Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

7.0.0.1 52.00%
7.0.0.1 4.00%
7.0.0.1 4.00%
7.0.0.1 4.00%
7.0.0.1 4.00%
7.0.0.1 4.00%
7.0.0.1 20.00%
7.0.0.1 4.00%
7.0.0.1 4.00%
(Note, Nitro PDF Software publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
QueryServiceStatus, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, GetNamedSecurityInfoW, GetSecurityInfo, SetNamedSecurityInfoW, SetSecurityInfo, AllocateAndInitializeSid, SetEntriesInAclW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, SetServiceStatus, OpenServiceW, ControlService, DeleteService, CreateServiceW, ChangeServiceConfig2W, OpenSCManagerW, CloseServiceHandle, StartServiceW
kernel32.dll
GetQueuedCompletionStatus, RaiseException, lstrcmpiW, GetCommandLineW, SetFilePointer, CreateFileW, FindFirstFileW, lstrlenW, SetNamedPipeHandleState, lstrcpyW, GetTickCount, EnumSystemLocalesA, GetLocaleInfoA, FindNextFileW, FindClose, CopyFileW, ReadFile, WriteFile, FlushFileBuffers, DisconnectNamedPipe, CreateThread, ConnectNamedPipe, LocalAlloc, CreateNamedPipeW, LocalFree, GetLocalTime, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, LeaveCriticalSection, EnterCriticalSection, PostQueuedCompletionStatus, CreateIoCompletionPort, CloseHandle, Sleep, GetModuleFileNameW, GetLastError, WaitNamedPipeW, SetLastError, IsValidLocale, GetUserDefaultLCID, GetProcessHeap, RtlUnwind, EncodePointer, DecodePointer, HeapFree, GetProcAddress, GetModuleHandleW, ExitProcess, GetCommandLineA, HeapSetInformation, GetStartupInfoW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapAlloc, IsProcessorFeaturePresent, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, FatalAppExitA, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, GetCurrentThreadId, InterlockedDecrement, GetCurrentThread, HeapSize, HeapCreate, HeapDestroy, HeapReAlloc, SetConsoleCtrlHandler, FreeLibrary, InterlockedExchange, LoadLibraryW, GetLocaleInfoW, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, MultiByteToWideChar, SetStdHandle, WriteConsoleW, LCMapStringW, GetStringTypeW, SetEndOfFile
shell32.dll
CommandLineToArgvW, SHGetSpecialFolderPathW
user32.dll
MessageBoxW

nitropdfreaderdriverservice3.exe

Nitro Pro by Nitro PDF Software (Signed)

Remove nitropdfreaderdriverservice3.exe
Version:   7.0.0.1
MD5:   728ffe69194390df1d5b3d187bd0a1de
SHA1:   e8e96ac57aada9859e5be8627ccf41761094c357
SHA256:   cebb5b535e181532209496b910f447b91db174bfa721d6d00815c40a0a3de16d

Overview

nitropdfreaderdriverservice3.exe runs as a service under the name NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) with extensive SYSTEM privileges (full administrator access) as a shared service. It is installed with a couple of know programs including Nitro Reader 3 published by Nitro PDF Software and Google Talk Plugin published by Google Inc. The file is digitally signed by Nitro PDF Software which was issued by the COMODO CA Limited certificate authority (CA).

DetailsDetails

File name:nitropdfreaderdriverservice3.exe
Publisher:Nitro PDF Software
Product name:Nitro Pro
Description:Nitro PDF Spool Service
Typical file path:C:\Program Files\nitro\reader 3\nitropdfreaderdriverservice3.exe
Original name:Nitro PDF Spool Service
File version:7.0.0.1
Size:192.02 KB (196,624 bytes)
Certificate
Issued to:Nitro PDF Software
Authority (CA):COMODO CA Limited
Effective date:Monday, October 1, 2012
Expiration date:Thursday, October 1, 2015
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Google Inc
9% remove
Google Talk is an instant messaging service that provides both text and voice communication. Google Talk is also the name of the client applications offered by Google to access the service. Google Talk is integrated into Gmail. Users can send instant messages to other Gmail users. As it works within a browser, the Google Talk client does not need to be downloaded to send instant messages to Gmail users. Google also provides a Voice and ...
Nitro PDF Software
3% remove
Do everything you expect with a PDF reader, and then some. Create PDF files from any source easily. Sign them securely. Then collaborate with anyone, anywhere. Nitro PDF Reader allows you to create PDF files from over 300 different formats. Comment, review, and collaborate. Fill and save PDF forms. Extract text and images. Add a scanned image of your signature and use QuickSign to electronically sign and return documents in seconds. Nit...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
  • 'NitroReaderDriverReadSpool3' (NitroPDFReaderDriverCreatorReadSpool3)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00003283%
0.028634%
Kernel CPU:0.00000684%
0.013761%
User CPU:0.00002599%
0.014873%
Kernel CPU time:22,290 ms/min
100,923,805ms/min
CPU cycles:1,636/sec
17,470,203/sec
Memory
Private memory:946.29 KB
21.59 MB
Private (maximum):2.63 MB
Private (minimum):1.37 MB
Non-paged memory:946.29 KB
21.59 MB
Virtual memory:34.53 MB
140.96 MB
Virtual memory (peak):36.81 MB
169.69 MB
Working set:1.41 MB
18.61 MB
Working set (peak):2.99 MB
37.95 MB
Page faults:1,077/min
2,039/min
I/O
I/O other transfer:2 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:5
12
Handles:66
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\nitro\reader 3\nitropdfreaderdriverservice3.exe"
Owner:SYSTEM
Windows Service
Service name:NitroReaderDriverReadSpool3
Display name:NitroPDFReaderDriverCreatorReadSpool3
Description:“Nitro Reader Driver Read Spool 3”
Type:Win32ShareProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 48.00%
Windows Vista Ultimate 12.00%
Windows Vista Home Premium 8.00%
Windows 7 Starter 8.00%
Windows 7 Enterprise 8.00%
Microsoft Windows XP 8.00%
Windows 7 Home Premium 4.00%
Windows 8 Release Preview 4.00%

Distribution by countryDistribution by country

United States installs about 12.00% of Nitro Pro.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 47.62%
Hewlett-Packard 28.57%
Acer 14.29%
Toshiba 9.52%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE