Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.6.0.2935 55.56%
4.6.0.1694 11.11%
4.5.0.1810 11.11%
4.5.0.1499 11.11%
4.0.0.1496 11.11%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
OpenThreadToken, ControlService, DeleteService, CreateServiceW, OpenSCManagerW, OpenServiceW, OpenProcessToken, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, IsValidSid, GetLengthSid, CopySid, RegCloseKey, CloseServiceHandle, SetServiceStatus, GetTokenInformation, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, ChangeServiceConfigW
kernel32.dll
WaitForSingleObject, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetLocaleInfoA, GetACP, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, VirtualAlloc, GetCurrentProcessId, CloseHandle, GetCurrentThread, DeleteCriticalSection, SetEvent, ResetEvent, FreeLibrary, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, SetProcessWorkingSetSize, GetCurrentProcess, VirtualFree, InterlockedIncrement, InterlockedDecrement, lstrlenA, Sleep, GetCurrentThreadId, SizeofResource, LoadResource, GetVersion, DebugBreak, GetUserDefaultLangID, GetCommandLineW, GetLastError, FlushInstructionCache, SetLastError, CompareStringA, GetModuleHandleA, GetModuleFileNameA, GetWindowsDirectoryA, GetSystemDirectoryA, LoadLibraryA, InterlockedExchange, IsProcessorFeaturePresent, HeapAlloc, GetProcessHeap, HeapFree, InterlockedCompareExchange, GetVersionExA, GetThreadLocale, ExitProcess
msvcp71.dll
DllMain
msvcp80.dll
DllMain
msvcr71.dll
DllMain
msvcr80.dll
DllMain
nacmnlib3_71.dll
GetResString, LoadResourceDLLW
nailog3.dll
_naimcomn_SetSystem@4, _naimcomn_SetLogToStdout@4, _naimcomn_InitTracer@0, _naimcomn_GetLogLevelFromRegistry@0, _naimcomn_EndFileLogging@0, _naimcomn_StartFileLogging@4
ole32.dll
CreateStreamOnHGlobal, CoMarshalInterface, CoInitialize, CoInitializeSecurity, StringFromGUID2, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, CLSIDFromString, CoImpersonateClient, CoRevertToSelf
shlwapi.dll
PathFindExtensionW
user32.dll
DestroyWindow, ShowWindow, UnregisterClassA

frameworkservice.exe

McAfee Agent by McAfee (Signed)

Remove frameworkservice.exe
Version:   4.0.0.1496
MD5:   1b963d79740b187795407cd03e2f7b4d
SHA1:   bba457535f23e33054dd078d746bb61818b0b247
SHA256:   8223b5b1a16661726d98c9d0086e0ee4dba7fd4a4020021263b2295bca70b518

What is frameworkservice.exe?

Framework Service is part of McAfee Agent. The McAfee Agent is a process that runs in the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a PC. The McAfee Agent offers access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the notifications area of the taskbar and will load on each reboot.

Overview

frameworkservice.exe runs as a service under the name McAfee Framework Service (McAfeeFramework) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This is typically installed with the program McAfee Agent published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:frameworkservice.exe
Publisher:McAfee, Inc.
Product name:McAfee Agent
Description:Framework Service
Typical file path:C:\Program Files\mcafee\common framework\frameworkservice.exe
Original name:Framework.exe
File version:4.0.0.1496
Size:101.31 KB (103,744 bytes)
Build date:8/14/2009 5:49 PM
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Expiration date:Monday, October 10, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
McAfee Agent
 McAfee, Inc.
11% remove
The McAfee Agent is placed on the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a computer. The McAfee Agent offers quick access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the taskbar with the letter M.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'McAfeeFramework' (McAfee Framework Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\McAfee\Common Framework\FrameworkService.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00013495%
0.028634%
Kernel CPU:0.00009057%
0.013761%
User CPU:0.00004438%
0.014873%
Kernel CPU time:6,797 ms/min
100,923,805ms/min
Context switches:19/sec
284/sec
Memory
Private memory:5.07 MB
21.59 MB
Private (maximum):4.37 MB
Private (minimum):1016 KB
Non-paged memory:5.07 MB
21.59 MB
Virtual memory:42.71 MB
140.96 MB
Virtual memory (peak):46.71 MB
169.69 MB
Working set:4.26 MB
18.61 MB
Working set (peak):7.86 MB
37.95 MB
Page faults:69,366/min
2,039/min
I/O
I/O read transfer:1.09 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:950 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:157 Bytes/sec
448.09 KB/min
I/O other operations:3/sec
1,671/min
Resource allocations
Threads:9
12
Handles:250
600
GUI GDI count:4
103
GUI USER count:6
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\mcafee\common framework\frameworkservice.exe" /servicestart
Owner:SYSTEM
Windows Service
Service name:McAfeeFramework
Display name:McAfee Framework Service
Description:“Framework voor gedeelde componenten voor McAfee-producten”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
management.dll (McAfee Agent by McAfee)
Total CPU:0.00210859%
0.272967%
Kernel CPU:0.00175657%
0.107585%
User CPU:0.00035202%
0.165382%
Context switches:16/sec
79/sec
Memory:256 KB
1.16 MB
msvcr71.dll (Microsoft Visual Studio .NET by Microsoft)
Total CPU:0.00008890%
Kernel CPU:0.00004445%
User CPU:0.00004445%
Context switches:2/sec
Memory:344 KB
FrameworkService.exe (main module)
Total CPU:0.00005689%
Kernel CPU:0.00001067%
User CPU:0.00004622%
Memory:96 KB
advapi32.dll (Advanced Windows 32 Base API by Microsoft)
Total CPU:0.00002489%
Kernel CPU:0.00002133%
User CPU:0.00000356%
Memory:620 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 55.56%
Windows 7 Professional 33.33%
Windows 8 Enterprise 11.11%

Distribution by countryDistribution by country

Indonesia installs about 44.44% of McAfee Agent.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 80.00%
Hewlett-Packard 20.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE