Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2, 7, 10, 0 9.38%
2, 6, 0, 0 9.38%
2, 6, 0, 0 53.13%
2.0.4.0 28.13%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegEnumKeyW, RegCreateKeyW, DuplicateTokenEx, OpenThreadToken, OpenProcessToken, SetSecurityInfo, RegisterServiceCtrlHandlerW, SetServiceStatus, StartServiceCtrlDispatcherW, RegOpenKeyW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegSetValueExW, DuplicateToken, ImpersonateLoggedOnUser, RevertToSelf, GetTokenInformation, CopySid, ConvertStringSidToSidW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetEntriesInAclW, ImpersonateNamedPipeClient, SetTokenInformation, CreateProcessAsUserW, ControlService, QueryServiceStatusEx, StartServiceW, ChangeServiceConfig2W, OpenServiceW, OpenSCManagerW, DeleteService, CloseServiceHandle, CreateServiceW, RegCreateKeyExW, ReportEventW, RegisterEventSourceW
comctl32.dll
InitCommonControlsEx
gdi32.dll
GetObjectW, DeleteObject, GetBitmapBits, BitBlt, DeleteDC, CreateDIBSection, GetDIBits, GetCurrentObject, SelectObject, CreateCompatibleDC, CreateDCW, ExtEscape
kernel32.dll
CreateDirectoryW, SetFileTime, MoveFileW, FindClose, RemoveDirectoryW, FindNextFileW, DeleteFileW, ProcessIdToSessionId, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, HeapFree, GetSystemTimeAsFileTime, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, HeapSize, ExitProcess, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, HeapAlloc, RaiseException, GetCPInfo, GetACP, GetOEMCP, WideCharToMultiByte, LCMapStringW, VirtualAlloc, HeapReAlloc, LoadLibraryA, InitializeCriticalSectionAndSpinCount, RtlUnwind, GetLocaleInfoA, LCMapStringA, GetStringTypeA, GetStringTypeW, GetLogicalDriveStringsW, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, FlushFileBuffers, CompareStringA, CompareStringW, SetEnvironmentVariableA, GlobalUnlock, CreateFileMappingW, UnmapViewOfFile, MapViewOfFile, DuplicateHandle, WaitForMultipleObjects, GetExitCodeProcess, CreateProcessW, SetErrorMode, FindFirstFileW, ReleaseMutex, CreateMutexW, CreateThread, ResumeThread, LocalFree, LocalAlloc, DisconnectNamedPipe, ReadFile, WriteFile, GetProcAddress, LoadLibraryW, FreeLibrary, OpenThread, GetOverlappedResult, SetHandleInformation, CreatePipe, GetFileSizeEx, CreateNamedPipeW, ConnectNamedPipe, SetNamedPipeHandleState, CreateEventW, SetEvent, GetModuleFileNameW, GetVersionExW, GetComputerNameW, WaitForSingleObject, CloseHandle, GetCurrentThreadId, CreateFileW, GetCurrentProcess, SetUnhandledExceptionFilter, GetLastError, FormatMessageW, GetModuleHandleW, GetCurrentProcessId, Sleep, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, GetLocalTime, MultiByteToWideChar, SystemTimeToFileTime, SetEndOfFile, GlobalLock, GlobalAlloc, IsValidCodePage, GetModuleHandleA, FreeResource, FindResourceW, LoadResource, LockResource, FileTimeToSystemTime, OpenProcess
psapi.dll
GetModuleFileNameExW
shell32.dll
SHGetSpecialFolderPathW, ShellExecuteW, ShellExecuteExW, Shell_NotifyIconW, CommandLineToArgvW
user32.dll
SetFocus, GetForegroundWindow, InvalidateRect, GetWindowTextW, ShowWindow, DestroyIcon, DialogBoxParamW, GetWindowLongW, SetWindowLongW, EndDialog, CreateDialogParamW, SendMessageW, GetThreadDesktop, MoveWindow, MapWindowPoints, KillTimer, SetWindowTextW, SetTimer, ToUnicodeEx, OpenInputDesktop, OpenDesktopW, CloseDesktop, SetThreadDesktop, GetUserObjectInformationW, LoadIconW, LoadStringW, FindWindowW, SystemParametersInfoW, DestroyWindow, GetMessageW, PostQuitMessage, TranslateMessage, IsDialogMessageW, CreateWindowExW, RegisterClassW, DefWindowProcW, DispatchMessageW, SetProcessWindowStation, CloseWindowStation, OpenWindowStationW, GetDlgItem, EnumWindows, IsWindowVisible, RegisterWindowMessageW, TrackPopupMenu, PostMessageW, GetSubMenu, SetForegroundWindow, LoadMenuW, GetCursorPos, RemoveMenu, GetWindowThreadProcessId, GetKeyboardLayout, GetKeyState, MapVirtualKeyW, VkKeyScanExW, EnumChildWindows, UnregisterClassW, SetMenuDefaultItem, ExitWindowsEx, LockWorkStation, GetClientRect, GetSystemMetrics, SendInput, GetWindowInfo, SetClipboardViewer, SetClipboardData, OpenClipboard, ChangeClipboardChain, EmptyClipboard, GetClipboardData, IsClipboardFormatAvailable, CloseClipboard, UnhookWindowsHookEx, SetWindowsHookExW, PostThreadMessageW, PeekMessageW, WaitMessage, CallNextHookEx, GetDC, GetClassNameW, GetWindowRect, GetCursorInfo, GetIconInfo, DrawIconEx, MessageBoxW, SetClassLongW, IsWindow, EnumDisplayMonitors, GetWindow, FindWindowExW, ChangeDisplaySettingsExW, EnumDisplayDevicesW
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory

GeekBuddyRSP.exe

GeekBuddyRSP by Comodo Security Solutions (Signed)

Remove GeekBuddyRSP.exe
Version:   2.0.4.0
MD5:   31b5c233933caf0fb1499f458f04fd9a
SHA1:   4593da1aa7ff1e0cdc69845fd6be91c60b0d5f2b
SHA256:   c69c7b307a4e2c7add6fd904fb25f06f810b3a3c9877dd0f44f75c5e7be33cd8

What is GeekBuddyRSP.exe?

GeekBuddyRSP Server for Windows is part of GeekBuddy, a support system built into Comodo Internet Security whereby a Comodo expert makes a remote connection to the user's computer and resolves a wide variety of technical issues, included but not restricted to virus cleaning and Internet security, such as software installation and printer setup. It is available in the paid-for versions of Comodo Internet Security, and as a separate subscription service.

About GeekBuddyRSP.exe (from Comodo Security Solutions)

GeekBuddy is part of the Comodo Group, one of the world's most trusted Internet Security and Antivirus technology providers. With over 45 million PCs around the world protected by Comodo security soft

DetailsDetails

File name:geekbuddyrsp.exe
Publisher:Comodo Security Solutions, Inc.
Product name:GeekBuddyRSP
Description:GeekBuddyRSP Server for Windows
Typical file path:C:\Program Files\common files\comodo\geekbuddyrsp.exe
File version:2.0.4.0
Size:1.4 MB (1,467,088 bytes)
Certificate
Issued to:Comodo Security Solutions
Authority (CA):COMODO CA Limited
Effective date:Wednesday, April 4, 2012
Expiration date:Friday, April 5, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'GeekBuddyRSP' (GeekBuddyRSP Server)
  • GeekBuddyRSP
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'gbrspcontrol' → "C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00063256%
0.028634%
Kernel CPU:0.00049374%
0.013761%
User CPU:0.00013881%
0.014873%
Kernel CPU time:1,480 ms/min
100,923,805ms/min
CPU cycles:486,059/sec
17,470,203/sec
Context switches:42/sec
284/sec
Memory
Private memory:2.14 MB
21.59 MB
Private (maximum):5.01 MB
Private (minimum):4.99 MB
Non-paged memory:2.14 MB
21.59 MB
Virtual memory:52.62 MB
140.96 MB
Virtual memory (peak):55.12 MB
169.69 MB
Working set:5 MB
18.61 MB
Working set (peak):5.95 MB
37.95 MB
Page faults:2,150/min
2,039/min
I/O
I/O other transfer:3.63 KB/sec
448.09 KB/min
I/O other operations:232/sec
1,671/min
Resource allocations
Threads:9
12
Handles:155
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\common files\comodo\geekbuddyrsp.exe" -service
Owner:SYSTEM
Windows Service
Service name:GeekBuddyRSP
Display name:GeekBuddyRSP Server
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
sechost.dll
Total CPU:0.00151535%
0.272967%
Kernel CPU:0.00151535%
0.107585%
User CPU:0.00000000%
0.165382%
CPU cycles:52,397/sec
5,741,424/sec
Memory:100 KB
1.16 MB
GeekBuddyRSP.exe (main module)
Total CPU:0.00033431%
Kernel CPU:0.00017164%
User CPU:0.00016266%
CPU cycles:99,207/sec
Context switches:4/sec
Memory:1.42 MB
wow64.dll
Total CPU:0.00000686%
Kernel CPU:0.00000686%
User CPU:0.00000000%
CPU cycles:135/sec
Memory:252 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 28.13%
Microsoft Windows XP 21.88%
Windows 7 Professional 15.63%
Windows 8 Pro 12.50%
Windows 7 Ultimate 9.38%
Windows 8 6.25%
Windows 8.1 3.13%
Windows 7 Ultimate N 3.13%

Distribution by countryDistribution by country

United States installs about 59.38% of GeekBuddyRSP.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 72.73%
ASUS 12.12%
Acer 9.09%
Toshiba 6.06%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE