KSafeSvc.exe
Kingsoft PC Doctor by Kingsoft Security Co. (Signed)
| Version: | 3.7.0.44 | 
| MD5: | c32d068757d4ad6e4781a78cffd883e5 | 
| SHA1: | 6df8cf3696c6b096ac5c57810de7de8df0bb82b6 | 
| SHA256: | 58aa32847266ed9f55f663442ffd1cad02ebb295ed3bbff97998409036a0eecb | 
What is KSafeSvc.exe?
ksafesvc.exe is the PC Doctor Windows Service of Kingsoft PC Doctor, developed by Chinese software developer Kingsoft, a PC optimization utility.
About KSafeSvc.exe (from Kingsoft Security Co.)
“Kingsoft PC Doctor, which focuses on providing computer users excellent privacy cleaner, registry cleaner and, brilliant Windows optimization service, is your best free professional and easy-to-use Wi”
Overview
ksafesvc.exe runs as a service under the name KSafe service (KSafeSvc) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Kingsoft PC Doctor 3.7.0.47 published by Kingsoft Security. The file is digitally signed by Kingsoft Security Co. which was issued by the VeriSign certificate authority (CA).
 Details
Details
| File name: | ksafesvc.exe | 
| Publisher: | Kingsoft Corporation | 
| Product name: | Kingsoft PC Doctor | 
| Description: | PC Doctor Service | 
| Typical file path: | C:\Program Files\kingsoft\pcdoctor\ksafesvc.exe | 
| File version: | 3.7.0.44 | 
| Size: | 283.91 KB (290,720 bytes) | 
| Certificate | 
| Issued to: | Kingsoft Security Co. | 
| Authority (CA): | VeriSign | 
| Effective date: | Tuesday, March 9, 2010 | 
| Expiration date: | Saturday, March 9, 2013 | 
| Digital DNA | 
| PE subsystem: | Windows GUI | 
| File packed: | No | 
| Code language: | Microsoft Visual C++ 8.0 | 
| .NET CLR: | No | 
More details
 Programs
Programs
The following program will install this file
“Kingsoft PC Doctor, which focuses on providing computer users excellent privacy cleaner, registry cleaner and, brilliant Windows optimization service, is your best free professional and easy-to-use Windows Diagnosis and Optimization software. Meanwhile, Computer Health Diagnosis provides you a quick and deepin computer working status diagnosis and, gives you professional suggestion to optimize computer to peak performance. ”
 
 Behaviors
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'KSafeSvc'  (KSafe service)
- KSafeSvc
 Resource utilization
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
| Memory | 
| Private memory: | 3.83 MB |  | 
| Private (maximum): | 8.61 MB |  | 
| Private (minimum): | 5.01 MB |  | 
| Non-paged memory: | 3.83 MB |  | 
| Virtual memory: | 74.09 MB |  | 
| Virtual memory (peak): | 87.02 MB |  | 
| Working set: | 5.6 MB |  | 
| Working set (peak): | 8.72 MB |  | 
| Page faults: | 4,800/min |  | 
| I/O | 
| I/O read transfer: | 100 Bytes/sec |  | 
| I/O read operations: | 1/sec |  | 
| I/O write transfer: | 2 Bytes/sec |  | 
| I/O write operations: | 1/sec |  | 
| I/O other transfer: | 36.43 KB/sec |  | 
| I/O other operations: | 58/sec |  | 
| Resource allocations | 
| Threads: | 21 |  | 
| Handles: | 170 |  | 
| GUI GDI count: | 4 |  | 
| GUI USER count: | 2 |  | 
 
 Process properties
Process properties
| Integrety level: | System | 
| Platform: | 64-bit | 
| Command line: | "C:\Program Files\kingsoft\pcdoctor\ksafesvc.exe" -svc | 
| Owner: | SYSTEM | 
| Windows Service | 
| Service name: | KSafeSvc | 
| Display name: | KSafe service | 
| Description: | “KSafe service” | 
| Type: | Win32OwnProcess | 
| Parent process: | services.exe (Services and Controller app by Microsoft) | 
 Threads
Threads
Averages
 
| fwproxy.dll (by Kingsoft) | 
| Total CPU: | 0.00035052% |  | 
| Kernel CPU: | 0.00024743% |  | 
| User CPU: | 0.00010309% |  | 
| Memory: | 120 KB |  | 
| wow64.dll | 
| Total CPU: | 0.00030229% |  | 
| Kernel CPU: | 0.00024183% |  | 
| User CPU: | 0.00006046% |  | 
| CPU cycles: | 8,956/sec |  | 
| Memory: | 252 KB |  | 
| netstat.dll (by Kingsoft) | 
| Total CPU: | 0.00012887% |  | 
| Kernel CPU: | 0.00005842% |  | 
| User CPU: | 0.00007045% |  | 
| Memory: | 188 KB |  | 
| KSafeSvc.exe (main module) | 
| Total CPU: | 0.00009097% |  | 
| Kernel CPU: | 0.00006046% |  | 
| User CPU: | 0.00003051% |  | 
| CPU cycles: | 2,386/sec |  | 
| Memory: | 292 KB |  | 
| kxecore.dll (Kingsoft Internet Security by Kingsoft) | 
| Total CPU: | 0.00000515% |  | 
| Kernel CPU: | 0.00000515% |  | 
| User CPU: | 0.00000000% |  | 
| Memory: | 120 KB |  | 
 
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
 Distribution by Windows OS
Distribution by Windows OS
| OS version | distribution | 
| Windows 7 Ultimate | 30.00% |  | 
| Microsoft Windows XP | 30.00% |  | 
| Windows 7 Professional | 20.00% |  | 
| Windows 7 Home Premium | 20.00% |  | 
 Distribution by country
Distribution by country
United States installs about 60.00% of Kingsoft PC Doctor.
 Distribution by PC manufacturer
Distribution by PC manufacturer
| PC Manufacturer | distribution | 
| Acer | 40.00% |  | 
| GIGABYTE | 40.00% |  | 
| Hewlett-Packard | 20.00% |  |