Should I block it?

No, this file is 100% safe to run.

Additional versions

1.1.25 build 2413	5.56%
1.1.25 build 2280	33.33%
1.0.25 build 1877	27.78%
1.0.25 build 1756	5.56%
1.0.24 build 975	27.78%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, SetServiceStatus

kernel32.dll

GetProcAddress, GetLastError, FreeLibrary, LoadLibraryA, GetCommandLineA, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetModuleHandleA, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoA, DeleteCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, Sleep, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, MultiByteToWideChar, GetLocaleInfoA, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW

fsorsp.exe

F-Secure ORSP Client by F-Secure Corporation (Signed)

Remove fsorsp.exe

Version:	1.0.24 build 975
MD5:	42aef6a385354aca65fc210ce7ce4d7c
SHA1:	b45fceac7cd46ef4f3c922f234712b009ecdc8b4
SHA256:	9b11084d42aa2ba39911a6dfb52d87f625f22551e0cf894b09c74f605f3aeb96

What is fsorsp.exe?

F-Secure ORSP Service for F-Secure antivirus the Browsing Protection platform. White-labeled versions of F-Secure’s security software are also available. DeepGuard is an F-Secure in-house developed HIPS or advanced system monitoring technology, which detects new or unknown malware intrusions based on unusual, suspicious changes in the Windows system. DeepGuard is resource intensive and requires fairly strong hardware to work without affecting customer experience.

About fsorsp.exe (from F-Secure Corporation)

“F-Secure protects the content on your computer and safeguards you when you are browsing the web. Computer security is protection against viruses, spyware, hacker attacks and identity theft. Online saf”

Details

File name:	fsorsp.exe
Publisher:	F-Secure Corporation
Product name:	F-Secure ORSP Client
Description:	F-Secure ORSP Service
Typical file path:	C:\Program Files\centurylink online security\orsp client\fsorsp.exe
File version:	1.0.24 build 975
Size:	59.66 KB (61,088 bytes)
Certificate
Issued to:	F-Secure Corporation
Authority (CA):	GlobalSign nv-sa
Effective date:	Friday, March 26, 2010
Expiration date:	Tuesday, March 26, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'FSORSPClient' (F-Secure ORSP Client)
FSORSPClient

Network connections

[TCP] fs-65-200-212-213.f-secure.com (65.200.212.213:80)

[TCP] fs-65-200-212-210.f-secure.com (65.200.212.210:80)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00057348%	0.028634%
Kernel CPU:	0.00032506%	0.013761%
User CPU:	0.00024841%	0.014873%
Kernel CPU time:	1,071 ms/min	100,923,805ms/min
CPU cycles:	149,954/sec	17,470,203/sec
Memory
Private memory:	6.62 MB	21.59 MB
Private (maximum):	3.4 MB
Private (minimum):	570.67 KB
Non-paged memory:	6.62 MB	21.59 MB
Virtual memory:	57.92 MB	140.96 MB
Virtual memory (peak):	64.17 MB	169.69 MB
Working set:	1.9 MB	18.61 MB
Working set (peak):	8.86 MB	37.95 MB
Page faults:	443,625/min	2,039/min
I/O
I/O read transfer:	861 Bytes/sec	1.02 MB/min
I/O read operations:	3/sec	343/min
I/O write transfer:	489 Bytes/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	55 Bytes/sec	448.09 KB/min
I/O other operations:	10/sec	1,671/min
Resource allocations
Threads:	13	12
Handles:	156	600
GUI GDI count:	4	103
GUI USER count:	2	49

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	"C:\Program Files\charter business desktop security\orsp client\fsorsp.exe" "C:\Program Files\eastlinkinternetsecurityservices\orsp client\fsorsp.exe" "C:\Program Files\centurylink online security\orsp client\fsorsp.exe"
Owner:	SYSTEM
Windows Service
Service name:	FSORSPClient
Display name:	F-Secure ORSP Client
Description:	“F-Secure ORSP Client”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

advapi32.dll (Advanced Windows 32 Base API by Microsoft)
Total CPU:	0.00031016%	0.272967%
Kernel CPU:	0.00005816%	0.107585%
User CPU:	0.00025201%	0.165382%
Memory:	620 KB	1.16 MB
orspplug.dll (F-Secure ORSP Client by F-Secure)
Total CPU:	0.00030049%
Kernel CPU:	0.00016478%
User CPU:	0.00013570%
Memory:	484 KB
fsorsp.exe (main module)
Total CPU:	0.00016336%
Kernel CPU:	0.00010173%
User CPU:	0.00006163%
CPU cycles:	34,538/sec
Memory:	56 KB
wow64.dll
Total CPU:	0.00010362%
Kernel CPU:	0.00001969%
User CPU:	0.00008393%
CPU cycles:	2,610/sec
Memory:	252 KB
ntdll.dll
Total CPU:	0.00007874%
Kernel CPU:	0.00006890%
User CPU:	0.00000984%
CPU cycles:	2,763/sec
Memory:	1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	22.22%
Windows 8.1	11.11%
Windows Vista Home Premium	11.11%
Windows 7 Home Premium N	11.11%
Windows 8 Pro	11.11%
Windows 7 Ultimate	11.11%
Microsoft Windows XP	11.11%
Windows 8.1 Pro with Media Center	5.56%
Windows 7 Professional	5.56%

Distribution by country

United States installs about 72.22% of F-Secure ORSP Client.

Distribution by PC manufacturer

PC Manufacturer	distribution
Lenovo	50.00%
ASUS	25.00%
Medion	12.50%
Toshiba	12.50%

Remove Adware and Spyware Programs, FREE Download!