home

vprot.exe

VProtect Application

AVG Technologies

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘vProt’. This is installed with AVG Web TuneUp.
Publisher:
AVG Technologies  (signed and verified)

Product:
VProtect Application

Description:
VProtect Application Official

Version:
4.0.5.6

MD5:
1a4acdc326ef3054a07253a8e5b971ac

SHA-1:
0cca31280e2ea6eef1f7a2388c3435cd28686dc8

SHA-256:
e9bf98252e258f8607b355e11b5ddaa7f18c7c611fe4628d07991c213ea62177

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:50:52 AM UTC  (today)

File size:
2.9 MB (3,078,680 bytes)

Product version:
4.0.5.6

Copyright:
Copyright (C) 2012

Original file name:
VProtect.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\avg web tuneup\vprot.exe

Digital Signature
Signed by:
AVG Technologies

Authority:
VeriSign, Inc.

Valid from:
3/22/2013 5:00:00 PM

Valid to:
4/22/2015 4:59:59 PM

Subject:
CN=AVG Technologies, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AVG Technologies, L=Brno, S=Jihomoravsky kraj, C=CZ

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
01DA9DE8D302ACC5CDD5AB42EB5638DB

File PE Metadata
Compilation timestamp:
11/26/2014 3:11:19 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:IeK0RPqiVgnDFQy2/GNd9wBXtmpvKo0nn4PZi7/DUdPiSI54gPZQrOOTxbgBhU/d:dRSiVgBQy2ed9wBXtm4fn4PA7/Ad9y4F

Entry address:
0x1C9867

Entry point:
E8, 33, D7, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 46, 0B, 00, 00, 3B, 0D, 58, F4, 6B, 00, 75, 02, F3, C3, E9, AA, D7, 00, 00, 8B, FF, 55, 8B, EC, 51, 51, 8D, 45, F8, 50, FF, 15, E0, 91, 62, 00, 8B, 45, F8, 8B, 4D, FC, 6A, 00, 05, 00, 80, C1, 2A, 68, 80, 96, 98, 00, 81, D1, 21, 4E, 62, FE, 51, 50, E8, 85, D8, 00, 00, 83, FA, 07, 7C, 0E, 7F, 07, 3D, FF, 6F, 40, 93, 76, 05, 83, C8, FF, 8B, D0, 8B, 4D, 08, 85, C9, 74, 05, 89, 01, 89, 51, 04, C9, C3, 8B, FF, 51, C7, 01, 48, B3, 62, 00, E8, BE...
 
[+]

Entropy:
6.4631

Code size:
2.2 MB (2,260,480 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
vProt

Command:
"C:\Program Files\avg web tuneup\vprot.exe"


The file vprot.exe has been discovered within the following program.

AVG Web TuneUp  by AVG Technologies
The installer will optionally set and protect the search provider ("Set AVG Secure Search as my default search provider") and homepage ("Set AVG Secure Search as my homepage & new tab page") to the AVG desired page during installation.
www.avg.com/us-en/web-tuneup
46% remove it
 
Powered by Should I Remove It?

Scan vprot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.