Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

InitializeSecurityDescriptor, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, EnumServicesStatusA, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, ControlService, DeleteService, CloseServiceHandle, SetServiceStatus, OpenSCManagerA, OpenServiceA, QueryServiceStatus, SetSecurityInfo, InitializeAcl, RegSetValueExA, AllocateAndInitializeSid, SetSecurityDescriptorDacl, SetEntriesInAclA, FreeSid, GetUserNameA, StartServiceA, CreateServiceA

kernel32.dll

DeleteCriticalSection, GetCurrentThreadId, EnterCriticalSection, LeaveCriticalSection, SetEvent, CreateEventA, CreateMutexA, WaitForMultipleObjects, ReleaseMutex, ResetEvent, WaitForSingleObject, OpenEventA, GetLastError, GetVersionExA, CreateProcessA, Sleep, CreateThread, FreeLibrary, GetProcAddress, LoadLibraryA, GetModuleFileNameA, GetModuleHandleA, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, MultiByteToWideChar, WideCharToMultiByte, RaiseException, SizeofResource, LockResource, LoadResource, FindResourceA, FindResourceExA, lstrlenW, lstrlenA, InterlockedDecrement, CloseHandle, OutputDebugStringA, ExpandEnvironmentStringsA, InterlockedIncrement, GetShortPathNameA, TerminateProcess, OpenProcess, TerminateThread, InterlockedCompareExchange, lstrcpynA, AreFileApisANSI, SetLastError, GetFullPathNameA, GetFileAttributesA, LocalFree, FormatMessageA, GetWindowsDirectoryA, GetSystemDirectoryA, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, OpenFileMappingA, CreateDirectoryA, DeleteFileA, LocalAlloc, GetUserDefaultLangID, ExitProcess, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, InitializeCriticalSection

msvcp71.dll

DllMain

msvcr71.dll

DllMain

ole32.dll

CoInitialize, CoUninitialize, CoCreateInstance

rpcrt4.dll

RpcBindingFree, RpcBindingToStringBindingA, RpcBindingCopy, RpcServerRegisterIf, RpcServerUseProtseqEpA, RpcMgmtEpEltInqDone, RpcStringBindingParseA, RpcMgmtEpEltInqNextA, NdrServerCall2, NdrClientCall2, RpcServerListen, UuidCreate, UuidToStringA, RpcImpersonateClient, RpcStringFreeA, RpcServerUnregisterIf, RpcBindingFromStringBindingA, RpcMgmtEpEltInqBegin, UuidFromStringA, RpcStringBindingComposeA

shell32.dll

SHGetDesktopFolder, SHGetMalloc, SHGetPathFromIDListA

user32.dll

MessageBoxA, LoadStringA

ITMRTSVC.exe

eTrust PestPatrol Realtime Protection by CA (Signed)

Remove ITMRTSVC.exe

Version:	1.1.0.34
MD5:	54f694c6cd3a1149ba3a8bdacc83badc
SHA1:	d4ce7872d4749bfbcc5c9b3bc1c78b32be12bd25
SHA256:	2cb02c1efe0f625ba346546452874491d2deb4ce982bc647759822f7ab455c95

What is ITMRTSVC.exe?

eTrust PestPatrol Real-time service for CA Anti-Spyware, a spyware detection program previously known as PestPatrol. PestPatrol is an anti-malware product, designed to protect a computer system against threats such as adware, spyware and viruses.

About ITMRTSVC.exe (from CA)

“There is a good chance your computer is infected with spyware. Spyware finds its way onto unsuspecting computers through various hidden methods. Once infected, your PC can get bogged down by hidden pr”

Details

File name:	itmrtsvc.exe
Publisher:	CA, Inc.
Product name:	eTrust PestPatrol Realtime Protection
Description:	eTrust PestPatrol Real-time service
Typical file path:	C:\Program Files\ca\pprt\bin\itmrtsvc.exe
File version:	1.1.0.34
Size:	277.26 KB (283,912 bytes)
Certificate
Issued to:	CA
Authority (CA):	VeriSign
Effective date:	Sunday, May 14, 2006
Expiration date:	Wednesday, May 14, 2008
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++ 7.1
.NET CLR:	No

More details

Programs

The following program will install this file

CA Pest Patrol Realtime Protection

Computer Associates Inc.

55% remove

CA Pest Patrol Realtime Protection comes bundled with Comcast constant guard. PestPatrol Real-time consumer interface for CA Anti-Spyware, a spyware detection program previously known as PestPatrol. PestPatrol is an anti-malware product, designed to protect a computer system against threats such as adware, spyware and viruses.

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'ITMRTSVC' (Pest Patrol Realtime Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00024733%	0.028634%
Kernel CPU:	0.00002372%	0.013761%
User CPU:	0.00022361%	0.014873%
Kernel CPU time:	3,098 ms/min	100,923,805ms/min
CPU cycles:	124,363/sec	17,470,203/sec
Context switches:	4/sec	284/sec
Memory
Private memory:	32.04 MB	21.59 MB
Private (maximum):	35.92 MB
Private (minimum):	122 KB
Non-paged memory:	32.04 MB	21.59 MB
Virtual memory:	79.5 MB	140.96 MB
Virtual memory (peak):	94.26 MB	169.69 MB
Working set:	1.75 MB	18.61 MB
Working set (peak):	43.28 MB	37.95 MB
Page faults:	28,566/min	2,039/min
I/O
I/O read transfer:	16.65 KB/sec	1.02 MB/min
I/O read operations:	12/sec	343/min
I/O write transfer:	16.26 KB/sec	274.99 KB/min
I/O write operations:	4/sec	227/min
I/O other transfer:	28 Bytes/sec	448.09 KB/min
I/O other operations:	4/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	134	600
GUI GDI count:	4	103
GUI USER count:	1	49

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\ca\pprt\bin\itmrtsvc.exe"
Owner:	SYSTEM
Windows Service
Service name:	ITMRTSVC
Display name:	Pest Patrol Realtime Service
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ADVAPI32.dll
Total CPU:	0.00255170%	0.272967%
Kernel CPU:	0.00019163%	0.107585%
User CPU:	0.00236007%	0.165382%
Memory:	620 KB	1.16 MB
wow64.dll
Total CPU:	0.00060170%
Kernel CPU:	0.00001037%
User CPU:	0.00059133%
CPU cycles:	17,626/sec
Memory:	252 KB
ITMRTSVC.exe (main module)
Total CPU:	0.00022772%
Kernel CPU:	0.00015764%
User CPU:	0.00007008%
CPU cycles:	5,769/sec
Memory:	272 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	66.67%
Microsoft Windows XP	33.33%

Distribution by country

United States installs about 100.00% of eTrust PestPatrol Realtime Protection.

Remove Adware and Spyware Programs, FREE Download!