Should I block it?

45%
45% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

18.1.7.644 0.85%
18.1.7.598 0.28%
18.0.5.292 0.28%
17.3.1.204 0.28%
17.1.2.1 0.28%
17.1.2.1 0.57%
17.1.0.27 0.28%
15.5.0.2 0.85%
15.4.0.5 0.28%
15.4.0.5 0.85%
15.3.0.11 3.69%
15.3.0.11 2.56%
15, 0, 0, 2 1.14%
14, 2, 0, 1 23.30%
14, 2, 0, 1 4.26%
14, 1, 0, 10 3.69%
14, 0, 3, 14 0.28%
14, 0, 2, 14 5.97%
14, 0, 2, 10 0.28%
14, 0, 0, 13 0.28%
14, 0, 0, 12 0.85%
14, 0, 0, 12 0.28%
13, 3, 0, 17 7.95%
13, 2, 0, 5 31.53%
13, 2, 0, 4 4.26%
View more

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetNamedSecurityInfoW, RegCreateKeyExW, RegSetValueExW, RegFlushKey, RegQueryValueExW, RegOpenKeyExW, OpenProcessToken, GetLengthSid, CryptHashData, CryptDestroyHash, CryptCreateHash, CryptReleaseContext, CryptAcquireContextW, CryptGetHashParam, AddAccessAllowedAce, InitializeAcl, RegCloseKey, SetNamedSecurityInfoW, RegSetKeySecurity, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegEnumKeyExW, RegEnumValueW, RegDeleteKeyW, RegQueryInfoKeyW, RegNotifyChangeKeyValue, GetTokenInformation, RegDeleteValueW, CryptDecrypt, CryptDestroyKey, CryptAcquireContextA, CryptDeriveKey, ConvertStringSidToSidW, LookupAccountSidW, RegLoadKeyW, AdjustTokenPrivileges, LookupPrivilegeValueW
crypt32.dll
CryptProtectData
gdi32.dll
SelectObject, CreateFontW, GetDeviceCaps, DeleteObject, SetBkMode, SetTextColor, GetTextExtentPoint32W, CreateSolidBrush, BitBlt, GetObjectW, CreateCompatibleDC, DeleteDC
kernel32.dll
DllMain, CreateEventW, WaitForMultipleObjects, CreateThread, GetFileSize, SetFilePointer, WriteFile, GetVersionExW, GetFileAttributesW, CreateFileW, SetLastError, RemoveDirectoryW, FindNextFileW, DeleteFileW, SetFileAttributesW, GetEnvironmentVariableW, CreateProcessW, CreateDirectoryW, FormatMessageW, TerminateProcess, GetEnvironmentVariableA, Process32FirstW, Process32NextW, CreateToolhelp32Snapshot, CopyFileW, ReadFile, InterlockedDecrement, GetPrivateProfileStringW, WritePrivateProfileStringW, GetFullPathNameW, GetFullPathNameA, CreateFileA, MapViewOfFile, UnmapViewOfFile, SetEndOfFile, QueryPerformanceCounter, InterlockedCompareExchange, UnlockFile, LockFile, GetTickCount, UnlockFileEx, GetSystemTimeAsFileTime, FormatMessageA, InitializeCriticalSection, LeaveCriticalSection, GetFileAttributesA, FlushFileBuffers, GetTempPathW, LockFileEx, EnterCriticalSection, ResetEvent, LoadLibraryA, CreateFileMappingW, GetDiskFreeSpaceA, GetSystemInfo, GetFileAttributesExW, DeleteCriticalSection, GetCurrentProcessId, GetTempPathA, GetSystemTime, AreFileApisANSI, DeleteFileA, ReleaseMutex, InterlockedIncrement, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitProcess, SetEnvironmentVariableA, GetLocaleInfoW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetModuleHandleA, GetStringTypeW, GetStringTypeA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, InitializeCriticalSectionAndSpinCount, VirtualAlloc, GetTimeZoneInformation, IsValidCodePage, GetOEMCP, GetACP, WriteConsoleW, GetConsoleMode, GetConsoleCP, VirtualFree, HeapCreate, GetCurrentThreadId, TlsFree, TlsSetValue, SetEvent, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, GetLastError, WideCharToMultiByte, GetModuleHandleW, Sleep, CreateMutexW, OpenMutexW, GetModuleFileNameW, FreeLibrary, MultiByteToWideChar, lstrlenA, FindClose, FindFirstFileW, LocalFree, WaitForSingleObject, GetCurrentProcess, CloseHandle, OpenProcess, GetProcAddress, LoadLibraryW, GetDiskFreeSpaceW, lstrlenW, TlsAlloc, TlsGetValue, GetStartupInfoA, SetHandleCount, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, LCMapStringW, LCMapStringA, CompareStringW, GetCPInfo, GetFileType, GetStdHandle, GetTimeFormatA, GetDateFormatA, CompareStringA, RtlUnwind, GetStartupInfoW
ole32.dll
CoUninitialize, CoInitialize, CoCreateInstance, OleInitialize, CoGetClassObject, OleSetContainedObject, OleUninitialize
shell32.dll
SHGetSpecialFolderPathW, SHGetFolderPathW
shlwapi.dll
PathFileExistsW, UrlEscapeW, UrlUnescapeW, PathFileExistsA
user32.dll
CreateDialogParamW, ShowWindow, SetTimer, KillTimer, GetWindowRect, SystemParametersInfoW, GetDlgItem, SetWindowPos, MoveWindow, BeginPaint, GetClientRect, FillRect, EndPaint, GetDlgCtrlID, GetWindowDC, SendMessageW, ReleaseDC, SetWindowTextW, PostMessageW, EnumChildWindows, FindWindowW, FindWindowExW, wsprintfW, PostQuitMessage, DefWindowProcW, DestroyWindow, RegisterClassExW, LoadIconW, LoadCursorW, DispatchMessageW, TranslateMessage, TranslateAcceleratorW, GetMessageW, LoadAcceleratorsW, LoadStringW, GetClassNameW, GetWindowThreadProcessId, IsWindow, EnumWindows, CreateWindowExW, GetSystemMetrics, EndDialog, IsDlgButtonChecked, CheckRadioButton, DialogBoxParamW, PostThreadMessageW, RegisterWindowMessageW, UpdateWindow, DefWindowProcA, CreateWindowExA, GetWindowLongA, RegisterClassExA, SetWindowLongA, LoadBitmapW, ScreenToClient, GetWindowTextW, PtInRect, SetCursor, SetWindowLongW, BringWindowToTop, SetForegroundWindow, IsIconic, GetWindowLongW
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wininet.dll
InternetCloseHandle, HttpQueryInfoW, InternetSetOptionW, HttpSendRequestW, InternetConnectW, InternetReadFile, InternetOpenW, HttpOpenRequestW

vprot.exe

VProtect Application by AVG Technologies (Signed)

Remove vprot.exe
Version:   15.3.0.11
MD5:   61a9b11b263fa811474e5d8d96ecf96e
SHA1:   f3264aff6e708f1d563580fe9f261e6efb03bcf9
SHA256:   611e911369f7b8648c4da13afde0a61af9f853a6c196845d007d2800ea3423b3

What is vprot.exe?

The AVG Security Toolbar is a tool which works together with the LinkScanner component and checks search results of the supported Internet search engines (Yahoo!, Google, Yandex, Bing, Baidu). If you select to install the toolbar during the installation of AVG Free, it will be added into your Internet Explorer. AVG Security Toolbar contains also a Yahoo! search box, which is an integral part of the toolbar and can not be removed separately.

About vprot.exe (from AVG Technologies)

The AVG Security Toolbar is powered by our unique LinkScanner® technology, keeping you protected from threats that can be hidden on any type of website. These threats rarely stick around for more than

DetailsDetails

File name:vprot.exe
Product name:VProtect Application
Typical file path:C:\Program Files\avg secure search\vprot.exe
Original name:VProtect.exe
File version:15.3.0.11
Size:2.13 MB (2,236,080 bytes)
Build date:6/12/2013 5:53 PM
Certificate
Issued to:AVG Technologies
Authority (CA):VeriSign
Expiration date:Saturday, March 30, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
AVG Technologies
  51% remove
The AVG Security Toolbar is included in AVG Technologies’s family of security software, as a standalone program, and as a third party bundles. AVG Security Toolbar incluedes a link scanner that displays security information about websites. The toolbar offers search, weather information, a link to a speedtest and other features that are not really related to security.

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'vProt' → "C:\Program Files\AVG Secure Search\vprot.exe"
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\AVG Secure Search\vprot.exe'
Network connections
Access through an approved Windows firewall exception
  • [TCP] a96-17-203-18.deploy.akamaitechnologies.com (96.17.203.18:80)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00630815%
    0.028634%
    Kernel CPU:0.00272583%
    0.013761%
    User CPU:0.00358232%
    0.014873%
    Kernel CPU time:24,595,337 ms/min
    100,923,805ms/min
    CPU cycles:5,200,299/sec
    17,470,203/sec
    Context switches:32/sec
    284/sec
    Memory
    Private memory:13.3 MB
    21.59 MB
    Private (maximum):19.41 MB
    Private (minimum):11.41 MB
    Non-paged memory:13.3 MB
    21.59 MB
    Virtual memory:120.08 MB
    140.96 MB
    Virtual memory (peak):135.84 MB
    169.69 MB
    Working set:12.9 MB
    18.61 MB
    Working set (peak):28.49 MB
    37.95 MB
    Page faults:437,915/min
    2,039/min
    I/O
    I/O read transfer:5.8 KB/sec
    1.02 MB/min
    I/O read operations:3/sec
    343/min
    I/O write transfer:16.91 KB/sec
    274.99 KB/min
    I/O write operations:5/sec
    227/min
    I/O other transfer:322 Bytes/sec
    448.09 KB/min
    I/O other operations:31/sec
    1,671/min
    Resource allocations
    Threads:12
    12
    Handles:288
    600
    GUI GDI count:12
    103
    GUI GDI peak:14
    142
    GUI USER count:14
    49
    GUI USER peak:16
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:64-bit
    Command line:"C:\Program Files\avg secure search\vprot.exe"
    Owner:User
    Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.16279411%
    0.272967%
    Kernel CPU:0.00001395%
    0.107585%
    User CPU:0.16278016%
    0.165382%
    CPU cycles:1,578,474/sec
    5,741,424/sec
    Memory:1.66 MB
    1.16 MB
    vprot.exe (main module)
    Total CPU:0.06040975%
    Kernel CPU:0.03835169%
    User CPU:0.02205807%
    CPU cycles:4,221,404/sec
    Context switches:5/sec
    Memory:2.14 MB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 33.00%
    Microsoft Windows XP 22.00%
    Windows 7 Ultimate 14.00%
    Windows Vista Home Premium 5.50%
    Windows 7 Professional 5.00%
    Windows 8 Pro 5.00%
    Windows 8 3.00%
    Windows Vista Home Basic 2.50%
    Windows 7 Ultimate N 2.50%
    Windows 8 Single Language 2.00%
    Windows 7 Home Basic 2.00%
    Windows 8 Pro with Media Center 1.00%
    Windows Vista Business 1.00%
    Windows 8.1 Pro with Media Center 0.50%
    Windows Vista Ultimate 0.50%
    Windows 8 Enterprise 0.50%

    Distribution by countryDistribution by country

    United States installs about 44.50% of VProtect Application.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Acer 18.50%
    Hewlett-Packard 17.34%
    Toshiba 16.18%
    Dell 16.18%
    ASUS 6.94%
    Compaq 6.94%
    Sony 5.78%
    Intel 4.62%
    American Megatrends 2.89%
    Alienware 1.16%
    Lenovo 1.16%
    Sahara 1.16%
    GIGABYTE 1.16%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE