SDFSSvc.exe
Spybot - Search & Destroy by Safer Networking Ltd. (Signed)
| Version: | 2.2.25.211 |
| MD5: | 98ef79cc2b07398ac525f9ea1ae0366f |
| SHA1: | 5ceb3252b941d13f2d506362fa328c296e65ea79 |
What is SDFSSvc.exe?
Spybot-S&D 2 Scanner Service for Spybot Search & Destroy (S&D) is a spyware and adware removal computer program that scans the computer hard disk and/or RAM for malicious software. In addition to spyware and adware detection and disinfection, Spybot-S&D can repair the registry, winsock LSPs, ActiveX objects, browser hijackers and BHOs, PUPS, computer cookies, trackerware, heavy duty, homepage hijackers, keyloggers, LSP, tracks, trojans, spybots, revision, and other kinds of malware.
About SDFSSvc.exe (from Safer Networking Ltd.)
“Spybot-S&D is free for private use. Even if you don’t see the symptoms, your computer may be infected. The creators of spyware are constantly developing new ways of invading your privacy. Team Spybot ”
Details
| File name: | sdfssvc.exe |
| Publisher: | Safer-Networking Ltd. |
| Product name: | Spybot - Search & Destroy |
| Description: | Spybot-S&D 2 Scanner Service |
| Typical file path: | C:\Program Files\spybot - search & destroy 2\sdfssvc.exe |
| File version: | 2.2.25.211 |
| Product version: | 2.2.25.0 |
| Size: | 3.74 MB (3,921,880 bytes) |
| Build date: | 10/15/2013 6:27 AM |
| Certificate |
| Issued to: | Safer Networking Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, March 20, 2012 |
| Expiration date: | Tuesday, April 7, 2015 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Spybot Search & Destroy (S&D) is a spyware and adware removal computer program compatible with Microsoft Windows. It scans the computer hard disk and/or RAM for malicious software. In addition to spyware and adware detection and disinfection, Spybot-S&D can repair the registry, winsock LSPs, ActiveX objects, browser hijackers and BHOs, PUPS, computer cookies, trackerware, heavy duty, homepage hijackers, keyloggers, LSP, tracks, trojans,...
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- SDScannerService
- 'SDScannerService' (Spybot-S&D 2 Scanner Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe'
- Firewall exception for 'C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 57033
[UDP] listens on port 60248
[UDP] listens on port 51023
[UDP] listens on port 54425
[UDP] listens on port 57199
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00030577% | |
| Kernel CPU: | 0.00013028% | |
| User CPU: | 0.00017549% | |
| Kernel CPU time: | 6,595,083 ms/min | |
| CPU cycles: | 9,031,591/sec | |
| Context switches: | 118/sec | |
| Memory |
| Private memory: | 64.24 MB | |
| Private (maximum): | 41.36 MB | |
| Private (minimum): | 17.81 MB | |
| Non-paged memory: | 64.24 MB | |
| Virtual memory: | 195.64 MB | |
| Virtual memory (peak): | 203.6 MB | |
| Working set: | 26.58 MB | |
| Working set (peak): | 46.69 MB | |
| Page faults: | 8,380,759/min | |
| I/O |
| I/O read transfer: | 135.38 KB/sec | |
| I/O read operations: | 630/sec | |
| I/O write transfer: | 27.66 KB/sec | |
| I/O write operations: | 106/sec | |
| I/O other transfer: | 89.83 KB/sec | |
| I/O other operations: | 3,732/sec | |
| Resource allocations |
| Threads: | 19 | |
| Handles: | 437 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\spybot - search & destroy 2\sdfssvc.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | SDScannerService |
| Display name: | SDScannerService |
| Description: | “Offers malware scanning services to Spybot-S&D modules.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| SDFSSvc.exe (main module) |
| Total CPU: | 0.00063281% | |
| Kernel CPU: | 0.00043248% | |
| User CPU: | 0.00020034% | |
| CPU cycles: | 997,184/sec | |
| Context switches: | 3/sec | |
| Memory: | 3.86 MB | |
| wow64win.dll |
| Total CPU: | 0.00000077% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00000077% | |
| CPU cycles: | 2/sec | |
| Memory: | 360 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
48.12% |
|
| Microsoft Windows XP |
11.28% |
|
| Windows 7 Professional |
9.77% |
|
| Windows 7 Ultimate |
7.52% |
|
| Windows 8 |
5.26% |
|
| Windows 8.1 Pro |
4.51% |
|
| Windows 8 Pro with Media Center |
3.01% |
|
| Windows 8 Single Language |
2.26% |
|
| Windows Vista Home Basic |
2.26% |
|
| Windows Vista Home Premium |
2.26% |
|
| Windows 7 Home Basic |
2.26% |
|
| Windows Vista Business |
1.50% |
|
Distribution by country
United States installs about 62.41% of Spybot - Search & Destroy.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
25.95% |
|
| Sony |
19.85% |
|
| Hewlett-Packard |
12.98% |
|
| ASUS |
10.69% |
|
| Acer |
9.16% |
|
| Toshiba |
4.58% |
|
| Intel |
4.58% |
|
| American Megatrends |
3.82% |
|
| Lenovo |
3.05% |
|
| Alienware |
2.29% |
|
| Samsung |
2.29% |
|
| GIGABYTE |
0.76% |
|
