Managed Antivirus
What is Managed Antivirus? (from GFI Software)
A stand-alone product or part of the GFI MAX RemoteManagement tool, this is an easy to deploy, easy to configure and easy to manage antivirus solution for MSPs and IT Support companies. Ideal for helping migrate customers to managed services, Managed Antivirus helps you to make money and demonstrate your true value. ... Read more
Overview
Managed Antivirus is a program developed by GFI Software. The most used version is 6.2.5528, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. When installed, it will add a context menu handler to the Windows shell in order to provide quick access to the program. The main program executable is sbamui.exe. The software installer includes 39 files and is usually about 211.64 MB (221,923,390 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 67% of users of Managed Antivirus come from the United States, it is also popular in United Kingdom and Netherlands.
Program details
URL: www.gfimax.com/remote-management/managed-antivirus
Installation folder: C:\Program Files2\ADVANC~1\managedav\
Uninstaller: MsiExec.exe /x {9D544611-F437-4153-913E-91CE036583CC} /qf /l*v "C:\users\user\appdata\Local\Temp\VIPRE_MsiUninstall.log" REMOVE=ALL
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 211.64 MB
Language: English (United States)
Files installed by Managed Antivirus
| Program executable: | sbamui.exe |
| Name: | Managed Antivirus |
| Path: | C:\Program Files\Advanced Monitoring Agent\managedav\sbamui.exe |
| MD5: | 66b3dcfdecca33adc8000a0a7f0bf908 |
Additional files:
-
fldrvw2008.ocx (by LogicNP Software (http://www.ssware.com)) - FolderView ActiveX Control
-
GFI.Tools.Run64.exe (by ThreatTrack Security) - GFI AntiMalware Common SDK Merge Module (GFI Software Run64 Application)
-
gfiark.dll (by ThreatTrack Security) - VIPRE Anti-Rootkit
-
gfiark32.sys
-
gfiark64.sys
-
gfiarksh.dll
-
gfiutil.dll - VIPRE Utility Drivers
-
gfiutl32.sys - GFI Utility driver
-
gfiutl64.sys
-
IncompatiblePrograms.dll - GFI AntiMalware Active Protection SDK Merge Module
-
kbu.dll - VIPRE Antivirus (kbu Dynamic Link Library)
-
mimepp.dll (by Hunny Software, Inc) - Hunny MIME++ Library (DLL for Hunny MIME++ Library)
-
oeapiinitcom.dll (by Nektra) - OEAPI (OEAPI oeapiinitcom)
-
oecom.dll (by Nektra) - OEAPI oecom
-
oehook.dll - OEAPI oehook
-
oestore.dll - OEAPI oestore
-
SBAgentDiagnosticTool.exe - Managed Antivirus (SBAgentDiagnosticTool)
-
SBAMCommandLineScanner.exe - GFI Command Line Scanner
-
SBAMCreateRestore.exe - Create Restore Point
-
SBAMOutlook.dll - GFI AntiMalware Email AV SDK Merge Module (Outlook Antivirus Plugin)
-
SBAMScanShellExt.DLL - SBAM Scan Shell Extension
-
SBAMSvc.exe - GFI Software Anti Malware Service
-
SBAMSvcPS.dll - SBAMSvcP Dynamic Link Library
-
SBAMTray.exe - SBAMTray Application
-
sbap.dll - Active Protection Library
-
SBArva.dll - GFI Email Antivirus
-
SBCA.dll - Custom Actions for the Installer
-
SBEAgent.dll - SBEAgent Dynamic Link Library
-
SBEAgentUpgrader.exe - GFI Business Agent Upgrader
-
SbHips.dll - GFI Firewall SDK (GFI Firewall SDK Host Intrusion Prevention System Library)
-
SBRC.exe - Registry Cleaner
-
SBRES_MAX_en-US.dll - VIPRE English Language Resources
-
SBSetupDrivers.exe - GFI Firewall SDK Drivers Installer
-
SBTE.dll - Threat Engine Dynamic Link Library
-
SBTIS.dll - GFI Firewall SDK Transport Inspection System Library
-
SpursDownload.dll - Spurs Download Dynamic Link Library
-
unrar.dll - RAR decompression library
-
vipre.dll - VIPRE Threat detection and remediation system
Behaviors exhibited
Context Menu Handler
- SBAMScanShellExt.DLL added to Windows Explorer under the name 'SBAMScanShellExt' with a class of {D47F1671-0EAA-4c02-8AC9-960BB08DB951}.
Service
- SBAMSvc.exe runs as a service named 'Managed Antivirus' (SBAMSvc) "Manages your antispyware and antivirus application".
Startup File (User Run Once)
- SBAMSvc.exe is loaded once in the current user (HKCU) registry as a startup file name 'UDIMGInstDelete' which loads as cmd /Q /C rd /S /Q "C:\users\user\appdata\Local\Temp\{0612100D-A845-6251-815D-52800B4BABA1}".
2 Startup Files (All Users Run)
- SBRC.exe is loaded in the all users (HKLM) registry as a startup file name 'SBRegRebootCleaner' which loads as "C:\Program Files\Advanced Monitoring Agent GP\managedav\SBRC.exe".
- SBAMTray.exe is loaded in the all users (HKLM) registry as a startup file name 'SBAMTray' which loads as "C:\Program Files2\ADVANC~1\managedav\SBAMTray.exe".
Windows Firewall Allowed Program
- SBAMSvc.exe is added as a firewall exception for 'C:\Program Files\GFI Software\GFI Cloud Agent\viprebusiness\SBAMSvc.exe'.
How do I remove Managed Antivirus?
You can uninstall Managed Antivirus from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Managed Antivirus, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Managed Antivirus.
OS VERSIONS
Win 7 (SP1) 53%
Win Vista (SP1) 0%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 4%
Keep it 96%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
53.18% |
|
| Windows 10 |
41.88% |
|
| Windows Vista |
2.59% |
|
| Windows XP |
2.35% |
|
Which OS releases does it run on? |
| Windows 7 Professional |
36.08% |
|
| Windows 7 Home Premium |
14.15% |
|
| Windows 10 Home |
11.79% |
|
| Windows 8.1 |
8.73% |
|
| Windows 8.1 Pro |
8.49% |
|
| Windows 10 Pro |
6.37% |
|
Geography
67.23% of installs come from the United States
Which countries install it?
| United States |
67.23% |
| United Kingdom |
9.63% |
| Netherlands |
4.73% |
| Australia |
3.72% |
| Canada |
2.53% |
| France |
2.20% |
| Italy |
1.69% |
| Belgium |
1.18% |
| Norway |
1.18% |
| Germany |
1.01% |
| New Zealand |
0.84% |
| Brazil |
0.51% |
| Sweden |
0.51% |
| India |
0.51% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
36.30% |
|
| Hewlett-Packard |
29.11% |
|
| ASUS |
9.25% |
|
| Acer |
8.56% |
|
| Toshiba |
6.85% |
|
| Lenovo |
4.11% |
|
| Intel |
2.74% |
|
| GIGABYTE |
1.71% |
|
| Samsung |
1.37% |
|
Common models |
| Dell OptiPlex 3010 |
2.29% |
|
| Dell OptiPlex 9020 |
2.29% |
|
| Dell XPS 8700 |
2.29% |
|
| HP Compaq 8100 Elite CMT ... |
2.29% |
|
| HP ENVY m6 Notebook PC |
2.29% |
|
| HP Pavilion dv6 Notebook ... |
2.29% |
|
About GFI Software
GFI Software is a developer of computer security software whose products include software for filtering spam and viruses from e-mail as well as for monitoring and scanning networks for security purposes.
Publisher URL: www.gfi.com