Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3,15,101,0 20.00%
3,11,100,0 20.00%
3,0,193,0 20.00%
2,1,143,0 20.00%
1,0,176,0 20.00%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
QueryServiceStatus, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegOpenKeyExA, RegEnumKeyExA, FreeSid, EqualSid, DeregisterEventSource, ReportEventA, RegisterEventSourceA, RegQueryValueExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, DeleteService, CreateServiceW, ChangeServiceConfig2W, ChangeServiceConfigW, ControlService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, StartServiceW, SetServiceStatus, RegEnumValueW, RegCreateKeyExA, RegQueryValueExA, RegSetValueExA, RegEnumKeyExW, RegDeleteValueA, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, RegDeleteKeyW
iphlpapi.dll
GetIfEntry, GetAdaptersInfo, GetNumberOfInterfaces, GetIpForwardTable, GetIpStatistics, SendARP
kernel32.dll
DllMain
ole32.dll
CoResumeClassObjects, CoCreateInstance, StringFromGUID2, CoRevokeClassObject, CoInitializeSecurity, CoGetClassObject, CoSuspendClassObjects, CoInitializeEx, CoUninitialize, CoDisconnectObject, CoCreateFreeThreadedMarshaler, CLSIDFromString, StringFromCLSID, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoRegisterClassObject
rpcrt4.dll
UuidCreate, UuidCompare, UuidToStringA, RpcStringFreeA, UuidFromStringA, UuidToStringW, RpcStringFreeW, UuidFromStringW
shell32.dll
SHGetFolderPathW
user32.dll
CharNextW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, LoadStringW, CharUpperW, PostThreadMessageW, GetMessageW, DispatchMessageW, TranslateMessage, wsprintfW, GetUserObjectInformationW
wintrust.dll
WinVerifyTrust

McNASvc.exe

McAfee Integrated Security Platform by McAfee (Signed)

Remove McNASvc.exe
Version:   3,11,100,0
MD5:   2dbd66025339c2540efecffbb5eb2380
SHA1:   cec7e571b2c02318bdb6c6d2780a66531a0e5700
SHA256:   defc50d9caaad388ae78dbdfe4d051455a944d5168ac529ccb344a0cdccf63f6

Overview

McNASvc.exe runs as a service under the name McNASvc (McNASvc) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:McNASvc.exe
Publisher:McAfee, Inc.
Product name:McAfee Integrated Security Platform
Description:McAfee Network Agent
Typical file path:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
File version:3,11,100,0
Product version:3,11,0,0
Size:2.37 MB (2,482,848 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Effective date:Friday, September 12, 2008
Expiration date:Sunday, October 9, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • McNASvc
  • 'McNASvc' (McAfee Network Agent)
Network connections
  • [UDP] listens on port 6646

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00019063%
    0.028634%
    Kernel CPU:0.00011031%
    0.013761%
    User CPU:0.00008032%
    0.014873%
    Kernel CPU time:579,762 ms/min
    100,923,805ms/min
    CPU cycles:4,380,703/sec
    17,470,203/sec
    Memory
    Private memory:7.88 MB
    21.59 MB
    Private (maximum):7.33 MB
    Private (minimum):808 KB
    Non-paged memory:7.88 MB
    21.59 MB
    Virtual memory:110.37 MB
    140.96 MB
    Virtual memory (peak):114.37 MB
    169.69 MB
    Working set:1.97 MB
    18.61 MB
    Working set (peak):10.54 MB
    37.95 MB
    Page faults:17,139,224/min
    2,039/min
    I/O
    I/O read transfer:4.39 KB/sec
    1.02 MB/min
    I/O read operations:4/sec
    343/min
    I/O write transfer:71 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:18.65 KB/sec
    448.09 KB/min
    I/O other operations:769/sec
    1,671/min
    Resource allocations
    Threads:16
    12
    Handles:435
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Command line:"C:\progra~1\common~1\mcafee\mna\mcnasvc.exe"
    Owner:SYSTEM
    Windows Service
    Service name:McNASvc
    Display name:McNASvc
    Description:“Allows McAfee applications to communicate securely on the local network.”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    mcnasvc.exe (main module)
    Total CPU:0.04290371%
    0.272967%
    Kernel CPU:0.03146220%
    0.107585%
    User CPU:0.01144151%
    0.165382%
    CPU cycles:716,517/sec
    5,741,424/sec
    Memory:2.37 MB
    1.16 MB
    ole32.dll
    Total CPU:0.01455804%
    Kernel CPU:0.00837198%
    User CPU:0.00618606%
    CPU cycles:232,374/sec
    Memory:1.36 MB
    ntdll.dll
    Total CPU:0.00679817%
    Kernel CPU:0.00174877%
    User CPU:0.00504940%
    CPU cycles:118,918/sec
    Memory:1.23 MB
    sechost.dll
    Total CPU:0.00004923%
    Kernel CPU:0.00002954%
    User CPU:0.00001969%
    CPU cycles:936/sec
    Memory:100 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 40.00%
    Windows Vista Home Premium 20.00%
    Windows 7 Starter 20.00%
    Microsoft Windows XP 20.00%

    Distribution by countryDistribution by country

    United States installs about 80.00% of McAfee Integrated Security Platform.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 25.00%
    Acer 25.00%
    Sony 25.00%
    Dell 25.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE