Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3.0.2 11.18%
3.0.2 0.62%
1.70.0.0000 36.65%
1.70.0.0000 33.54%
1.65.0.0000 17.39%
1.65.0.0000 0.62%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
InitializeSecurityDescriptor, ReportEventW, DeregisterEventSource, RegisterEventSourceW, IsTextUnicode, CryptGenRandom, CryptAcquireContextW, OpenProcessToken, DuplicateTokenEx, CreateProcessAsUserW, GetTokenInformation, RegSetValueExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegQueryValueExW, SetSecurityDescriptorDacl, RegOpenKeyExW, RegCloseKey
kernel32.dll
GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetUserDefaultLCID, LCMapStringW, SetStdHandle, WaitNamedPipeW, TransactNamedPipe, SetNamedPipeHandleState, GetTimeZoneInformation, LocalFileTimeToFileTime, FileTimeToLocalFileTime, CloseHandle, CreateWaitableTimerW, WaitForMultipleObjects, CreateEventW, GetLocalTime, ResetEvent, FileTimeToSystemTime, Sleep, GetSystemTimeAsFileTime, SetEvent, SystemTimeToFileTime, SetWaitableTimer, GetLastError, FreeLibrary, LoadLibraryW, GetProcAddress, GetCurrentProcess, GetComputerNameW, GetModuleHandleW, GetVersionExW, CreateFileW, GetACP, GetSystemInfo, CreateProcessW, OpenProcess, TerminateProcess, Process32FirstW, Process32NextW, CreateToolhelp32Snapshot, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, WideCharToMultiByte, MultiByteToWideChar, SetFilePointer, WriteFile, ReadFile, CreateDirectoryW, OutputDebugStringW, GetSystemTime, GetCommandLineA, HeapSetInformation, RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapAlloc, HeapFree, IsProcessorFeaturePresent, HeapSize, ExitProcess, GetStdHandle, GetModuleFileNameW, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapCreate, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetLocaleInfoW, GetStringTypeW, GetConsoleCP, GetConsoleMode, FlushFileBuffers, HeapReAlloc, InterlockedExchange, RtlUnwind, GetCPInfo, GetOEMCP, IsValidCodePage, WriteConsoleW
mbam.dll
_GetRandomizationTime@0, _LicenseIsValid@0, _GetMBAMSettings@4, _UnscheduleTask@16
mbamnet.dll
_PerformUpdate@16, _IsTrialActive@0, _ValidateTrial@16
shell32.dll
SHGetFolderPathW
user32.dll
CharUpperW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSQuerySessionInformationW, WTSEnumerateSessionsW, WTSFreeMemory

mbamscheduler.exe

Malwarebytes Anti-Malware by Malwarebytes Corporation (Signed)

Remove mbamscheduler.exe
Version:   3.0.2
MD5:   d84aea3f3329d622dfc1297dddf6163b
SHA1:   b0bb5fab7257010afd9038b72e7d1a60ea73c6d6

What is mbamscheduler.exe?

Malwarebytes' Anti-Malware is an application that finds and removes malware. It is available in a free version, which scans for and removes malware when started manually, and a paid version, which provides scheduled scans, real-time protection and a flash memory scanner. Malwarebytes' is intended to find malware that other anti-virus and anti-spyware programs generally miss, including rogue security software, adware, and spyware.

About mbamscheduler.exe (from Malwarebytes Corporation)

Malware is big and malware is bad. Your computer is constantly at risk from infection by malware including viruses, worms, trojans, rootkits, dialers and spyware. Malwarebytes specializes in fighting

DetailsDetails

File name:mbamscheduler.exe
Publisher:Malwarebytes Corporation
Product name:Malwarebytes Anti-Malware
Typical file path:C:\Program Files\malwarebytes' anti-malware\mbamscheduler.exe
File version:3.0.2
Size:1.73 MB (1,809,720 bytes)
Build date:4/1/2014 1:23 AM
Certificate
Issued to:Malwarebytes Corporation
Authority (CA):VeriSign
Effective date:Monday, May 23, 2011
Expiration date:Tuesday, June 4, 2013
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Malwarebytes Corporation
1% remove
Malwarebytes Anti-Malware Free's industry-leading scanner detects and removes malware like worms, Trojans, rootkits, rogues, spyware, and more. All you have to do is launch Malwarebytes Anti-Malware Free and run a scan. It's that simple. Or if you want even better protection, consider Malwarebytes Anti-Malware Premium and its instant real-time scanner that automatically prevents malware and websites from infecting your PC. Either way yo...
Malwarebytes Corporation
7% remove
Malwarebytes Corporation
2% remove
proDAD GmbH
8% remove

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'MBAMScheduler'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00039719%
0.028634%
Kernel CPU:0.00018799%
0.013761%
User CPU:0.00020921%
0.014873%
Kernel CPU time:2,309,786 ms/min
100,923,805ms/min
CPU cycles:280,325/sec
17,470,203/sec
Memory
Private memory:10.25 MB
21.59 MB
Private (maximum):12.43 MB
Private (minimum):5.8 MB
Non-paged memory:10.25 MB
21.59 MB
Virtual memory:221.71 MB
140.96 MB
Virtual memory (peak):245.77 MB
169.69 MB
Working set:9.78 MB
18.61 MB
Working set (peak):12.43 MB
37.95 MB
Page faults:7,436/min
2,039/min
I/O
I/O read transfer:85 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:40 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:1.39 KB/sec
448.09 KB/min
I/O other operations:102/sec
1,671/min
Resource allocations
Threads:16
12
Handles:185
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\malwarebytes anti-malware\mbamscheduler.exe"
Owner:SYSTEM
Windows Service
Service name:MBAMScheduler
Description:“Malwarebytes Anti-Malware scheduler”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
mbamscheduler.exe (main module)
Total CPU:0.00061803%
0.272967%
Kernel CPU:0.00045281%
0.107585%
User CPU:0.00016523%
0.165382%
CPU cycles:17,868/sec
5,741,424/sec
Memory:1.74 MB
1.16 MB
wow64.dll
Total CPU:0.00011207%
Kernel CPU:0.00000000%
User CPU:0.00011207%
CPU cycles:4,148/sec
Memory:252 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 39.38%
Windows 7 Ultimate 16.88%
Microsoft Windows XP 11.25%
Windows 7 Professional 10.63%
Windows Vista Home Premium 4.38%
Windows 8 Pro 3.75%
Windows 8 3.75%
Windows 8 Pro with Media Center 3.75%
Windows 8.1 3.13%
Windows 8.1 Pro 0.63%
Windows Vista Home Basic 0.63%
Windows Vista Business 0.63%
Windows 7 Enterprise 0.63%
Windows 7 Starter 0.63%

Distribution by countryDistribution by country

United States installs about 59.12% of Malwarebytes Anti-Malware.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 23.13%
Hewlett-Packard 19.73%
Dell 16.33%
Toshiba 13.61%
Acer 8.84%
GIGABYTE 4.08%
Sony 4.08%
Lenovo 2.72%
Intel 2.72%
Samsung 1.36%
Gateway 1.36%
Medion 1.36%
Sahara 0.68%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE