Avp. Avp exe: what is the process, why is it needed and how to remove it? A radical solution for productivity

Ceramics, fireclay 14.07.2020
Ceramics, fireclay

As a rule, the appearance of unidentified processes that load system resources in the computer monitoring system frightens and alarms many users very much, because some immediately assume the penetration of a virus. Here it should be clearly understood that not all involved and active processes at the moment are malicious. Further, it is proposed to see what AVP.exe is in the "Task Manager", what this process is responsible for, why there is a load on the system from its side, how to get rid of it, etc. Looking ahead a bit, all users who have encountered this service , it is worth reassuring, since in most cases this process is not considered viral (although such situations also occur).

What is the AVP.exe process?

So what is this process? Virus or not? To begin with, if an anti-virus package developed by Kaspersky Lab is installed on the user's computer, there should be no cause for concern. The AVP.exe process is one of the executable components of the anti-virus itself and is mainly responsible for activating the background system scan for viruses (on a schedule or in real time), and in some cases it can also be used to update the components of the main program or anti-virus databases. Usually, this process is not limited to only this process.

If you sort the active services, for example, by the name of the executable file, it is easy to see that there will be another component nearby - AVPUI.exe. This is normal, and so far we are not talking about any critical situations.

Camouflaged virus

What kind of AVP.exe process is is a little clear. But let's look at its presence in the list of active services from a slightly different point of view. But what if the user has this process displayed, but the antivirus package to which it, in theory, should correspond, is not installed on the computer? Here it immediately becomes clear that we are talking about a virus that is simply disguised as a component of a protective tool. As for the class of threats that can enter the system under such names, most often these are adware viruses, spyware, and trojans. You can even get rid of them manually, which will be discussed separately.

Antivirus components

Speaking specifically about Kaspersky Lab's software products, indeed, the AVP.exe process in the Task Manager will be present when you install any of them, whether you like it or not. Immediately you should pay attention to the moment described just above, concerning the fact that there can be not one, but two or more services. The penetration of threats of the same name with the installed original antivirus can be excluded in principle, since absolutely all programs of this developer have such a level of self-protection that no virus has yet been created that could bypass it. So in such a situation, there is no cause for concern.

Why does AVP.exe load the processor 100%?

It is another matter that the background services of all Kaspersky Lab applications are experiencing an increased load on system resources. This is recognized by everyone. And it is connected only with the fact that the programs themselves, regardless of the level, are very resource-intensive. True, such loads usually do not particularly affect modern computer systems.

As far as can be judged from user reviews, AVP.exe loads the processor by a maximum of 50-70 percent, and then only if several background processes (for example, scanning and updating) are running simultaneously. Loads at the level of full utilization of the CPU and RAM can only be found on relatively weak machines. But just for the owners of such computers and laptops, the following tips are suitable.

How to reduce the load on resources in the antivirus settings?

As far as load optimization is concerned, many do not understand a little that completing the antivirus process in the Task Manager will lead nowhere. Actually, do not try to perform such actions, you will still get an AVP.exe error with a message that the process cannot be completed. So what to do in such a situation? We'll have to look at the status of some antivirus program settings, which for some reason ordinary users almost never look at.

First, open the basic options and go to the performance item by selecting it from the menu on the left. Check all the boxes shown in the image above. Apply the settings.

If, after performing such actions, the load is still very noticeable, you need to re-enter the above section of parameters and supplement the settings by activating a few more items, as shown in the picture.

Pausing protection and setting up a scan schedule

Finally, so that the AVP.exe process does not affect system resources, find the pause protection section in the antivirus settings, but not the one that disables real-time protection, namely the menu regarding the schedule settings.

In the program parameters there is a kind of scheduler, in which you can set the suspension of work both with an indication of the desired time range, and with a link to the programs being launched, at the start of which the antivirus will suspend its activity. But this does not mean that protection will be disabled. The program will simply not use its own background processes to provide any additional performed actions.

What if it's a virus?

Finally, let's take a look at a situation where it is known for sure that AVP.exe is a virus. As it is already clear, such a process should not appear in the system without the presence of installed Kaspersky Lab software products. By and large, even if you have doubts about the original service, there is nothing easier than finding out the location of the program file by selecting the corresponding item in the "Task Manager" through the PCM during the process.

Antivirus files are always located in the Program Files (x86) directory. If the location of the file of the questionable object is different, you can safely delete it, moreover, together with the main directory, having previously completed the process itself (as already mentioned, the original processes cannot be completed).

Further, assuming that there is no antivirus in the system, open the registry editor (regedit), find all the keys corresponding to the virus (the search can be set by the abbreviation AVP), and delete them. If the virus files cannot be deleted, actions with the registry are performed first.

However, you can do much easier by using portable antivirus software to neutralize the threat. If, for some reason (which is unlikely), tools such as Dr. Web CureIt! or KVRT will not be able to neutralize the threat, use the disk utility Rescue Disk from the same Kaspersky Lab and check the computer system for viruses even before Windows boots. It almost always helps.

Hello everyone. Today I will tell you what kind of process avp.exe is and why it can load the processor. You have the avp.exe process because you have Kaspersky Anti-Virus installed. That is, this process is not a virus and there is nothing dangerous in it.

If you have the avp.exe process, but there is no Kaspersky, then apparently not everything is clean here, it is possible that you have some kind of virus sits and disguises itself as an antivirus! Here's a joke! If you have just such a case, then quickly check your computer with a utility, this is the best utility for catching viruses!

But first, if you don't mind, let me tell you why sometimes you can see the process in the dispatcher that you have NOT seen before. Many programs, including antivirus programs, use separate processes for some of their functions. This is done in order to optimize the load and to minimize the impact of errors. Well, that is, for example, if an error occurred in some function that worked in a separate process, then only this process will end! While the main process of the program will remain running. Therefore, if, for example, the avp.exe process loads the processor, then it is possible that some function has started working in the antivirus. For example, it can be scanning for viruses, well, I hope you understand what I mean ..

Since I have Kaspersky Anti-Virus installed, I have the avp.exe process (run as System) and there is also the avpui.exe process:


As you can see, they don't load my processor at all, they don't consume much RAM. True avp.exe, I ate as much as 30 MB of RAM, by the way, after a while, he already began to eat about 70 MB ...

Both of these processes are launched from this folder:

C: \\ Program Files (x86) \\ Kaspersky Lab \\ Kaspersky Internet Security 16.0.1


I tried to complete some process, but it's clear that I couldn't do it, here's the error that popped up:


That is, the processes under protection, although, even the avpui.exe process could not be shut down, although it was not launched on behalf of the System ..

Well, that is, I think that now you understand what kind of process avp.exe is, from which program. Now let's figure out a little about why this process can load the computer.

By the way, I noticed that Casper is not so fast, for example, it starts for me for twenty seconds, during which such a window hangs:


But to be honest, judging by the way the antivirus itself works, they finished it specifically and the antivirus itself, without any checks and updates of signature bases, does NOT load the computer at all! I will not argue, it's just that he didn't load my computer, despite the fact that my test computer only has 1 gig of RAM! But for some users, Casper still loads the computer ...

So look, I first wrote there that some functions are performed in separate processes. I decided to check this, I ran the anti-virus database update in Kaspersky Anti-Virus, as a result, the avp.exe process began to load the processor abruptly, see:


That is, you see, if the avp.exe process loads the system, then Kaspersky is doing something there! So what else have I done. I ran a virus scan, and when this scan started, the avp.exe process again began to load the processor a little, sometimes the load was up to 50%:


So what is the conclusion? If the avp.exe process loads Windows, then Kaspersky does something there, or updates will be checked or a virus scan is running in the background.

So what else can you do to try to calm down the avp.exe process? Look, open Kaspersky and go into the settings there, for this click this button:


First, go to the Performance tab and check that all these checkboxes are enabled there:


And then on the same tab, there will still be checkmarks at the bottom, they must also be enabled:


Then look, you see there is something like Pause File Anti-Virus. Do you know why this function was made? Because it is this File Anti-Virus that can decently slow down your computer, if you have, for example, a slow hard drive. So, just in case, I inform you that you can click on this button and there you can specify when to disable File Anti-Virus:


You can also add an application that will pause File Anti-Virus. You know, the functions are so, well, quite advanced, I honestly tell you, I didn't know that there is such a thing in Kaspersky ...


In this drop-down menu, click on each type of check. This is just a background check, it can slow down the computer, so it may make sense to disable scheduled checks, to do this, just select manually from the menu (you need to select in each type of check):


Also, the reason that the avp.exe process loads the computer may be some kind of jamb in the scan, when Kaspersky tries to scan a file, but this cannot be done. Or something interferes with it. It is possible that the virus is trying to disrupt the work of Kaspersky so that it does not remove them, but of course this happens rarely, but as a reason, it is quite possible ..

Well guys, that's all, I hope that this infa was useful to you and that you were able to calm down the avp.exe process a little! Good luck and good mood

23.08.2016

Sometimes avp.exe and other EXE system errors can be related to problems in the Windows registry. Several programs can share the same avp.exe file, but when these programs are uninstalled or changed, sometimes orphaned (invalid) EXE registry entries are left behind.

Basically, this means that while the actual path to the file may have changed, its incorrect former location is still recorded in the Windows registry. When Windows tries looking up these incorrect file references (file locations on your PC), avp.exe errors can occur. In addition, malware infection may have corrupted the registry entries associated with Kaspersky Endpoint Security for Business Advanced. Thus, these invalid EXE registry entries need to be repaired to fix the root of the problem.

Manually editing the Windows registry to remove invalid avp.exe keys is not recommended unless you are PC service professional. Errors made while editing the registry can cause your PC to malfunction and cause irreparable damage to your operating system... In fact, even a single comma in the wrong place can prevent your computer from booting!

Because of this risk, we highly recommend using a trusted registry cleaner such as %% product %% (Developed by Microsoft Gold Certified Partner) to scan and repair any avp.exe-related registry problems. Using a registry cleaner automates the process of finding invalid registry entries, missing file references (like the one causing your avp.exe error), and broken links within the registry. Before each scan, a backup copy is automatically created, allowing you to undo any changes with one click and protecting you from possible damage to your computer. The best part is that fixing registry errors can dramatically improve system speed and performance.


Warning: Unless you are an experienced PC user, we do NOT recommend manually editing the Windows registry. Incorrect use of the Registry Editor can lead to serious problems and require you to reinstall Windows. We do not guarantee that problems resulting from incorrect use of Registry Editor can be fixed. Your use of the Registry Editor is at your own risk.

To manually repair your Windows registry, first you need to create a backup by exporting a portion of the registry related to avp.exe (eg.Kaspersky Endpoint Security for Business Advanced):

  1. Click the button To begin.
  2. Enter " command" in search bar ... DO NOT PRESS YET ENTER!
  3. Holding the keys CTRL-Shift on the keyboard, press ENTER.
  4. A dialog box for access will be displayed.
  5. Click on Yes.
  6. The black box opens with a blinking cursor.
  7. Enter " regedit" and press ENTER.
  8. In the Registry Editor, select the avp.exe-related key (eg.Kaspersky Endpoint Security for Business Advanced) you want to back up.
  9. On the menu File select Export.
  10. In the list Save to select the folder where you want to save the backup copy of the Kaspersky Endpoint Security for Business Advanced key.
  11. In field File name enter a name for the backup file, such as "Kaspersky Endpoint Security for Business Advanced Backup".
  12. Make sure in the box Export range value selected Selected branch.
  13. Click on Save.
  14. The file will be saved with extension .reg.
  15. You now have a backup of your avp.exe-related registry entry.

The next steps for manually editing the registry will not be described in this article, as they can most likely damage your system. If you would like more information on manually editing the registry, please see the links below.

Process names in Task Manager are often confusing to users. Among these, avp.exe and avpui.exe are often found - many users do not understand why they are needed in the task manager and what role they play in the system.

Purpose of processes

To talk about processes, you need to figure out which program they belong to. Both services mentioned in Windows are related to antivirus. It is “ KasperskyAntiVirusProtection”, Which is reduced in the system not to KAV, but to avp (anti virus protection). The addition of the ".exe" extension indicates only the executable component (program).

Now you can see what the processes themselves are responsible for:

  • AVP... Associated with the work of the program itself. It starts with the system and is responsible for providing protection from viruses.
  • AVPUI... Work related graphical interface applications. It is called only when you click on the program icon and remains active while this window is open.

Some Kaspersky products launch tasks referred to in other ways... For example, there is such a process as "KIS" - protection on the Internet. The difference was added so that when using the full package, different names are displayed and there are no conflicts.

Could it be a virus?

Of course, virus authors are well aware that such a process name can help hide their "products". Therefore, the task manager can simultaneously work several similar processes... The difference will be in the name or other factors:

  • on the computer antivirus not installed Kaspersky;
  • underscores in the titleeg "avp.exe"
  • absence " Descriptions».

Having determined that this is a cunning virus, we simply run a check for their presence in the system. The installed antivirus or the DrWeb.CureIt utility will help.

High load reasons

If "avp.exe" is definitely not a virus, then it can still periodically load the processor (CPU) up to almost 100%. This is due to background work programs. Load peaks can be seen, for example, after downloads finished files from the Internet. In such situations, Kaspersky Anti-Virus starts scanning them, especially executable files, and can run virtual startup simulationto check the consequences and definitely not miss the malicious software. Also, when running a regular scan with Kaspersky Anti-Virus, the CPU load will be high.

There are also situations when the load seems to be taken from nowhere. Most often, gamers encounter such moments, but this fate does not bypass ordinary users either. These situations are routine resource consumption and are time limited. And they appear when:

  1. Independent updating programs.
  2. Game updates and gaming applications. They are often updated in the background while another game is running. Bllizard especially distinguished itself with its "can be played" technology. The load on the CPU comes from downloading game files and from checking these files with an antivirus. Everything is done on the fly and programs overlap each other's access to the file.
  3. Updates operating system.
  4. Updating the program or databases the antivirus itself. The load is due to the update task itself. Own files cannot be scanned.

There are also "abnormal" situations of high consumption. You can fight them by reducing power consumption in a regular way. This will require:


This can significantly reduce the consumption of computer power and facilitate its work. Just remember that these settings have specific purposes and some of them have to be disabled. at one's own risk... For example, "Prevent infection on restart" slows down Windows startup. But in the off state, it opens a "loophole" at boot.

Application error

There is also a problem with the pop-up error message in "avp.exe". It is connected with the work of the data execution prevention function in the settings of the system itself. This problem is resolved in one of the following ways:

  1. Reinstallation... A banal step with reinstalling antivirus often solves this problem.
  2. Disabling the function in the OS... To do this, you need to start the "Run" window ("Win + R") and write the following text in it:
bcedit.exe / set (current) nx AlwaysOff

The way is fair forWindows 7... In higher versions of the OS, the problem simply does not occur.

Sometimes users of computer systems may face an unpleasant situation when a very "gluttonous" process appears in the "Task Manager", represented by the executable file avp.exe. What this service is, many people know, or at least guess. For those who have no idea about this, further details are given. Special attention will be paid to the issues of reducing the load on system resources, if such is observed constantly.

Avp.exe: what is this process in the Task Manager?

It should be said right away that in most cases this service is not a virus, as some users think. The avp.exe process is one of the anti-virus components from Kaspersky Lab. It is responsible for finding and installing updates, background checking of files, etc.

But, if the user in the "Task Manager" observes the appearance of the avp.exe process, but he does not have the specified antivirus installed, there is reason to think about it, since it may indeed be a threat that, as usual, disguises itself as a legitimate program.

It is quite elementary to check whether it is a virus or not. As a rule, the list of active processes contains not one file, but two - avp.exe * 32 and avpui.exe * 32. They have a system startup status. However, in our case, this is not an indicator. Through the RMB menu on both processes, you must go to the file location item.

By default, these two executable components should be located in the Kaspersky Internet Security (or Anti-Virus) directory with an indication of the version of the software product, located in the Kaspersky Lab directory, which in turn is nested in the ProgramFiles (x86) folder. Why is the program directory (x86) used as the main directory? Yes, only because in 64-bit systems programs for 32-bit architecture are installed into it (in the process description, this is indicated by the value after the asterisk). If the location of the executable files is different from the above, it may be a virus (unless the 64-bit version is installed and the root directory is ProgramFiles).

Why is avp.exe loading the processor?

But let's look at the situation with the load on the central processor and rAM... Almost all users complain about this state of affairs. What is the reason?

The fact is that the antivirus itself is a resource-intensive program with all its additional components. This is recognized by everyone. But it also happens that the load on system resources is also observed during the moments of computer idleness, when it seems that no third-party processes are running. Here the problem boils down to the fact that at the moment the avp.exe service itself is performing some background operations (checks or installs updates, scans the system in real time or performs this procedure according to a set schedule, etc.). But how to make sure that the service does not load computer resources?

Is it possible to terminate antivirus processes manually?

This is where users start to wonder how to remove avp.exe while trying to terminate processes in the Task Manager. Alas, it is impossible to complete the work of the above modules, even at the administrator level (usually an error is generated).

The only thing that can be done is to use the settings of the antivirus itself, which many either do not know about, or simply forget, believing that it is better not to touch the default settings.

using basic settings?

So, the optimal solution to reduce the load rendered by the avp.exe service on system resources is to enter the antivirus settings with the choice of the performance section.

Here, immediately you need to pay attention to the points shown in the image above. Check the boxes next to each of them. Thus, as you might guess from the names, the antivirus will yield resources to the system to carry out its own processes and tasks.

Additional measures

But you shouldn't be limited to such settings only. If you use the pause hyperlink of the file antivirus, you can achieve that its activity will be reduced.

In this case, you can specify the time interval when this should be done, or create your own list of programs, when launched, the antivirus should suspend its activity.

Next, you should use the check tab. Below there is a schedule setting. It is very possible that background scanning is enabled. From the drop-down list of check types, you need to sequentially select each item and specify manual launch for it in the settings.

However, it is possible that the load is observed just at those moments when the antivirus is trying to neutralize some kind of threat, and it, as they say, fiercely resists, trying to counteract the scanner's work. Finally, another "jamb" may be associated with the fact that the user has a pirated or jailbroken version of the software installed, if it is initially paid or requires an official license (we are not talking about free modifications in this case).

Instead of a total

If we draw a line, it remains to say that many users simply do not want to delve into the settings of this package, but it would be worthwhile, since other methods will not work to reduce the load on the system. Some people do not even know that the antivirus can be suspended without disabling it for certain intervals. It goes without saying that all this information applies only to those cases when the antivirus is installed on the system. If it is not there, and the process is active, you will have to immediately scan your computer for threats using portable or disk utilities.

We recommend reading

Up