Should I block it?

No, this file is 100% safe to run.

Additional versions

4.6.0.2935	42.86%
4.6.0.1694	14.29%
4.5.0.1810	14.29%
4.5.0.1499	14.29%
4.0.0.1496	14.29%

Relationships

Child process

mctray.exe (McAfee System Tray by McAfee)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExA, CloseServiceHandle, OpenSCManagerW, QueryServiceStatus, OpenServiceW, RegCloseKey, RegQueryValueExA

comctl32.dll

ImageList_Create, ImageList_ReplaceIcon, PropertySheetW

gdi32.dll

GetViewportOrgEx, SetViewportOrgEx, DPtoLP, GetStockObject, DeleteDC, CreateCompatibleBitmap, SetTextAlign, BitBlt, Rectangle, SetBkMode, SelectObject, CreateCompatibleDC, CreateSolidBrush, GetDeviceCaps, CreateBrushIndirect, SetTextColor, SetBkColor, DeleteObject

kernel32.dll

GetMailslotInfo, GetLocalTime, Sleep, WaitForMultipleObjects, ResetEvent, GetCurrentProcessId, DeleteCriticalSection, SetLastError, InterlockedExchange, InitializeCriticalSection, GetLastError, InterlockedIncrement, SizeofResource, LoadResource, SetProcessWorkingSetSize, CompareStringA, GetModuleHandleA, GetModuleFileNameA, GetWindowsDirectoryA, GetSystemDirectoryA, LoadLibraryA, GetProcAddress, GetACP, GetThreadLocale, GetVersionExA, FlushInstructionCache, GetCurrentProcess, InterlockedDecrement, lstrlenA, GetTimeFormatA, GetDateFormatA, SystemTimeToTzSpecificLocalTime, GetTimeZoneInformation, GetLocaleInfoA, IsValidLocale, GetUserDefaultLangID, RaiseException, CloseHandle, EnterCriticalSection, LeaveCriticalSection, WaitForSingleObject, SetEvent, FreeLibrary, WriteFile, GetCurrentThreadId, MulDiv, ReadFile, InterlockedCompareExchange, HeapFree, GetProcessHeap, HeapAlloc, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetUserDefaultLCID, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, LocalFree, ExitProcess

msvcp71.dll

DllMain

msvcp80.dll

DllMain

msvcr71.dll

DllMain

msvcr80.dll

DllMain

nacmnlib3_71.dll

LoadResourceDLLW, GetResString

nailog3.dll

_naimcomn_SetSystem@4, _naimcomn_InitTracer@0, _naimcomn_SetLogToStdout@4, _naimcomn_StartFileLogging@4, naimcomn_LogInfoW, _naimcomn_EndFileLogging@0

ole32.dll

CreateStreamOnHGlobal, CoMarshalInterface, CoInitializeEx, CoInitializeSecurity, CoResumeClassObjects, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoTaskMemRealloc, CoTaskMemAlloc, StringFromGUID2, CoCreateInstance, CoUninitialize, CoInitialize

shell32.dll

SHGetFolderPathW

shlwapi.dll

PathFindExtensionW

user32.dll

ShowWindow, IsWindowVisible, IsWindow, SetCursor, InvalidateRect, RedrawWindow, KillTimer, SetTimer, TrackPopupMenu, SetActiveWindow, DestroyWindow, GetDesktopWindow, SetFocus, IsDlgButtonChecked, GetDlgItemInt, ScreenToClient, TranslateMessage, GetWindow, GetWindowRect, BeginPaint, FillRect, GetSysColor, OffsetRect, UpdateWindow, GetMessagePos, CheckDlgButton, GetDC, ReleaseDC, CreatePopupMenu, UnregisterClassA, GetClientRect, EndDialog, MapWindowPoints, SetWindowPos, GetDlgItem, GetParent, GetDlgCtrlID, IsIconic, GetForegroundWindow, PostQuitMessage, SetForegroundWindow, EndPaint, SetDlgItemInt, CheckRadioButton, CreateCursor, DestroyCursor, DestroyIcon, GetCursorPos, GetAsyncKeyState, DestroyMenu, GetSubMenu, GetActiveWindow, MsgWaitForMultipleObjects

udaterui.exe

McAfee Agent by McAfee (Signed)

Remove udaterui.exe

Version:	4.5.0.1810
MD5:	52955e4957ffe8fd7269bc507b347051
SHA1:	b22ca11d76fd48e8495ec1f2ce90e630f60971f3
SHA256:	6b509c6edcaf94b1e1aadbb1f150a102f48ce275e87de48352901806af19ca38

What is udaterui.exe?

Common User Interface is part of McAfee Agent. The McAfee Agent is a process that runs in the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a PC. The McAfee Agent offers access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the notifications area of the taskbar and will load on each reboot.

Overview

udaterui.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program McAfee Agent published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

Details

File name:	udaterui.exe
Publisher:	McAfee, Inc.
Product name:	McAfee Agent
Description:	Common User Interface
Typical file path:	C:\Program Files\mcafee\common framework\udaterui.exe
Original name:	UpdUI.exe
File version:	4.5.0.1810
Size:	157.31 KB (161,088 bytes)
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Expiration date:	Monday, October 10, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Programs

The following program will install this file

McAfee Agent

McAfee, Inc.

11% remove

The McAfee Agent is placed on the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a computer. The McAfee Agent offers quick access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the taskbar with the letter M.

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'McAfeeUpdaterUI' → "C:\Program Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00010116%	0.028634%
Kernel CPU:	0.00005470%	0.013761%
User CPU:	0.00004646%	0.014873%
Kernel CPU time:	312,002 ms/min	100,923,805ms/min
Memory
Private memory:	3.37 MB	21.59 MB
Private (maximum):	3.06 MB
Private (minimum):	1.89 MB
Non-paged memory:	3.37 MB	21.59 MB
Virtual memory:	87.03 MB	140.96 MB
Virtual memory (peak):	94.62 MB	169.69 MB
Working set:	2.92 MB	18.61 MB
Working set (peak):	11.17 MB	37.95 MB
Resource allocations
Threads:	5	12
Handles:	216	600
GUI GDI count:	38	103
GUI GDI peak:	40	142
GUI USER count:	41	49
GUI USER peak:	44	71