st_rsser64.exe
Spyware Terminator 2012 by Crawler (Signed)
Overview
There are 4 versions of st_rsser64.exe in the wild, the latest version being 3.0.0.34. It is started as a Windows Service called 'ST2012_Svc' with the name 'ST2012_Svc' and described as “Spyware Terminator 2012 Realtime Shield Service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.1 MB. The file is a digitally signed and issued to Crawler by VeriSign. Some variations of the file have been seen to be installed with the program Spyware Terminator 2012 from Crawler, LLC. During the process's lifecycle, the typical CPU resource utilization is about 0.0083% including both foreground and background operations, the average private memory consumption is about 37.66 MB and typical read I/O operations are around 24.58 KB per minute.
What is st_rsser64.exe?
Spyware Terminator 2012 Realtime Shield Service is part of the Spyware Terminator antispyware program. Spyware Terminator installs the Crawler Toolbar, a web browser toolbar that collects browser actions in order to redirect search queries to partners as well as provide advertisements.
About st_rsser64.exe (from Crawler)
“Spyware Terminator is a free security application that protects a computer against spyware, malware and adware. It has a paid version that is extended by the popular F-PROT antivirus, so the Spyware T”
Details |
File name: | st_rsser64.exe |
Publisher: | Crawler.com |
Product name: | Spyware Terminator 2012 |
Description: | Spyware Terminator 2012 Realtime Shield Service |
Typical file path: | C:\Program Files\spyware terminator\st_rsser64.exe |
Original name: | st_rsser.exe |
Certificate |
Issued to: | Crawler |
Authority (CA): | VeriSign |
Effective date: | Thursday, December 9, 2010 |
Expiration date: | Wednesday, December 11, 2013 |
Windows Service |
Service name: | ST2012_Svc |
Display name: | ST2012_Svc |
Description: | “Spyware Terminator 2012 Realtime Shield Service” |
Type: | Win32OwnProcess |
Programs installed in
(Note, the programs listed below are for all versions of Spyware Terminator 2012.)
“Effectively remove spyware from your PC and prevent infections with 24/7 real-time protection. Anyone that uses the Internet is at risk of losing their privacy and having their computer seriously dama...”
Behaviors
(Note, the behaviors below are for all versions of st_rsser64.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- ST2012_Svc
- 'ST2012_Svc' (Spyware Terminator 2012 Realtime Shield Service)
All file variations of st_rsser64.exe