Should I block it?

No, this file is 100% safe to run.

Additional versions

2.0.0.1301	38.71%
2.0.0.1301	12.90%
2.0.0.1299	3.23%
1.5.0.1366	22.58%
1.5.0.1366	3.23%
1.5.0.1341	6.45%
1.5.0.1337	9.68%
1.5.0.1332	3.23%

Relationships

Parent process

coreserviceshell.exe (Trend Micro Anti-Malware Solution Platform by Trend Micro)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, ConvertStringSecurityDescriptorToSecurityDescriptorW, ImpersonateLoggedOnUser, DuplicateTokenEx, CreateProcessAsUserW, RevertToSelf, RegNotifyChangeKeyValue, StartServiceW, OpenProcessToken

kernel32.dll

CreateEventW, GetExitCodeProcess, WaitForMultipleObjects, LeaveCriticalSection, GetLastError, EnterCriticalSection, InitializeCriticalSection, SetEvent, CloseHandle, SetProcessWorkingSetSize, GetCurrentProcess, OutputDebugStringW, Sleep, OpenMutexW, CreateMutexW, GetCurrentDirectoryW, OpenEventW, GetPrivateProfileStringW, GetFileAttributesW, CreateDirectoryW, LocalFree, CreateToolhelp32Snapshot, Process32FirstW, ProcessIdToSessionId, Process32NextW, OpenProcess, ResetEvent, GetFullPathNameW, InterlockedExchange, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, SetLastError, DeleteCriticalSection

msvcp80.dll

DllMain

msvcr80.dll

DllMain

shell32.dll

CommandLineToArgvW

user32.dll

CloseDesktop, GetProcessWindowStation, OpenDesktopW, SetProcessWindowStation, OpenWindowStationW, CloseWindowStation

userenv.dll

CreateEnvironmentBlock, DestroyEnvironmentBlock

uiwatchdog.exe

Trend Micro UniClient by Trend Micro (Signed)

Remove uiwatchdog.exe

Version:	1.5.0.1337
MD5:	58bc9b644e6b252c8337ad501b04692a
SHA1:	c0df0300d20384a5321d7e56d7de464649040dcd
SHA256:	d78b436c86ace190e275758a150d0296f55bc1407a90918916a7e085df6c822d

What is uiwatchdog.exe?

Trend Micro Client Session Agent Monitor is part of Trend Micro Anti-Malware Solution Platform which provides antivirus and and antimalware detection and removal.

Overview

uiwatchdog.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent coreserviceshell.exe (Trend Micro Anti-Malware Solution Platform by Trend Micro). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Trend Micro Titanium Internet Security published by Trend Micro Inc..

Details

File name:	uiwatchdog.exe
Publisher:	Trend Micro Inc.
Product name:	Trend Micro UniClient
Description:	Trend Micro Client Session Agent Monitor
Typical file path:	C:\Program Files\trend micro\uniclient\uifrmwrk\uiwatchdog.exe
File version:	1.5.0.1337
Product version:	1.5
Size:	188.01 KB (192,520 bytes)
Certificate
Issued to:	Trend Micro
Authority (CA):	VeriSign
Effective date:	Sunday, January 30, 2011
Expiration date:	Thursday, February 16, 2012
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Programs

The following program will install this file

Trend Micro Titanium Internet Security

Trend Micro Inc.

6% remove

“Strong, fast and easy-to-use security--Trend Micro Titanium Internet Security provides advanced protection for your family so you can connect with confidence. Titanium uses cloud technology to proactively stop viruses and spyware before they reach your computer, so it won't slow you down. It's the same technology we use to protect some of the world's biggest businesses, now available to you. Real-time updates keep your computer protecte...”

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Trend Micro Client Framework' → "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

Memory
Private memory:	2.45 MB	21.59 MB
Private (maximum):	1.32 MB
Private (minimum):	1.3 MB
Non-paged memory:	2.45 MB	21.59 MB
Virtual memory:	38.03 MB	140.96 MB
Virtual memory (peak):	41.03 MB	169.69 MB
Working set:	1.31 MB	18.61 MB
Working set (peak):	5.37 MB	37.95 MB
Page faults:	1,763/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	43 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	62	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	uiwatchdog.exe 1984
Owner:	SYSTEM
Parent process:	coreserviceshell.exe (Trend Micro Anti-Malware Solution Platform by Trend Micro)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	58.06%
Windows 7 Home Basic	19.35%
Windows 7 Ultimate	12.90%
Microsoft Windows XP	6.45%
Windows 7 Professional	3.23%

Distribution by country

United States installs about 19.35% of Trend Micro UniClient.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	36.36%
Sony	24.24%
NEC	18.18%
Hewlett-Packard	12.12%
Dell	6.06%
Acer	3.03%

Remove Adware and Spyware Programs, FREE Download!