Should I block it?

No, this file is 100% safe to run.

Additional versions

5,3,20,1	6.25%
5,3,20,1	68.75%
5,3,16,2	18.75%
5,3,10,2	6.25%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

AdjustTokenPrivileges, LookupPrivilegeValueW, PrivilegeCheck, OpenThreadToken, OpenProcessToken, RegCreateKeyExW, RegSetValueExW, RegCloseKey, RegQueryValueExW, OpenServiceW, StartServiceCtrlDispatcherW, OpenSCManagerW, DeleteService, RegisterServiceCtrlHandlerW, CloseServiceHandle, CreateServiceW, SetServiceStatus

kernel32.dll

WaitForSingleObject, HeapReAlloc, LoadLibraryW, Sleep, HeapAlloc, CloseHandle, CreateEventW, GetCurrentProcess, HeapFree, GetComputerNameW, ResetEvent, GetProcessHeap, SetProcessWorkingSetSize, OpenProcess, WaitForMultipleObjects, FlushFileBuffers, CreateFileA, GetLastError, GetModuleFileNameW, SetEvent, InitializeCriticalSection, EnterCriticalSection, GetProcAddress, DeleteCriticalSection, LeaveCriticalSection, FreeLibrary, GetVersionExW, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, RtlUnwind, LoadLibraryA, VirtualAlloc, lstrlenW, GetFileAttributesW, GetCurrentDirectoryW, SetCurrentDirectoryW, GetModuleHandleW, GetCurrentThread, CreateWaitableTimerW, SetWaitableTimer, CancelWaitableTimer, TerminateThread, ExitThread, GetCurrentThreadId, CreateThread, GetVersionExA, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, HeapSize, ExitProcess, RaiseException, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, MultiByteToWideChar, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, SetFilePointer, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA

rpcrt4.dll

RpcRevertToSelfEx, RpcImpersonateClient, RpcServerRegisterIfEx, NdrServerCall2, RpcServerListen, RpcServerUnregisterIf, RpcSsDontSerializeContext, RpcServerUseProtseqEpW, RpcMgmtStopServerListening

user32.dll

MessageBoxW

vseamps.exe

AVSDK5 by Commtouch (Signed)

Remove vseamps.exe

Version:	5,3,10,2
MD5:	d358bf81f109b08708e7d1038c54db83
SHA1:	e82a57d3fd7efec6f60cc17db7d1fb514d865122
SHA256:	6afc617d26cb9003e29165c73b2638f083650519c518cdb0c94a35a3cc55769f

Overview

vseamps.exe runs as a service under the name vseamps with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Commtouch which was issued by the VeriSign certificate authority (CA).

Details

File name:	vseamps.exe
Publisher:	Commtouch, Inc.
Product name:	AVSDK5
Description:	AVSDK5 Active Protection Singleton Service
Typical file path:	C:\Program Files\common files\authentium\antivirus5\vseamps.exe
File version:	5,3,10,2
Size:	118.31 KB (121,152 bytes)
Certificate
Issued to:	Commtouch
Authority (CA):	VeriSign
Effective date:	Wednesday, December 8, 2010
Expiration date:	Sunday, December 8, 2013
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'vseamps'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00108509%	0.028634%
Kernel CPU:	0.00108509%	0.013761%
Kernel CPU time:	109 ms/min	100,923,805ms/min
CPU cycles:	58,454/sec	17,470,203/sec
Memory
Private memory:	2.86 MB	21.59 MB
Private (maximum):	1.32 MB
Private (minimum):	292 KB
Non-paged memory:	2.86 MB	21.59 MB
Virtual memory:	45.57 MB	140.96 MB
Virtual memory (peak):	50.58 MB	169.69 MB
Working set:	852 KB	18.61 MB
Working set (peak):	4.76 MB	37.95 MB
Page faults:	3,731/min	2,039/min
I/O
I/O read transfer:	98.82 KB/sec	1.02 MB/min
I/O read operations:	9/sec	343/min
I/O other transfer:	13 Bytes/sec	448.09 KB/min
I/O other operations:	6/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	90	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\common files\authentium\antivirus5\vseamps.exe"
Owner:	SYSTEM
Windows Service
Service name:	vseamps
Description:	“AVSDK5 On Access API”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:	0.00307091%	0.272967%
Kernel CPU:	0.00307091%	0.107585%
User CPU:	0.00000000%	0.165382%
CPU cycles:	31,597/sec	5,741,424/sec
Memory:	124 KB	1.16 MB
ntdll.dll
Total CPU:	0.00061418%
Kernel CPU:	0.00061418%
User CPU:	0.00000000%
CPU cycles:	1,513/sec
Memory:	1.66 MB
vseamps.exe (main module)
Total CPU:	0.00061418%
Kernel CPU:	0.00061418%
User CPU:	0.00000000%
CPU cycles:	7,138/sec
Memory:	132 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

ampvseapi.dll (Commtouch AMP 5 by Commtouch)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	37.50%
Windows 7 Professional	18.75%
Windows 8.1	12.50%
Windows 8 Pro	12.50%
Windows 7 Ultimate	12.50%
Windows 8 Pro with Media Center	6.25%

Distribution by country

United States installs about 93.75% of AVSDK5.

Distribution by PC manufacturer

PC Manufacturer	distribution
Hewlett-Packard	45.45%
Dell	36.36%
GIGABYTE	18.18%

Remove Adware and Spyware Programs, FREE Download!