SBAMSvc.exe
GFI AntiMalware Common SDK Merge Module by GFI Software (Florida) Inc. (Signed)
| Version: | 5.2.5162 |
| MD5: | 18530d2f605f1ec48ca20a7b184ccbcc |
| SHA1: | 16e8309421fd9c992a2e640888c87a3c0ccd500a |
| SHA256: | 1002ca1f745bf431dc4c8759df86c841a1de6248d70b28a3e2a7e6ab03370346 |
What is SBAMSvc.exe?
GFI Software Anti Malware Service - GFI/VIPRE Antivirus combines antispyware and antivirus together which detects and removes viruses, spyware, rootkits, bots, Trojans and all other types of malware.
About SBAMSvc.exe (from GFI Software (Florida) Inc.)
“Get everything you need to protect your PC with Vipre Internet Security. This anti-malware solution includes a firewall and spam blocker for highly efficient online security that won't slow down your ”
Details
| File name: | sbamsvc.exe |
| Publisher: | GFI Software |
| Product name: | GFI AntiMalware Common SDK Merge Module |
| Description: | GFI Software Anti Malware Service |
| Typical file path: | C:\Program Files\gfi software\vipre\sbamsvc.exe |
| File version: | 5.2.5162 |
| Size: | 3.14 MB (3,289,680 bytes) |
| Certificate |
| Issued to: | GFI Software (Florida) Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Sunday, January 25, 2015 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“Vipre Antivirus is the essential antivirus software that protects against over 100,000 new web threats every day without slowing down your computer. It also eliminates conflicts during installation with Vipre Easy Install, protects against email viruses and phishing scams and scans USB sticks and other removable drives for malicious software. Vipre Antivirus keeps your personal and financial information safe from identity theft, cybercr...”
“VIPRE Internet Security is the award-winning antivirus software that includes a firewall, a spam filter and bad website blocking into one powerful solution for complete protection against malware. From a two-way firewall that keeps away malicious Internet traffic to VIPRE® Easy Update™ that automatically updates out-of-date software, VIPRE Internet Security 2013 features provide complete PC security. Updates the most common cause of PC ...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'SBAMSvc' (XoftSpy AntiVirus Pro)
- SBAMSvc
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.41258330% | |
| Kernel CPU: | 0.18389728% | |
| User CPU: | 0.22868602% | |
| Kernel CPU time: | 38,225 ms/min | |
| Context switches: | 183/sec | |
| Memory |
| Private memory: | 50.37 MB | |
| Private (maximum): | 26.82 MB | |
| Private (minimum): | 11.45 MB | |
| Non-paged memory: | 50.37 MB | |
| Virtual memory: | 217.14 MB | |
| Virtual memory (peak): | 311.17 MB | |
| Working set: | 26.94 MB | |
| Working set (peak): | 154.22 MB | |
| Resource allocations |
| Threads: | 35 | |
| Handles: | 600 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\gfi software\vipre\sbamsvc.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | SBAMSvc |
| Display name: | XoftSpy AntiVirus Pro |
| Description: | “Manages your antispyware and antivirus application” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| SBAMSvc.exe (main module) |
| Total CPU: | 0.82354887% | |
| Kernel CPU: | 0.49240116% | |
| User CPU: | 0.33114771% | |
| CPU cycles: | 20,869,825/sec | |
| Context switches: | 11/sec | |
| Memory: | 3.16 MB | |
| sbap.dll (GFI AntiMalware Common SDK Merge Module by GFI Software) |
| Total CPU: | 0.77737346% | |
| Kernel CPU: | 0.55865742% | |
| User CPU: | 0.21871605% | |
| CPU cycles: | 19,596,860/sec | |
| Context switches: | 7/sec | |
| Memory: | 576 KB | |
| sechost.dll |
| Total CPU: | 0.16332133% | |
| Kernel CPU: | 0.13765655% | |
| User CPU: | 0.02566478% | |
| CPU cycles: | 4,335,163/sec | |
| Context switches: | 9/sec | |
| Memory: | 100 KB | |
| ntdll.dll |
| Total CPU: | 0.02352616% | |
| Kernel CPU: | 0.02117355% | |
| User CPU: | 0.00235262% | |
| CPU cycles: | 643,100/sec | |
| Memory: | 1.23 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
30.77% |
|
| Windows 7 Professional |
17.31% |
|
| Windows 7 Ultimate |
11.54% |
|
| Windows 8 Pro |
11.54% |
|
| Windows 8 Pro with Media Center |
11.54% |
|
| Microsoft Windows XP |
9.62% |
|
| Windows Vista Business |
3.85% |
|
| Windows 7 Ultimate N |
1.92% |
|
| Windows Vista Ultimate |
1.92% |
|
Distribution by country
United States installs about 73.08% of GFI AntiMalware Common SDK Merge Module.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
29.79% |
|
| Hewlett-Packard |
27.66% |
|
| GIGABYTE |
10.64% |
|
| Acer |
10.64% |
|
| ASUS |
8.51% |
|
| Samsung |
8.51% |
|
| Sony |
4.26% |
|
