Should I block it?

45%
45% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

18.1.7.644 0.85%
18.1.7.598 0.28%
18.0.5.292 0.28%
17.3.1.204 0.28%
17.1.2.1 0.28%
17.1.2.1 0.57%
17.1.0.27 0.28%
15.5.0.2 0.85%
15.4.0.5 0.28%
15.4.0.5 0.85%
15.3.0.11 3.69%
15.3.0.11 2.56%
15, 0, 0, 2 1.14%
14, 2, 0, 1 23.30%
14, 2, 0, 1 4.26%
14, 1, 0, 10 3.69%
14, 0, 3, 14 0.28%
14, 0, 2, 14 5.97%
14, 0, 2, 10 0.28%
14, 0, 0, 13 0.28%
14, 0, 0, 12 0.85%
14, 0, 0, 12 0.28%
13, 3, 0, 17 7.95%
13, 2, 0, 5 31.53%
13, 2, 0, 4 4.26%
View more

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetNamedSecurityInfoW, RegCreateKeyExW, RegSetValueExW, RegFlushKey, RegQueryValueExW, RegOpenKeyExW, OpenProcessToken, GetLengthSid, CryptHashData, CryptDestroyHash, CryptCreateHash, CryptReleaseContext, CryptAcquireContextW, CryptGetHashParam, AddAccessAllowedAce, InitializeAcl, RegCloseKey, SetNamedSecurityInfoW, RegSetKeySecurity, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegEnumKeyExW, RegEnumValueW, RegDeleteKeyW, RegQueryInfoKeyW, RegNotifyChangeKeyValue, GetTokenInformation, RegDeleteValueW, CryptDecrypt, CryptDestroyKey, CryptAcquireContextA, CryptDeriveKey, ConvertStringSidToSidW, LookupAccountSidW, RegLoadKeyW, AdjustTokenPrivileges, LookupPrivilegeValueW
crypt32.dll
CryptProtectData
gdi32.dll
SelectObject, CreateFontW, GetDeviceCaps, DeleteObject, SetBkMode, SetTextColor, GetTextExtentPoint32W, CreateSolidBrush, BitBlt, GetObjectW, CreateCompatibleDC, DeleteDC
kernel32.dll
DllMain, CreateEventW, WaitForMultipleObjects, CreateThread, GetFileSize, SetFilePointer, WriteFile, GetVersionExW, GetFileAttributesW, CreateFileW, SetLastError, RemoveDirectoryW, FindNextFileW, DeleteFileW, SetFileAttributesW, GetEnvironmentVariableW, CreateProcessW, CreateDirectoryW, FormatMessageW, TerminateProcess, GetEnvironmentVariableA, Process32FirstW, Process32NextW, CreateToolhelp32Snapshot, CopyFileW, ReadFile, InterlockedDecrement, GetPrivateProfileStringW, WritePrivateProfileStringW, GetFullPathNameW, GetFullPathNameA, CreateFileA, MapViewOfFile, UnmapViewOfFile, SetEndOfFile, QueryPerformanceCounter, InterlockedCompareExchange, UnlockFile, LockFile, GetTickCount, UnlockFileEx, GetSystemTimeAsFileTime, FormatMessageA, InitializeCriticalSection, LeaveCriticalSection, GetFileAttributesA, FlushFileBuffers, GetTempPathW, LockFileEx, EnterCriticalSection, ResetEvent, LoadLibraryA, CreateFileMappingW, GetDiskFreeSpaceA, GetSystemInfo, GetFileAttributesExW, DeleteCriticalSection, GetCurrentProcessId, GetTempPathA, GetSystemTime, AreFileApisANSI, DeleteFileA, ReleaseMutex, InterlockedIncrement, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitProcess, SetEnvironmentVariableA, GetLocaleInfoW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetModuleHandleA, GetStringTypeW, GetStringTypeA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, InitializeCriticalSectionAndSpinCount, VirtualAlloc, GetTimeZoneInformation, IsValidCodePage, GetOEMCP, GetACP, WriteConsoleW, GetConsoleMode, GetConsoleCP, VirtualFree, HeapCreate, GetCurrentThreadId, TlsFree, TlsSetValue, SetEvent, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, GetLastError, WideCharToMultiByte, GetModuleHandleW, Sleep, CreateMutexW, OpenMutexW, GetModuleFileNameW, FreeLibrary, MultiByteToWideChar, lstrlenA, FindClose, FindFirstFileW, LocalFree, WaitForSingleObject, GetCurrentProcess, CloseHandle, OpenProcess, GetProcAddress, LoadLibraryW, GetDiskFreeSpaceW, lstrlenW, TlsAlloc, TlsGetValue, GetStartupInfoA, SetHandleCount, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, LCMapStringW, LCMapStringA, CompareStringW, GetCPInfo, GetFileType, GetStdHandle, GetTimeFormatA, GetDateFormatA, CompareStringA, RtlUnwind, GetStartupInfoW
ole32.dll
CoUninitialize, CoInitialize, CoCreateInstance, OleInitialize, CoGetClassObject, OleSetContainedObject, OleUninitialize
shell32.dll
SHGetSpecialFolderPathW, SHGetFolderPathW
shlwapi.dll
PathFileExistsW, UrlEscapeW, UrlUnescapeW, PathFileExistsA
user32.dll
CreateDialogParamW, ShowWindow, SetTimer, KillTimer, GetWindowRect, SystemParametersInfoW, GetDlgItem, SetWindowPos, MoveWindow, BeginPaint, GetClientRect, FillRect, EndPaint, GetDlgCtrlID, GetWindowDC, SendMessageW, ReleaseDC, SetWindowTextW, PostMessageW, EnumChildWindows, FindWindowW, FindWindowExW, wsprintfW, PostQuitMessage, DefWindowProcW, DestroyWindow, RegisterClassExW, LoadIconW, LoadCursorW, DispatchMessageW, TranslateMessage, TranslateAcceleratorW, GetMessageW, LoadAcceleratorsW, LoadStringW, GetClassNameW, GetWindowThreadProcessId, IsWindow, EnumWindows, CreateWindowExW, GetSystemMetrics, EndDialog, IsDlgButtonChecked, CheckRadioButton, DialogBoxParamW, PostThreadMessageW, RegisterWindowMessageW, UpdateWindow, DefWindowProcA, CreateWindowExA, GetWindowLongA, RegisterClassExA, SetWindowLongA, LoadBitmapW, ScreenToClient, GetWindowTextW, PtInRect, SetCursor, SetWindowLongW, BringWindowToTop, SetForegroundWindow, IsIconic, GetWindowLongW
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wininet.dll
InternetCloseHandle, HttpQueryInfoW, InternetSetOptionW, HttpSendRequestW, InternetConnectW, InternetReadFile, InternetOpenW, HttpOpenRequestW

vprot.exe

VProtect Application by AVG Technologies (Signed)

Remove vprot.exe
Version:   13, 2, 0, 5
MD5:   c25602103b927a359b3ed9307eb37ed6
SHA1:   09aab53a95363edd80e42a469cd3c682451541b6
SHA256:   b509040c6d24450cb2955ca01a47a270cd146dad6c3c7bee822ce71704c1550c

What is vprot.exe?

The AVG Security Toolbar is a tool which works together with the LinkScanner component and checks search results of the supported Internet search engines (Yahoo!, Google, Yandex, Bing, Baidu). If you select to install the toolbar during the installation of AVG Free, it will be added into your Internet Explorer. AVG Security Toolbar contains also a Yahoo! search box, which is an integral part of the toolbar and can not be removed separately.

About vprot.exe (from AVG Technologies)

The AVG Security Toolbar is powered by our unique LinkScanner® technology, keeping you protected from threats that can be hidden on any type of website. These threats rarely stick around for more than

DetailsDetails

File name:vprot.exe
Product name:VProtect Application
Typical file path:C:\Program Files\avg secure search\vprot.exe
Original name:VProtect.exe
File version:13, 2, 0, 5
Size:973.95 KB (997,320 bytes)
Certificate
Issued to:AVG Technologies
Authority (CA):VeriSign
Expiration date:Saturday, March 30, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
AVG Technologies
  63% remove
The AVG Security Toolbar is included in AVG Technologies’s family of security software, as a standalone program, and as a third party bundles. AVG Security Toolbar incluedes a link scanner that displays security information about websites. The toolbar offers search, weather information, a link to a speedtest and other features that are not really related to security. It also may send event logs and other system-related information to a ...

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'vProt' → "C:\Program Files\AVG Secure Search\vprot.exe"
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\AVG Secure Search\vprot.exe'
Network connections
Access through an approved Windows firewall exception
  • [TCP] a23-62-53-89.deploy.akamaitechnologies.com (23.62.53.89:80)
  • [TCP] rev-46.229.154.11.akamai.com (46.229.154.11:80)
  • [TCP] 95.100.215.117:80
  • [TCP] 200.60.136.17:80
  • [TCP] 79.140.95.177:80
  • [TCP] 2.16.217.104:80
  • [TCP] host-213.158.175.42.tedata.net (213.158.175.42:80)
  • [TCP] 207.108.220.146:80
  • [TCP] a184-26-143-25.deploy.akamaitechnologies.com (184.26.143.25:80)
  • [TCP] a96-6-151-117.deploy.akamaitechnologies.com (96.6.151.117:80)
  • [TCP] 213.75.14.219:80
  • [TCP] 203.92.134.136:80
  • [TCP] m42-mp1-cvx1b.lan.ntl.com (62.252.168.42:80)
  • [TCP] 107.14.34.153:80
  • [TCP] 204.186.34.153:80
  • [TCP] a72-247-255-117.deploy.akamaitechnologies.com (72.247.255.117:80)
  • [TCP] a184-26-199-117.deploy.akamaitechnologies.com (184.26.199.117:80)
  • [TCP] 208-44-23-98.dia.static.qwest.net (208.44.23.98:80)
  • [TCP] 2.18.183.117:80
  • [TCP] 123-2-3-202.core.dodo.com.au (123.2.3.202:80)
  • [TCP] 62.24.201.8.akamai.bre.as13285.net (62.24.201.8:80)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.01108187%
    0.028634%
    Kernel CPU:0.00554255%
    0.013761%
    User CPU:0.00553932%
    0.014873%
    Kernel CPU time:211,402,242 ms/min
    100,923,805ms/min
    CPU cycles:10,340,207/sec
    17,470,203/sec
    Context switches:36/sec
    284/sec
    Memory
    Private memory:14.01 MB
    21.59 MB
    Private (maximum):19.56 MB
    Private (minimum):8.45 MB
    Non-paged memory:14.01 MB
    21.59 MB
    Virtual memory:106.71 MB
    140.96 MB
    Virtual memory (peak):118.08 MB
    169.69 MB
    Working set:12.78 MB
    18.61 MB
    Working set (peak):27.26 MB
    37.95 MB
    Page faults:313,858/min
    2,039/min
    I/O
    I/O read transfer:9.64 KB/sec
    1.02 MB/min
    I/O read operations:3/sec
    343/min
    I/O write transfer:7.64 KB/sec
    274.99 KB/min
    I/O write operations:6/sec
    227/min
    I/O other transfer:303 Bytes/sec
    448.09 KB/min
    I/O other operations:25/sec
    1,671/min
    Resource allocations
    Threads:9
    12
    Handles:389
    600
    GUI GDI count:19
    103
    GUI GDI peak:18
    142
    GUI USER count:14
    49
    GUI USER peak:16
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:32-bit
    Command line:"C:\Program Files\avg secure search\vprot.exe"
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    vprot.exe (main module)
    Total CPU:0.18288720%
    0.272967%
    Kernel CPU:0.08664555%
    0.107585%
    User CPU:0.09624165%
    0.165382%
    CPU cycles:6,821,050/sec
    5,741,424/sec
    Context switches:21/sec
    79/sec
    Memory:984 KB
    1.16 MB
    ntdll.dll
    Total CPU:0.00005215%
    Kernel CPU:0.00002607%
    User CPU:0.00002607%
    CPU cycles:763/sec
    Memory:1.23 MB
    rasman.dll
    Total CPU:0.00003641%
    Kernel CPU:0.00000000%
    User CPU:0.00003641%
    CPU cycles:173/sec
    Memory:84 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 33.00%
    Microsoft Windows XP 22.00%
    Windows 7 Ultimate 14.00%
    Windows Vista Home Premium 5.50%
    Windows 7 Professional 5.00%
    Windows 8 Pro 5.00%
    Windows 8 3.00%
    Windows Vista Home Basic 2.50%
    Windows 7 Ultimate N 2.50%
    Windows 8 Single Language 2.00%
    Windows 7 Home Basic 2.00%
    Windows 8 Pro with Media Center 1.00%
    Windows Vista Business 1.00%
    Windows 8.1 Pro with Media Center 0.50%
    Windows Vista Ultimate 0.50%
    Windows 8 Enterprise 0.50%

    Distribution by countryDistribution by country

    United States installs about 44.50% of VProtect Application.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Acer 18.50%
    Hewlett-Packard 17.34%
    Toshiba 16.18%
    Dell 16.18%
    ASUS 6.94%
    Compaq 6.94%
    Sony 5.78%
    Intel 4.62%
    American Megatrends 2.89%
    Alienware 1.16%
    Lenovo 1.16%
    Sahara 1.16%
    GIGABYTE 1.16%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE