Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.6.0.2935 55.56%
4.6.0.1694 11.11%
4.5.0.1810 11.11%
4.5.0.1499 11.11%
4.0.0.1496 11.11%

Relationships

Parent process
Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
OpenThreadToken, ControlService, DeleteService, CreateServiceW, OpenSCManagerW, OpenServiceW, OpenProcessToken, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, IsValidSid, GetLengthSid, CopySid, RegCloseKey, CloseServiceHandle, SetServiceStatus, GetTokenInformation, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, ChangeServiceConfigW
kernel32.dll
WaitForSingleObject, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetLocaleInfoA, GetACP, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, VirtualAlloc, GetCurrentProcessId, CloseHandle, GetCurrentThread, DeleteCriticalSection, SetEvent, ResetEvent, FreeLibrary, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, SetProcessWorkingSetSize, GetCurrentProcess, VirtualFree, InterlockedIncrement, InterlockedDecrement, lstrlenA, Sleep, GetCurrentThreadId, SizeofResource, LoadResource, GetVersion, DebugBreak, GetUserDefaultLangID, GetCommandLineW, GetLastError, FlushInstructionCache, SetLastError, CompareStringA, GetModuleHandleA, GetModuleFileNameA, GetWindowsDirectoryA, GetSystemDirectoryA, LoadLibraryA, InterlockedExchange, IsProcessorFeaturePresent, HeapAlloc, GetProcessHeap, HeapFree, InterlockedCompareExchange, GetVersionExA, GetThreadLocale, ExitProcess
msvcp71.dll
DllMain
msvcp80.dll
DllMain
msvcr71.dll
DllMain
msvcr80.dll
DllMain
nacmnlib3_71.dll
GetResString, LoadResourceDLLW
nailog3.dll
_naimcomn_SetSystem@4, _naimcomn_SetLogToStdout@4, _naimcomn_InitTracer@0, _naimcomn_GetLogLevelFromRegistry@0, _naimcomn_EndFileLogging@0, _naimcomn_StartFileLogging@4
ole32.dll
CreateStreamOnHGlobal, CoMarshalInterface, CoInitialize, CoInitializeSecurity, StringFromGUID2, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, CLSIDFromString, CoImpersonateClient, CoRevertToSelf
shlwapi.dll
PathFindExtensionW
user32.dll
DestroyWindow, ShowWindow, UnregisterClassA

frameworkservice.exe

McAfee Agent by McAfee (Signed)

Remove frameworkservice.exe
Version:   4.6.0.2935
MD5:   4515cbc0deba3088605e5e7ee09d6b84
SHA1:   e93626499f8a0a1282926bd5f31215f771f52f3b
SHA256:   2794137954fdd0e8b43e708b0fdcb39d317542ca2facf772034705b78d407848

What is frameworkservice.exe?

Framework Service is part of McAfee Agent. The McAfee Agent is a process that runs in the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a PC. The McAfee Agent offers access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the notifications area of the taskbar and will load on each reboot.

Overview

frameworkservice.exe runs as a service under the name McAfee Framework Service (McAfeeFramework) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This is typically installed with the program McAfee Agent published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:frameworkservice.exe
Publisher:McAfee, Inc.
Product name:McAfee Agent
Description:Framework Service
Typical file path:C:\Program Files\mcafee\common framework\frameworkservice.exe
Original name:Framework.exe
File version:4.6.0.2935
Product version:4.6.0
Size:129.6 KB (132,712 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Expiration date:Monday, October 10, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
McAfee Agent
 McAfee, Inc.
11% remove
The McAfee Agent is placed on the taskbar when the McAfee Security Suite or McAfee Internet Security has been installed on a computer. The McAfee Agent offers quick access to specific functions instead of opening the full protection center program. Once the McAfee Agent has been installed, it will show up in the taskbar with the letter M.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'McAfeeFramework' (McAfee Framework Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\McAfee\Common Framework\FrameworkService.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 8082

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00110115%
    0.028634%
    Kernel CPU:0.00006559%
    0.013761%
    User CPU:0.00103555%
    0.014873%
    Kernel CPU time:244,965 ms/min
    100,923,805ms/min
    Memory
    Private memory:11.03 MB
    21.59 MB
    Private (maximum):13.93 MB
    Private (minimum):426 KB
    Non-paged memory:11.03 MB
    21.59 MB
    Virtual memory:96.33 MB
    140.96 MB
    Virtual memory (peak):101.27 MB
    169.69 MB
    Working set:1.41 MB
    18.61 MB
    Working set (peak):16.29 MB
    37.95 MB
    Resource allocations
    Threads:34
    12
    Handles:460
    600
    GUI GDI count:4
    103
    GUI USER count:19
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:"C:\Program Files\mcafee\common framework\frameworkservice.exe" /servicestart
    Owner:SYSTEM
    Windows Service
    Service name:McAfeeFramework
    Display name:McAfee Framework Service
    Description:“Framework voor gedeelde componenten voor McAfee-producten”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    agent.dll (McAfee Agent by McAfee)
    Total CPU:0.00572966%
    0.272967%
    Kernel CPU:0.00418471%
    0.107585%
    User CPU:0.00154495%
    0.165382%
    CPU cycles:100,746/sec
    5,741,424/sec
    Memory:552 KB
    1.16 MB
    ADVAPI32.dll
    Total CPU:0.00524922%
    Kernel CPU:0.00244484%
    User CPU:0.00280438%
    Memory:620 KB
    MSVCR80.dll
    Total CPU:0.00069351%
    Kernel CPU:0.00029489%
    User CPU:0.00039862%
    CPU cycles:15,108/sec
    Memory:620 KB
    mfelpc.dll (McAfee Agent by McAfee)
    Total CPU:0.00022426%
    Kernel CPU:0.00020350%
    User CPU:0.00002076%
    CPU cycles:8,784/sec
    Memory:352 KB
    FrameworkService.exe (main module)
    Total CPU:0.00018021%
    Kernel CPU:0.00014426%
    User CPU:0.00003595%
    CPU cycles:20/sec
    Memory:128 KB
    sechost.dll
    Total CPU:0.00003584%
    Kernel CPU:0.00001654%
    User CPU:0.00001930%
    CPU cycles:1,053/sec
    Memory:100 KB
    management.dll (McAfee Agent by McAfee)
    Total CPU:0.00000276%
    Kernel CPU:0.00000092%
    User CPU:0.00000184%
    CPU cycles:136/sec
    Memory:900 KB
    mswsock.dll
    Total CPU:0.00000184%
    Kernel CPU:0.00000092%
    User CPU:0.00000092%
    CPU cycles:25/sec
    Memory:240 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Microsoft Windows XP 55.56%
    Windows 7 Professional 33.33%
    Windows 8 Enterprise 11.11%

    Distribution by countryDistribution by country

    Indonesia installs about 44.44% of McAfee Agent.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Toshiba 80.00%
    Hewlett-Packard 20.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE