Should I block it?

No, this file is 100% safe to run.

Additional versions

9,15,126,0	25.00%
9,11,109,0	25.00%
9,0,270,0	25.00%
8,1,159,0	25.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

IsValidSid, GetNamedSecurityInfoW, SetNamedSecurityInfoW, RegEnumKeyW, RegCreateKeyW, CreateProcessAsUserW, RegOpenKeyW, ConvertStringSidToSidW, QueryServiceStatusEx, ImpersonateLoggedOnUser, RevertToSelf, QueryServiceStatus, LookupAccountSidW, CryptDecrypt, CryptDeriveKey, CryptSignHashW, CryptAcquireContextW, SetEntriesInAclW, CryptGetProvParam, CryptHashData, GetSecurityDescriptorDacl, CryptGetHashParam, CryptVerifySignatureW, CryptCreateHash, CryptSetProvParam, CryptGetUserKey, CryptDestroyKey, CryptReleaseContext, CryptEncrypt, CryptGenKey, CryptDestroyHash, RegEnumValueW, RegDeleteValueA, AddAccessAllowedAce, GetSecurityDescriptorControl, SetSecurityDescriptorDacl, StartServiceCtrlDispatcherW, CopySid, CloseServiceHandle, ControlService, CreateServiceW, SetSecurityDescriptorOwner, GetLengthSid, UnlockServiceDatabase, LockServiceDatabase, LookupAccountNameW, OpenSCManagerW, QueryServiceConfig2W, SetServiceStatus, GetAce, SetSecurityInfo, StartServiceW, RegDeleteValueW, RegQueryInfoKeyW, AddAce, DeleteService, ChangeServiceConfig2W, RegDeleteKeyW, InitializeAcl, RegisterServiceCtrlHandlerExW, GetAclInformation, OpenServiceW, OpenThreadToken, RegSetValueExW, RegEnumKeyExW, InitializeSecurityDescriptor, SetSecurityDescriptorGroup, RegCreateKeyExW, RegOpenKeyExA, RegEnumKeyExA, RegQueryValueExA, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExW, FreeSid, EqualSid, RegQueryValueExW, AllocateAndInitializeSid, RegCloseKey, OpenProcessToken, AdjustTokenPrivileges, GetTokenInformation, LookupPrivilegeValueW

kernel32.dll

DllMain

ole32.dll

CoRevokeClassObject, CoRegisterClassObject, CoTaskMemAlloc, CoTaskMemRealloc, CoInitializeEx, StringFromCLSID, StringFromGUID2, CreateStreamOnHGlobal, CoGetClassObject, CoCreateGuid, CreateBindCtx, CoFreeUnusedLibraries, CoUninitialize, CoInitializeSecurity, CoInitialize, CoTaskMemFree, CLSIDFromString, CoCreateInstance

psapi.dll

EnumProcessModules, GetModuleBaseNameW, EnumProcesses

shell32.dll

SHGetSpecialFolderPathW, ShellExecuteW, SHGetFolderPathW

shlwapi.dll

SHRegCreateUSKeyW, SHSetValueW, SHDeleteValueW, SHDeleteKeyW, StrDupW, SHRegWriteUSValueW, SHRegCloseUSKey, SHGetValueW

urlmon.dll

MkParseDisplayNameEx

user32.dll

CharUpperW, MsgWaitForMultipleObjects, PostThreadMessageW, CharNextW, GetMessageW, TranslateMessage, KillTimer, RegisterWindowMessageW, SetTimer, UnregisterClassW, SetWindowLongW, CreateWindowExW, DefWindowProcW, GetSystemMetrics, RegisterClassW, LoadStringW, PeekMessageW, wsprintfW, DispatchMessageW, DestroyWindow, PostMessageW, PostQuitMessage, MessageBoxW, RegisterClassExW, GetWindowLongW, UnregisterClassA

wintrust.dll

WinVerifyTrust

wtsapi32.dll

WTSEnumerateSessionsW, WTSFreeMemory

McMSCSvc.exe

McAfee SecurityCenter by McAfee (Signed)

Remove McMSCSvc.exe

Version:	9,11,109,0
MD5:	652d2afb3e0785c7158cd71496811a58
SHA1:	23917076c490a9e06b5deb345d918ccb006a0be1
SHA256:	83c54a832aae4a0e260b2fab320c523bc995a8f2e5200fbc89bfdedf75876475

Overview

mcmscsvc.exe runs as a service under the name mcmscsvc (mcmscsvc) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

Details

File name:	mcmscsvc.exe
Publisher:	McAfee, Inc.
Product name:	McAfee SecurityCenter
Description:	McAfee Services
Typical file path:	C:\Program Files\McAfee\MSC\mcmscsvc.exe
File version:	9,11,109,0
Product version:	9,11,0,0
Size:	845.54 KB (865,832 bytes)
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Effective date:	Friday, September 12, 2008
Expiration date:	Sunday, October 9, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

mcmscsvc
'mcmscsvc' (McAfee Services)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00019582%	0.028634%
Kernel CPU:	0.00009199%	0.013761%
User CPU:	0.00010383%	0.014873%
Kernel CPU time:	182,584 ms/min	100,923,805ms/min
CPU cycles:	1,582,655/sec	17,470,203/sec
Memory
Private memory:	10.75 MB	21.59 MB
Private (maximum):	19.21 MB
Private (minimum):	592 KB
Non-paged memory:	10.75 MB	21.59 MB
Virtual memory:	123.76 MB	140.96 MB
Virtual memory (peak):	153.82 MB	169.69 MB
Working set:	2.89 MB	18.61 MB
Working set (peak):	20.89 MB	37.95 MB
Page faults:	809,850/min	2,039/min
I/O
I/O read transfer:	14.46 KB/sec	1.02 MB/min
I/O read operations:	14/sec	343/min
I/O write transfer:	404 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	714 Bytes/sec	448.09 KB/min
I/O other operations:	72/sec	1,671/min
Resource allocations
Threads:	21	12
Handles:	468	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	C:\progra~1\mcafee\msc\mcmscsvc.exe
Owner:	SYSTEM
Windows Service
Service name:	mcmscsvc
Display name:	mcmscsvc
Description:	“McAfee Services”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ntdll.dll
Total CPU:	0.01226387%	0.272967%
Kernel CPU:	0.01022236%	0.107585%
User CPU:	0.00204152%	0.165382%
CPU cycles:	226,207/sec	5,741,424/sec
Memory:	1.23 MB	1.16 MB
mcmscsvc.exe (main module)
Total CPU:	0.00874519%
Kernel CPU:	0.00512524%
User CPU:	0.00361996%
CPU cycles:	140,186/sec
Memory:	856 KB
ole32.dll
Total CPU:	0.00826478%
Kernel CPU:	0.00521286%
User CPU:	0.00305191%
CPU cycles:	135,023/sec
Memory:	1.36 MB
sechost.dll
Total CPU:	0.00001477%
Kernel CPU:	0.00001477%
User CPU:	0.00000000%
CPU cycles:	213/sec
Memory:	100 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	25.00%
Windows Vista Home Premium	25.00%
Windows 7 Starter	25.00%
Microsoft Windows XP	25.00%

Distribution by country

United States installs about 75.00% of McAfee SecurityCenter.

Distribution by PC manufacturer

PC Manufacturer	distribution
Acer	33.33%
Sony	33.33%
Dell	33.33%

Remove Adware and Spyware Programs, FREE Download!