search to let you know whether sites that appear in your search results are safe, risky or dangerous.

About ScriptHelper.exe (from AVG Technologies)

“AVG Secure Search alerts you before you visit dangerous webpages to make sure your identity, personal information, and computer are protected. In addition, our integrated AVG Do Not Track brings the c”

Details

File name:	scripthelper.exe
Typical file path:	C:\Program Files\common files\avg secure search\scripthelperinstaller\12.2.0\scripthelper.exe
File version:	13.2.0.4
Size:	947.95 KB (970,696 bytes)
Certificate
Issued to:	AVG Technologies
Authority (CA):	VeriSign
Expiration date:	Saturday, March 30, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Safe for scripting controls

Marked as a safe ActiveX control for Internet Explorer (digitally signed with script execution permission)

Implemented as 'CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}'

Safe for initializing controls

{F25AF245-4A81-40DC-92F9-E9021F207706}

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.01842747%	0.028634%
Kernel CPU:	0.00927376%	0.013761%
User CPU:	0.00915370%	0.014873%
Kernel CPU time:	579 ms/min	100,923,805ms/min
CPU cycles:	944/sec	17,470,203/sec
Context switches:	30/sec	284/sec
Memory
Private memory:	2.26 MB	21.59 MB
Private (maximum):	4.22 MB
Private (minimum):	3.24 MB
Non-paged memory:	2.26 MB	21.59 MB
Virtual memory:	69.2 MB	140.96 MB
Virtual memory (peak):	71.29 MB	169.69 MB
Working set:	3.35 MB	18.61 MB
Working set (peak):	6.62 MB	37.95 MB
Page faults:	17,150/min	2,039/min
I/O
I/O read transfer:	14 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	85 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	169	600
GUI GDI count:	9	103
GUI GDI peak:	9	142
GUI USER count:	4	49
GUI USER peak:	5	71

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	"C:\Program Files\common files\avg secure search\scripthelperinstaller\13.2.0\scripthelper.exe" -embedding
Owner:	User
Parent process:	svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Threads