Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

6.13.0.13771	10.78%
6.12.0.13601	2.61%
6.11.0.13348	4.17%
6.11.0.13307	0.87%
6.10.0.13089	1.39%
6.9.0.12585	12.17%
6.8.0.12323	0.17%
6.7.0.12055	4.52%
6.6.0.11664	16.70%
6.5.0.11422	12.52%
6.4.0.11328	4.87%
6.3.0.11079	20.17%
6.2.0.10687	2.96%
6.1.0.10441	2.78%
6.0.0.10297	2.09%
6.0.0.10201	1.22%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ReportEventW, OpenServiceW, StartServiceCtrlDispatcherW, OpenSCManagerW, DeleteService, CloseServiceHandle, CreateServiceW, ConvertStringSecurityDescriptorToSecurityDescriptorW, DeregisterEventSource, ReportEventA, RegisterEventSourceA, CryptEnumProvidersA, CryptReleaseContext, CryptDestroyKey, CryptGetProvParam, CryptAcquireContextA, CryptGetUserKey, CryptExportKey, CryptDestroyHash, CryptSignHashA, CryptSetHashParam, CryptCreateHash, CryptDecrypt, StartServiceW, RegSetValueExW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, RegCreateKeyExW, ControlService, RegisterServiceCtrlHandlerW, SetServiceStatus, QueryServiceStatus, RegisterEventSourceW, CryptGenRandom, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSidSubAuthorityCount, GetSidSubAuthority, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegDeleteKeyW, RegQueryInfoKeyW

crypt32.dll

CertGetCertificateContextProperty, CertOpenStore, CertFindCertificateInStore, CertEnumCertificatesInStore, CertCloseStore, CertDuplicateCertificateContext, CertFreeCertificateContext

iphlpapi.dll

GetAdaptersInfo

kernel32.dll

DllMain

ole32.dll

CoUninitialize, CoInitialize, CoTaskMemFree, CoCreateInstance

shell32.dll

ShellExecuteW, SHGetFolderPathW

shlwapi.dll

PathFileExistsW, PathAddBackslashW, PathCombineW, StrCmpIW, PathFindFileNameW

user32.dll

GetProcessWindowStation, MessageBoxA, GetUserObjectInformationW, LoadStringA, ShowWindow, GetDesktopWindow

version.dll

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

winhttp.dll

WinHttpGetIEProxyConfigForCurrentUser

wintrust.dll

WinVerifyTrust

c2c_service.exe

Skype Click to Call by Skype Technologies SA (Signed)

Remove c2c_service.exe

Version:	6.9.0.12585
MD5:	eb17df573b4423df0b3b2ee3b268a6de
SHA1:	2a8c0ed5acca983996bee6d04f8f81a7876fff64
SHA256:	58ac43514307d2472e0d2c6b58f533c71e228d6bafd7ada7996def10db57d76e

What is c2c_service.exe?

The Click & Call Advertising with Skype plug-in highlights Skype contacts and phone numbers on most websites. Within the web browser such as Internet Explorer, click on the number to call it with Skype. Phone numbers and Skype contacts are highlighted wherever they appear on the web.

About c2c_service.exe (from Skype Technologies SA)

“Call numbers instantly, anywhere on the web, with just one click. It’s like magic – once you install Skype Click to Call, you can call on the web with just one click. Call numbers marked 'free' at no ”

Overview

c2c_service.exe runs as a service under the name Skype C2C Service with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Skype Click to Call published by Skype Technologies S.A., Skype Click to Call from Skype Technologies S.A. and Skype Click to Call by Skype Technologies S.A.. The file is digitally signed by Skype Technologies SA which was issued by the VeriSign certificate authority (CA).

Details

File name:	c2c_service.exe
Publisher:	Skype Technologies S.A.
Product name:	Skype Click to Call
Description:	Skype C2C Service
Typical file path:	C:\ProgramData\skype\toolbars\skype c2c service\c2c_service.exe
File version:	6.9.0.12585
Size:	3.14 MB (3,289,208 bytes)
Build date:	5/14/2013 9:25 AM
Certificate
Issued to:	Skype Technologies SA
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows Console
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Skype Click to Call

Skype Technologies S.A.

22% remove

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'Skype C2C Service'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00163332%	0.028634%
Kernel CPU:	0.00095588%	0.013761%
User CPU:	0.00067744%	0.014873%
Kernel CPU time:	17,849,157 ms/min	100,923,805ms/min
CPU cycles:	1,690,567/sec	17,470,203/sec
Context switches:	62/sec	284/sec
Memory
Private memory:	3.13 MB	21.59 MB
Private (maximum):	7.33 MB
Private (minimum):	5.2 MB
Non-paged memory:	3.13 MB	21.59 MB
Virtual memory:	53.61 MB	140.96 MB
Virtual memory (peak):	64.74 MB	169.69 MB
Working set:	5.81 MB	18.61 MB
Working set (peak):	8.05 MB	37.95 MB
Page faults:	8,672/min	2,039/min
I/O
I/O read transfer:	337 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	2 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	6 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	7	12
Handles:	121	600
GUI GDI count:	4	103
GUI USER count:	3	49

Process properties

Integrety level:	System
Platform:	32-bit
Command lines:	"C:\ProgramData\skype\toolbars\skype c2c service\c2c_service.exe" "C:\Documents and Settings\user\Application data\skype\toolbars\skype c2c service\c2c_service.exe"
Owner:	SYSTEM
Windows Service
Service name:	Skype C2C Service
Description:	“Skype Click to Call Update Service”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads