Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3,15,101,0 20.00%
3,11,100,0 20.00%
3,0,193,0 20.00%
2,1,143,0 20.00%
1,0,176,0 20.00%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
QueryServiceStatus, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegOpenKeyExA, RegEnumKeyExA, FreeSid, EqualSid, DeregisterEventSource, ReportEventA, RegisterEventSourceA, RegQueryValueExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, DeleteService, CreateServiceW, ChangeServiceConfig2W, ChangeServiceConfigW, ControlService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, StartServiceW, SetServiceStatus, RegEnumValueW, RegCreateKeyExA, RegQueryValueExA, RegSetValueExA, RegEnumKeyExW, RegDeleteValueA, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, RegDeleteKeyW
iphlpapi.dll
GetIfEntry, GetAdaptersInfo, GetNumberOfInterfaces, GetIpForwardTable, GetIpStatistics, SendARP
kernel32.dll
DllMain
ole32.dll
CoResumeClassObjects, CoCreateInstance, StringFromGUID2, CoRevokeClassObject, CoInitializeSecurity, CoGetClassObject, CoSuspendClassObjects, CoInitializeEx, CoUninitialize, CoDisconnectObject, CoCreateFreeThreadedMarshaler, CLSIDFromString, StringFromCLSID, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoRegisterClassObject
rpcrt4.dll
UuidCreate, UuidCompare, UuidToStringA, RpcStringFreeA, UuidFromStringA, UuidToStringW, RpcStringFreeW, UuidFromStringW
shell32.dll
SHGetFolderPathW
user32.dll
CharNextW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, LoadStringW, CharUpperW, PostThreadMessageW, GetMessageW, DispatchMessageW, TranslateMessage, wsprintfW, GetUserObjectInformationW
wintrust.dll
WinVerifyTrust

McNASvc.exe

McAfee Integrated Security Platform by McAfee (Signed)

Remove McNASvc.exe
Version:   3,15,101,0
MD5:   2988e515570e4f8b9d9b256137f8e8f4
SHA1:   2f09fbba703a113d12164952e1fb25a142337a6b
SHA256:   b487efd368d380f2f416d61fb947f7004b9ce04f8b2a821d04278e5ac65637f5

Overview

McNASvc.exe runs as a service under the name McNASvc (McNASvc) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:McNASvc.exe
Publisher:McAfee, Inc.
Product name:McAfee Integrated Security Platform
Description:McAfee Network Agent
Typical file path:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
File version:3,15,101,0
Product version:3,15,0,0
Size:2.37 MB (2,482,848 bytes)
Build date:7/7/2009 7:06 PM
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Effective date:Friday, September 12, 2008
Expiration date:Sunday, October 9, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • McNASvc
  • 'McNASvc' (McAfee Network Agent)
Network connections
  • [UDP] listens on port 6646

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00024734%
    0.028634%
    Kernel CPU:0.00004549%
    0.013761%
    User CPU:0.00020186%
    0.014873%
    Kernel CPU time:30,217 ms/min
    100,923,805ms/min
    CPU cycles:1,301,341/sec
    17,470,203/sec
    Memory
    Private memory:6.94 MB
    21.59 MB
    Private (maximum):8.05 MB
    Private (minimum):900 KB
    Non-paged memory:6.94 MB
    21.59 MB
    Virtual memory:99.31 MB
    140.96 MB
    Virtual memory (peak):102.31 MB
    169.69 MB
    Working set:7.79 MB
    18.61 MB
    Working set (peak):15.08 MB
    37.95 MB
    Page faults:1,666,543/min
    2,039/min
    I/O
    I/O read transfer:8.8 KB/sec
    1.02 MB/min
    I/O read operations:8/sec
    343/min
    I/O write transfer:198 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:12.72 KB/sec
    448.09 KB/min
    I/O other operations:683/sec
    1,671/min
    Resource allocations
    Threads:15
    12
    Handles:397
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Command line:"C:\Program Files\common files\mcafee\mna\mcnasvc.exe"
    Owner:SYSTEM
    Windows Service
    Service name:McNASvc
    Display name:McNASvc
    Description:“Allows McAfee applications to communicate securely on the local network.”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    ole32.dll
    Total CPU:0.02401801%
    0.272967%
    Kernel CPU:0.01114258%
    0.107585%
    User CPU:0.01287543%
    0.165382%
    CPU cycles:288,426/sec
    5,741,424/sec
    Memory:1.36 MB
    1.16 MB
    McNASvc.exe (main module)
    Total CPU:0.00038144%
    Kernel CPU:0.00020053%
    User CPU:0.00018091%
    CPU cycles:304,586/sec
    Context switches:1/sec
    Memory:2.37 MB
    ntdll.dll
    Total CPU:0.00033597%
    Kernel CPU:0.00021380%
    User CPU:0.00012217%
    CPU cycles:9,305/sec
    Memory:1.23 MB
    sechost.dll
    Total CPU:0.00003270%
    Kernel CPU:0.00001308%
    User CPU:0.00001962%
    CPU cycles:645/sec
    Memory:100 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 40.00%
    Windows Vista Home Premium 20.00%
    Windows 7 Starter 20.00%
    Microsoft Windows XP 20.00%

    Distribution by countryDistribution by country

    United States installs about 80.00% of McAfee Integrated Security Platform.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 25.00%
    Acer 25.00%
    Sony 25.00%
    Dell 25.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE