GFI Business Agent
What is GFI Business Agent? (from GFI Software)
GFI VIPRE® Antivirus Business is a scalable Endpoint Solution that protects your networked machines from all types of malware and viruses and includes a firewall (Premium only). Its Bad URL Blocking feature under web filtering prevents end users from accidentally opening known bad websites (Premium only). VIPRE Busines... Read more
Overview
GFI Business Agent is a program developed by GFI Software. The most used version is 6.2.5530, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. When installed, it will add a context menu handler to the Windows shell in order to provide quick access to the program. The main program executable is sbamui.exe. The software installer includes 47 files and is usually about 200.46 MB (210,198,586 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 84% of users of GFI Business Agent come from the United States, it is also popular in Canada and United Kingdom.
Program details
URL: www.GFI.com
Installation folder: C:\Program Files\GFI Software\GFIAgent\
Uninstaller: MsiExec.exe /x {9D544611-F437-4153-913E-91CE036583CC} /qf /l*v "C:\DOCUME~1\user\LocalS~1\Temp\VIPRE_MsiUninstall.log" REMOVE=ALL
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 200.46 MB
Language: English (United States)
Files installed by GFI Business Agent
| Program executable: | sbamui.exe |
| Name: | GFI Business Agent |
| Path: | C:\Program Files\gfi software\gfiagent\sbamui.exe |
| MD5: | aefef0c444c36368f68406d2cfd117a8 |
Additional files:
-
IncompatiblePrograms.dll - GFI AntiMalware Active Protection SDK Merge Module
-
SBRC.exe - Registry Cleaner
-
SBRE.dll - Anti-Rootkit Engine
-
vipre.dll - VIPRE Threat detection and remediation system
-
SBAMOutlook.dll - GFI AntiMalware Email AV SDK Merge Module (Outlook Antivirus Plugin)
-
GFI.Tools.Run64.exe - GFI AntiMalware Common SDK Merge Module (GFI Software Run64 Application)
-
SBAMSvc.exe - GFI Software Anti Malware Service
-
SBAMSvcPS.dll - SBAMSvcP Dynamic Link Library
-
sbap.dll - Active Protection Library
-
SBArva.dll - GFI Email Antivirus
-
SBCA.dll - Custom Actions for the Installer
-
SBPIMSvc.exe - Plug-in Manager Service
-
SBTE.dll - Threat Engine Dynamic Link Library
-
SpursDownload.dll - Spurs Download Dynamic Link Library
-
Sunbelt.Tools.Run64.exe
-
gfiarksh.dll - VIPRE Anti-Rootkit
-
SBAgentDiagnosticTool.exe - GFI Business Agent (SBAgentDiagnosticTool)
-
SBAMCommandLineScanner.exe - GFI Command Line Scanner
-
SBAMCreateRestore.exe - Create Restore Point
-
SBAMRes.dll - VIPRE English Language Resources
-
SBAMSafeModeUI.exe - Mamba Safe Mode UI
-
SBAMScanShellExt.DLL - SBAM Scan Shell Extension
-
SBAMTray.exe - SBAMTray Application
-
SBEAgent.dll - SBEAgent Dynamic Link Library
-
SBEAgentUpgrader.exe - GFI Business Agent Upgrader
-
SBRES_VPC_en-US.dll
-
SBRES_VPP_en-US.dll
-
SbFwe.dll - GFI Firewall SDK (GFI Firewall SDK Firewall Engine Library)
-
SbHips.dll - GFI Firewall SDK Host Intrusion Prevention System Library
-
SBSetupDrivers.exe - GFI Firewall SDK Drivers Installer
-
SBTIS.dll - GFI Firewall SDK Transport Inspection System Library
-
SbWebFilter.dll - GFI Firewall SDK WebFilter Library
-
kbu.dll - VIPRE Antivirus (kbu Dynamic Link Library)
-
fldrvw2008.ocx (by LogicNP Software (http://www.ssware.com)) - FolderView ActiveX Control
-
mimepp.dll (by Hunny Software, Inc) - Hunny MIME++ Library (DLL for Hunny MIME++ Library)
-
gfiark.dll (by ThreatTrack Security)
-
oeapiinitcom.dll (by Nektra) - OEAPI (OEAPI oeapiinitcom)
-
oecom.dll (by Nektra) - OEAPI oecom
-
oehook.dll - OEAPI oehook
-
oestore.dll - OEAPI oestore
-
unrar.dll - RAR decompression library
Behaviors exhibited
Context Menu Handler
- SBAMScanShellExt.DLL added to Windows Explorer under the name 'SBAMScanShellExt' with a class of {D47F1671-0EAA-4c02-8AC9-960BB08DB951}.
2 Services
- SBAMSvc.exe runs as a service named 'VIPRE Antivirus' (SBAMSvc) "Manages your antispyware and antivirus application".
- SBPIMSvc.exe runs as a service named 'SB Recovery Service' (SBPIMSvc) "SB Recovery Service".
2 Startup Files (All Users Run)
- SBAMTray.exe is loaded in the all users (HKLM) registry as a startup file name 'SBAMTray' which loads as "C:\Program Files\GFI Software\GFIAgent\SBAMTray.exe".
- SBRC.exe is loaded in the all users (HKLM) registry as a startup file name 'SBRegRebootCleaner' which loads as "C:\Program Files\GFI Software\GFIAgent\SBRC.exe".
Windows Firewall Allowed Program
- SBAMSvc.exe is added as a firewall exception for 'C:\Program Files\GFI Software\GFIAgent\SBAMSvc.exe'.
Resource utilization averages
Show technical details
| SBAMSvc.exe |
| Memory: | 100.88 MB | |
| Total CPU: | 0.0002107341% | |
| Kernel CPU: | 0.00013188% | |
| User CPU: | 0.00007885% | |
| CPU cycles/sec: | 108,680,136 | |
| Switches/sec: | 9 | |
| I/O reads/min: | 58.74 MB | |
| I/O writes/min: | 8.26 MB | |
| SBPIMSvc.exe |
| Memory: | 2.56 MB | |
| Total CPU: | 0.0000118680% | |
| Kernel CPU: | 0.00000899% | |
| User CPU: | 0.00000288% | |
| CPU cycles/sec: | 32,639 | |
| I/O reads/min: | 2 Bytes | |
| I/O writes/min: | 383 Bytes | |
| SBAMTray.exe |
| Memory: | 2.57 MB | |
| Total CPU: | 0.0005708652% | |
| Kernel CPU: | 0.00040307% | |
| User CPU: | 0.00016779% | |
| CPU cycles/sec: | 128,335 | |
| Switches/sec: | 2 | |
| I/O writes/min: | 17 Bytes | |
How do I remove GFI Business Agent?
You can uninstall GFI Business Agent from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program GFI Business Agent, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove GFI Business Agent.
OS VERSIONS
Win 7 (SP1) 74%
Win Server 2003 1%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 9%
Keep it 91%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
76.58% |
|
| Windows 10 |
13.16% |
|
| Windows XP |
8.42% |
|
| Windows Vista |
1.32% |
|
| Windows Server 2003 |
0.53% |
|
Which OS releases does it run on? |
| Windows 7 Professional |
61.48% |
|
| Microsoft Windows XP |
8.44% |
|
| Windows 7 Home Premium |
6.07% |
|
| Windows 7 Enterprise |
4.75% |
|
| Windows 8.1 Pro |
4.22% |
|
| Windows 7 Ultimate |
3.96% |
|
Geography
84.38% of installs come from the United States
Which countries install it?
| United States |
84.38% |
| Canada |
3.74% |
| United Kingdom |
2.38% |
| Australia |
1.02% |
| Japan |
1.02% |
| Netherlands |
0.68% |
| India |
0.51% |
| Ireland |
0.51% |
| Italy |
0.51% |
| Slovenia |
0.34% |
| MA |
0.34% |
| Singapore |
0.34% |
| Finland |
0.34% |
| Mexico |
0.34% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
61.90% |
|
| Hewlett-Packard |
22.11% |
|
| Intel |
4.42% |
|
| Lenovo |
4.08% |
|
| Acer |
2.38% |
|
| Toshiba |
2.38% |
|
| GIGABYTE |
1.70% |
|
| Samsung |
0.68% |
|
| Compaq |
0.34% |
|
Common models |
| Dell OptiPlex 780 |
4.72% |
|
| Dell OptiPlex 390 |
3.30% |
|
| Dell OptiPlex 3010 |
3.30% |
|
| Dell Precision WorkStatio... |
3.30% |
|
| Dell OptiPlex 3020 |
2.83% |
|
| Dell Latitude E6530 |
2.83% |
|
About GFI Software
GFI Software is a developer of computer security software whose products include software for filtering spam and viruses from e-mail as well as for monitoring and scanning networks for security purposes.
Publisher URL: www.gfi.com