Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.1.2.1474 50.00%
6.0.2.1365 50.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
AdjustTokenPrivileges, LookupAccountSidW, LookupAccountNameW, ConvertSidToStringSidW, RegOpenKeyExW, RegEnumKeyExW, RegQueryValueExW, RegCloseKey, GetKernelObjectSecurity, ConvertSecurityDescriptorToStringSecurityDescriptorW, ConvertStringSecurityDescriptorToSecurityDescriptorW, SetKernelObjectSecurity, CreateProcessAsUserW, SetTokenInformation, GetLengthSid, ConvertStringSidToSidW, DuplicateTokenEx, OpenProcessToken, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, RegDeleteValueW, RegEnumValueW, GetUserNameW, LookupPrivilegeValueW
gdi32.dll
SetTextColor, SelectObject, CreatePen, RoundRect, DeleteObject, GetStockObject, CreateRoundRectRgn, DeleteDC, LineTo, MoveToEx, BitBlt, CreateBitmap, GetObjectW, CreateCompatibleDC, SetBkMode
kernel32.dll
CreateFileMappingW, CreateEventW, MultiByteToWideChar, lstrlenA, CreateProcessW, SetLastError, FormatMessageW, RaiseException, InitializeCriticalSectionAndSpinCount, HeapSize, GetProcessHeap, GetFileAttributesW, VerifyVersionInfoW, VerSetConditionMask, FindFirstFileW, FindClose, CreatePipe, LeaveCriticalSection, EnterCriticalSection, ProcessIdToSessionId, Sleep, OpenMutexW, OpenProcess, WaitForSingleObject, MapViewOfFile, GetLastError, LocalFree, ReleaseMutex, OutputDebugStringA, CreateMutexW, GetCurrentProcessId, GetCurrentProcess, UnmapViewOfFile, WaitForMultipleObjects, GetModuleFileNameW, GetNativeSystemInfo, GetVersionExW, CreateEventA, SetEvent, IsProcessorFeaturePresent, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, GetStartupInfoW, HeapSetInformation, InterlockedCompareExchange, InterlockedExchange, DecodePointer, EncodePointer, ExpandEnvironmentStringsW, WriteFile, WaitNamedPipeW, SetNamedPipeHandleState, PeekNamedPipe, FlushFileBuffers, GetSystemTimeAsFileTime, ReleaseSemaphore, CreateSemaphoreA, GetCurrentThreadId, FindResourceExW, lstrlenW, WideCharToMultiByte, LoadResource, LockResource, SizeofResource, LocalAlloc, FindResourceW, SetProcessWorkingSetSize, CloseHandle, DeleteCriticalSection, InitializeCriticalSection, SetUnhandledExceptionFilter, ReadFile, HeapReAlloc, HeapFree, GetSystemInfo, FindNextFileW, TerminateProcess, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, DuplicateHandle, OutputDebugStringW, GetProcAddress, GetModuleHandleW, GetLocaleInfoW, GetTickCount, LoadLibraryW, GetFileSizeEx, CreateFileW, FreeLibrary, CreateDirectoryW, MoveFileW, DeleteFileW, MoveFileExW, GetComputerNameW, HeapDestroy, HeapAlloc
msimg32.dll
GradientFill
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoUninitialize, CoInitializeEx
psapi.dll
GetModuleFileNameExW, EnumProcessModules
rpcrt4.dll
RpcMgmtStopServerListening, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcServerListen
shell32.dll
ShellExecuteW, SHAppBarMessage, SHGetSpecialFolderLocation, SHBrowseForFolderW, SHGetPathFromIDListW, SHGetMalloc, SHGetFolderPathW, Shell_NotifyIconW, SHFileOperationW, SHCreateDirectoryExW
shlwapi.dll
PathAppendW, PathRemoveExtensionW, PathRenameExtensionW, UrlUnescapeA, PathMatchSpecW, PathStripPathW
user32.dll
TranslateMessage, GetMessageW, DefWindowProcW, SendMessageTimeoutW, ExitWindowsEx, GetCursorPos, DispatchMessageW, RegisterClassW, LoadMenuW, GetSubMenu, SetMenuDefaultItem, CreateWindowExW, SendMessageW, GetWindowThreadProcessId, IsWindow, FindWindowW, PostQuitMessage, PostMessageW, SystemParametersInfoW, MessageBoxW, RegisterWindowMessageW, LoadImageW, DestroyIcon, SetTimer, UpdateWindow, ShowWindow, TrackPopupMenu, SetWindowRgn, GetClientRect, LoadCursorW, UnregisterClassW, KillTimer, EndPaint, BeginPaint, DrawIcon, DrawTextW, GetSystemMetrics, GetIconInfo, CreateIconIndirect, FindWindowExW, MsgWaitForMultipleObjects, IsWindowUnicode, GetMessageA, DispatchMessageA, PeekMessageW, GetWindowRect, GetDesktopWindow, SetWindowPos, ReleaseDC, GetDC, EndDialog, SetDlgItemTextW, DialogBoxParamW, PostThreadMessageW, FlashWindowEx, SetForegroundWindow, DestroyMenu, SetLayeredWindowAttributes
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wtsapi32.dll
WTSQuerySessionInformationW, WTSEnumerateProcessesW, WTSFreeMemory

alsys.exe

SKL Client by Deep Software Inc. (Signed)

Remove alsys.exe
Version:   6.1.2.1474
MD5:   4100ee0453a71e4db73b1282cd9dcfea
SHA1:   8a94beb6b68793082de42a2654f31399f403b1b0
SHA256:   cfcf5910deabb8175996882f8c87cc191a0c0e75c8128d8d3374affafe724e7b

What is alsys.exe?

SKL Client (alsys.exe) is part of the SoftActivity Keylogger. A key logging application that is designed to stay hidden on a system and capture key stroke activities and record them in real-time.

About alsys.exe (from Deep Software Inc.)

With Activity Monitor, SoftActivity TS Monitor and SoftActivity Keylogger you can have your hand always on the pulse of what is going on in your LAN. These unique keyloggers allow remote computer moni

DetailsDetails

File name:alsys.exe
Product name:SKL Client
Typical file path:C:\windows\syspkgwk\alsys.exe
File version:6.1.2.1474
Size:1.14 MB (1,191,856 bytes)
Certificate
Issued to:Deep Software Inc.
Authority (CA):VeriSign
Expiration date:Tuesday, February 12, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00163981%
0.028634%
Kernel CPU:0.00034077%
0.013761%
User CPU:0.00129903%
0.014873%
Kernel CPU time:77,250 ms/min
100,923,805ms/min
CPU cycles:8,576,558/sec
17,470,203/sec
Memory
Private memory:8.29 MB
21.59 MB
Private (maximum):17.27 MB
Private (minimum):2.67 MB
Non-paged memory:8.29 MB
21.59 MB
Virtual memory:86.31 MB
140.96 MB
Virtual memory (peak):101 MB
169.69 MB
Working set:8.96 MB
18.61 MB
Working set (peak):24.02 MB
37.95 MB
Page faults:4,786,501/min
2,039/min
I/O
I/O read transfer:166 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:66.92 KB/sec
274.99 KB/min
I/O write operations:10/sec
227/min
I/O other transfer:8.8 KB/sec
448.09 KB/min
I/O other operations:322/sec
1,671/min
Resource allocations
Threads:10
12
Handles:140
600
GUI GDI count:21
103
GUI GDI peak:25
142
GUI USER count:15
49
GUI USER peak:422
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:"C:\windows\syspkgwk\alsys.exe" /terminate
Owner:User
Parent process:alsvc.exe (SKL Client by Deep Software Inc.)

ResourcesThreads

Averages
 
MSVCR100.dll
Total CPU:0.25769312%
0.272967%
Kernel CPU:0.10001052%
0.107585%
User CPU:0.15768260%
0.165382%
CPU cycles:6,192,088/sec
5,741,424/sec
Memory:760 KB
1.16 MB
ntdll.dll
Total CPU:0.12198943%
Kernel CPU:0.04066314%
User CPU:0.08132629%
CPU cycles:1,342,397/sec
Memory:1.23 MB
alsys.exe (main module)
Total CPU:0.00932783%
Kernel CPU:0.00617596%
User CPU:0.00315187%
CPU cycles:1,028,229/sec
Memory:1.21 MB
gdiplus.dll
Total CPU:0.00140621%
Kernel CPU:0.00072441%
User CPU:0.00068180%
CPU cycles:19,942/sec
Memory:1.56 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 50.00%
Windows 7 Professional 50.00%

Distribution by countryDistribution by country

Egypt installs about 100.00% of SKL Client.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE