Should I block it?

No, this file is 100% safe to run.

Additional versions

7,2,0,16	26.67%
7,2,0,15	6.67%
7,1,0,16	6.67%
7,1,0,15	33.33%
7,0,2,38	6.67%
6,9,1,41	6.67%
6,9,1,40	6.67%
6,9,0,34	6.67%

Relationships

Parent process

ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

IsValidSecurityDescriptor, GetSecurityDescriptorLength, MakeSelfRelativeSD, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, MakeAbsoluteSD, GetSecurityDescriptorControl, GetTokenInformation, EqualSid, ImpersonateSelf, OpenThreadToken, AllocateAndInitializeSid, InitializeSecurityDescriptor, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, AccessCheck, RevertToSelf, FreeSid, RegSetValueExW, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, RegEnumValueW, RegEnumKeyExW, RegOpenKeyExW, RegQueryValueExW, OpenProcessToken, DuplicateTokenEx, GetLengthSid, SetTokenInformation, CreateProcessAsUserW, RegNotifyChangeKeyValue, RegEnumKeyExA, RegQueryInfoKeyW, RegDeleteKeyA, RegEnumValueA, RegDeleteValueA, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, CryptDestroyHash, CryptDeriveKey, CryptHashData, CryptReleaseContext, CryptCreateHash, CryptAcquireContextA, CryptDestroyKey, CryptDecrypt, CryptEncrypt

gdi32.dll

TextOutA

kernel32.dll

DllMain

ole32.dll

CoInitialize, CoCreateGuid, CoUninitialize, CoInitializeEx, CoCreateInstance, CoTaskMemFree, StringFromCLSID, CLSIDFromProgID, CLSIDFromString, CoTaskMemAlloc, CoRegisterChannelHook, CoTaskMemRealloc

rpcrt4.dll

UuidToStringA, UuidCreate, RpcStringFreeA

shell32.dll

SHGetFolderLocation, SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetMalloc, Shell_NotifyIconA, ShellExecuteW, ShellExecuteA

shlwapi.dll

PathIsUNCA, PathIsUNCW, PathIsUNCServerA, PathIsUNCServerShareA, PathRemoveBackslashA, PathRemoveExtensionA, PathRemoveFileSpecA, PathSkipRootA, PathSkipRootW, PathStripPathA, PathStripPathW, PathUnquoteSpacesA, PathUnquoteSpacesW, PathCompactPathExW, PathGetCharTypeW, PathIsRootW, PathIsContentTypeA, PathIsSystemFolderA, PathIsURLA, AssocQueryStringW, PathAddBackslashW, PathRemoveFileSpecW, PathFindOnPathA, PathAppendA, PathCanonicalizeA, PathIsRootA, PathIsRelativeW, PathIsRelativeA, PathIsFileSpecW, PathIsFileSpecA, PathIsDirectoryA, PathGetDriveNumberA, PathFindExtensionA, PathFileExistsW, PathAppendW, PathAddExtensionA, PathAddBackslashA, PathRemoveArgsW, PathQuoteSpacesW, SHDeleteKeyA, PathFileExistsA, PathCreateFromUrlA, PathCanonicalizeW, PathQuoteSpacesA

urlmon.dll

CoInternetCreateZoneManager, CoInternetParseUrl

user32.dll

EnableMenuItem, TranslateMessage, MsgWaitForMultipleObjectsEx, PeekMessageA, IsWindow, CharNextA, FindWindowA, GetMessageA, LoadStringW, LoadStringA, UnregisterClassA, PostMessageA, RegisterWindowMessageA, SetWindowLongA, SendMessageA, BeginPaint, DestroyIcon, TranslateAcceleratorA, MsgWaitForMultipleObjects, GetFocus, WaitForInputIdle, keybd_event, GetForegroundWindow, GetWindowTextA, GetDesktopWindow, GetParent, IsWindowVisible, EnumWindows, GetWindowThreadProcessId, wvsprintfA, SendMessageTimeoutA, GetCursorPos, SetForegroundWindow, TrackPopupMenu, CreatePopupMenu, AppendMenuA, EndPaint, SetMenuDefaultItem, GetSystemMetrics, LoadImageA, CreateWindowExA, RegisterClassExA, CallWindowProcA, GetWindowLongA, DestroyMenu, DefWindowProcA, PostQuitMessage, DestroyWindow, LoadCursorA, GetClassInfoExA, KillTimer, SetTimer, GetDC, DispatchMessageA

version.dll

GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA

Export table

NR_RegAddKey

NR_RegAddKeyRaw

NR_RegClose

NR_RegDeleteEntry

NR_RegDeleteKey

NR_RegDeleteKeyRaw

NR_RegEnumEntries

NR_RegEnumSubkeys

NR_RegFlush

NR_RegGetEntry

NR_RegGetEntryInfo

NR_RegGetEntryString

NR_RegGetKey

NR_RegGetKeyRaw

NR_RegGetUsername

NR_RegIsWritable

NR_RegOpen

NR_RegSetBufferSize

NR_RegSetEntry

NR_RegSetEntryString

NR_RegSetUsername

NR_ShutdownRegistry

NR_StartupRegistry

VR_Close

VR_CreateRegistry

VR_Enum

VR_EnumUninstall

VR_GetDefaultDirectory

VR_GetPath

VR_GetRefCount

VR_GetUninstallUserName

VR_GetVersion

VR_InRegistry

VR_Install

VR_Remove

VR_SetDefaultDirectory

VR_SetRefCount

VR_SetRegDirectory

VR_UninstallAddFileToList

VR_UninstallCreateNode

VR_UninstallDeleteFileFromList

VR_UninstallDeleteSharedFilesKey

VR_UninstallDestroy

VR_UninstallEnumSharedFiles

VR_UninstallFileExistsInList

VR_ValidateComponent

pctrayapp.exe

McciTrayApp by Alcatel-Lucent

Remove pctrayapp.exe

Version:	6,9,0,34
MD5:	9b31f1060090087c6d2d631e79a8ac15
SHA1:	c0f9e6008f736c121eab79bce90a1d3f254fe48d
SHA256:	7488bd5926997068742a7013675060b02d905b3270fabe3d6050e00119ca94c9

Overview

pctrayapp.exe executes as a process with the local user's privileges typically within the context of its parent ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program AT&T Portal published by AT&T. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC).

Details

File name:	pctrayapp.exe
Publisher:	Alcatel-Lucent
Product name:	McciTrayApp
Description:	mcci+McciTrayApp
Typical file path:	C:\Program Files\comcast\pctrayapp.exe
Original name:	McciTrayApp.exe
File version:	6,9,0,34
Size:	1.85 MB (1,939,968 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Programs

The following program will install this file

AT&T Portal

AT&T

8% remove

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'TTNET_McciTrayApp' → "C:\Program Files\TTNET\pcTrayApp.exe"
'ATT-SST_McciTrayApp' → "C:\Program Files\ATT-SST\pcTrayApp.exe"
'Comcast_McciTrayApp' → "C:\Program Files\Comcast\pcTrayApp.exe"

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00223496%	0.028634%
Kernel CPU:	0.00066751%	0.013761%
User CPU:	0.00156745%	0.014873%
Kernel CPU time:	92,375 ms/min	100,923,805ms/min
Context switches:	128/sec	284/sec
Memory
Private memory:	9.78 MB	21.59 MB
Private (maximum):	5.09 MB
Private (minimum):	120 KB
Non-paged memory:	9.78 MB	21.59 MB
Virtual memory:	58.75 MB	140.96 MB
Virtual memory (peak):	63.99 MB	169.69 MB
Working set:	3.11 MB	18.61 MB
Working set (peak):	7.28 MB	37.95 MB
Page faults:	668,554/min	2,039/min
I/O
I/O read transfer:	51.88 KB/sec	1.02 MB/min
I/O read operations:	398/sec	343/min
I/O write transfer:	1.02 KB/sec	274.99 KB/min
I/O write operations:	14/sec	227/min
I/O other transfer:	526.06 KB/sec	448.09 KB/min
I/O other operations:	9,474/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	254	600
GUI GDI count:	16	103
GUI USER count:	26	49

Process properties

Tray notification:	Yes
Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\att-sst\pctrayapp.exe"
Owner:	User
Parent process:	ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation)

Threads

Averages

mccicontextdetectoremail_dsr.dll (by Alcatel-Lucent)
Total CPU:	0.22076876%	0.272967%
Kernel CPU:	0.12824452%	0.107585%
User CPU:	0.09252424%	0.165382%
Context switches:	101/sec	79/sec
Memory:	588 KB	1.16 MB
mcciwirelessclientappx.dll (by Alcatel-Lucent)
Total CPU:	0.02878967%
Kernel CPU:	0.01242972%
User CPU:	0.01635995%
Context switches:	5/sec
Memory:	1.48 MB
mccicontextdetectorwin32_dsr.dll (by Alcatel-Lucent)
Total CPU:	0.02015433%
Kernel CPU:	0.01184865%
User CPU:	0.00830567%
Context switches:	10/sec
Memory:	604 KB
mccicontextx.dll (by Alcatel-Lucent)
Total CPU:	0.00345587%
Kernel CPU:	0.00200382%
User CPU:	0.00145204%
Context switches:	3/sec
Memory:	536 KB
pcTrayApp.exe (main module)
Total CPU:	0.00311703%
Kernel CPU:	0.00221678%
User CPU:	0.00090026%
Memory:	1.87 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	40.00%
Windows 7 Home Premium	26.67%
Windows 7 Professional	20.00%
Windows Vista Home Premium	13.33%

Distribution by country

United States installs about 86.67% of McciTrayApp.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	63.16%
Hewlett-Packard	26.32%
Samsung	5.26%
Acer	5.26%

Remove Adware and Spyware Programs, FREE Download!