Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
GetSidSubAuthority, RegQueryValueExA, RegCloseKey, AllocateAndInitializeSid, RegisterEventSourceA, ReportEventA, DeregisterEventSource, SetFileSecurityW, ConvertStringSecurityDescriptorToSecurityDescriptorW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, GetTokenInformation, GetUserNameW, StartServiceCtrlDispatcherW, StartServiceW, LockServiceDatabase, InitializeSid, GetSidLengthRequired, CopySid, GetLengthSid, IsValidSid, SetSecurityInfo, AddAce, InitializeAcl, LookupPrivilegeValueW, RevertToSelf, ImpersonateLoggedOnUser, OpenProcessToken, DuplicateTokenEx, LogonUserW, AdjustTokenPrivileges, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegOpenKeyExA, QueryServiceLockStatusW, LookupAccountSidW, DeleteService, ControlService, EnumServicesStatusW, QueryServiceStatus, SetServiceStatus, RegisterServiceCtrlHandlerExW, CreateServiceW, UnlockServiceDatabase, ChangeServiceConfigW
crypt32.dll
CryptUnprotectData, CryptProtectData
iphlpapi.dll
NotifyAddrChange
kernel32.dll
GetLastError, SizeofResource, LockResource, LoadResource, FreeLibrary, GetLocalTime, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, InterlockedIncrement, InterlockedDecrement, SetEvent, ResetEvent, GetLogicalDrives, InterlockedExchange, InitializeCriticalSectionAndSpinCount, CloseHandle, ReleaseSemaphore, GetCurrentThreadId, ReleaseMutex, WaitForSingleObject, lstrlenA, InterlockedExchangeAdd, MoveFileExW, GetCurrentProcessId, GetTickCount, GetVersion, OpenProcess, SetProcessWorkingSetSize, GetCurrentProcess, GetExitCodeProcess, TerminateProcess, DeviceIoControl, TryEnterCriticalSection, LocalFree, LocalAlloc, ProcessIdToSessionId, FindClose, GetSystemTimeAsFileTime, QueryPerformanceCounter, QueryPerformanceFrequency, ExitProcess, GetCommandLineW, CreateThread, UnmapViewOfFile, MapViewOfFile, WaitForMultipleObjects, GetSystemTime, FileTimeToSystemTime, GetFileTime, InterlockedCompareExchange, PostQueuedCompletionStatus, GetQueuedCompletionStatus, CreateIoCompletionPort, TerminateThread, SystemTimeToFileTime, GetFileSize, LoadLibraryA, CompareStringA, GetModuleHandleA, SetLastError, ResumeThread, SetThreadPriority, GetFileType, GetStdHandle, WriteFile, FlushViewOfFile, GetSystemInfo, ReadFile, SetFilePointer, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, Sleep
msvcp90.dll
DllMain
msvcr90.dll
DllMain
netapi32.dll
NetServerGetInfo, NetUserGetInfo, NetApiBufferFree, NetUserAdd, NetUserSetInfo, NetUserEnum, NetUserDel
ole32.dll
CLSIDFromProgID, CoTaskMemFree, CoUninitialize, CoInitializeSecurity, CoInitializeEx, CoCreateInstance, CoGetClassObject, CoReleaseMarshalData, CoTaskMemAlloc, CoTaskMemRealloc, OleRun, CoCreateGuid, CoInitialize, StringFromGUID2, CoRegisterClassObject, CoRevokeClassObject, CoGetObject, CoMarshalInterface
rpcrt4.dll
UuidCreateSequential, RpcStringFreeW, UuidFromStringW, UuidToStringW
setupapi.dll
SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList
shell32.dll
ShellExecuteExW, SHGetFolderPathW, SHGetSpecialFolderPathW, SHGetFileInfoW
shlwapi.dll
PathFileExistsW, PathStripPathW, PathIsRelativeW, PathRemoveExtensionW, PathRemoveBackslashW, PathAddBackslashW, PathAppendW, PathRemoveFileSpecW
user32.dll
KillTimer, GetThreadDesktop, GetUserObjectInformationW, PeekMessageW, MsgWaitForMultipleObjects, MessageBoxA, GetDesktopWindow, AllowSetForegroundWindow, ShowWindow, TranslateMessage, PostQuitMessage, GetForegroundWindow, GetProcessWindowStation, RegisterWindowMessageW, EnumWindows, BringWindowToTop, SetForegroundWindow, SendMessageTimeoutW, LoadImageW
winhttp.dll
WinHttpOpen, WinHttpCloseHandle
wintrust.dll
CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext, CryptCATAdminEnumCatalogFromHash, CryptCATCatalogInfoFromContext, CryptCATAdminReleaseContext, WinVerifyTrust
ws2_32.dll
WSACreateEvent, WSARecvFrom, WSAGetOverlappedResult, WSASendTo, WSASocketW
wslib.dll
WSLibNew, WSLibDelete
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW

vsserv.exe

BitDefender 2010 by BITDEFENDER LLC (Signed)

Remove vsserv.exe
Version:   13,0,20,8
MD5:   b715abf90831a37918eb4cad2cf9df69
SHA1:   855781b48a9070937688409e721aed47f9a2d2b4
SHA256:   f8087346450aabf8dc1adf120b7d2880b5083824929068ac7b319b87039220dc

Overview

vsserv.exe runs as a service under the name BitDefender Virus Shield (VSSERV) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program BitDefender Internet Security 2010 published by Bitdefender. The file is digitally signed by BITDEFENDER LLC which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows Vista (TM) Home Premium (6.0.6002.131072).

DetailsDetails

File name:vsserv.exe
Publisher:BitDefender S.R.L.
Product name:BitDefender 2010
Description:BitDefender Security Service
Typical file path:C:\Program Files\bitdefender\bitdefender 2010\vsserv.exe
File version:13,0,20,8
Product version:13,0,18,344
Size:1.54 MB (1,615,688 bytes)
Build date:4/26/2010 3:59 PM
Certificate
Issued to:BITDEFENDER LLC
Authority (CA):VeriSign
Effective date:Wednesday, January 20, 2010
Expiration date:Wednesday, January 25, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
BitDefender Internet Security 2010
 Bitdefender
4% remove
“Surf the Internet and socialize without worries. Your private information cannot be seen or stolen by hackers. Bitdefender Autopilot™ automatically takes the best security-related decisions for you, offering silent security. Active Virus Control is a proactive, dynamic detection technology. It monitors processes’ behavior in real time, as they are running, and tags suspicious activities. Enables you to keep track of all of your secur...”

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'VSSERV' (BitDefender Virus Shield)
Network connections
  • [UDP] listens on port 10000

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00040586%
    0.028634%
    Kernel CPU:0.00005996%
    0.013761%
    User CPU:0.00034590%
    0.014873%
    Kernel CPU time:16,068 ms/min
    100,923,805ms/min
    CPU cycles:3,620,803/sec
    17,470,203/sec
    Memory
    Private memory:74.42 MB
    21.59 MB
    Private (maximum):6.65 MB
    Private (minimum):868 KB
    Non-paged memory:74.42 MB
    21.59 MB
    Virtual memory:412.2 MB
    140.96 MB
    Virtual memory (peak):422.2 MB
    169.69 MB
    Working set:2.23 MB
    18.61 MB
    Working set (peak):90.21 MB
    37.95 MB
    Page faults:880,278/min
    2,039/min
    I/O
    I/O read transfer:35.39 KB/sec
    1.02 MB/min
    I/O read operations:50/sec
    343/min
    I/O write transfer:1.99 KB/sec
    274.99 KB/min
    I/O write operations:51/sec
    227/min
    I/O other transfer:30.9 KB/sec
    448.09 KB/min
    I/O other operations:190/sec
    1,671/min
    Resource allocations
    Threads:35
    12
    Handles:649
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Command line:"C:\Program Files\bitdefender\bitdefender 2010\vsserv.exe" /service
    Owner:SYSTEM
    Windows Service
    Service name:VSSERV
    Display name:BitDefender Virus Shield
    Description:“Scans media for viruses and other security threats”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    vsserv.exe (main module)
    Total CPU:0.01007666%
    0.272967%
    Kernel CPU:0.00609994%
    0.107585%
    User CPU:0.00397672%
    0.165382%
    CPU cycles:2,534,220/sec
    5,741,424/sec
    Context switches:374/sec
    79/sec
    Memory:1.56 MB
    1.16 MB
    ADVAPI32.dll
    Total CPU:0.00449214%
    Kernel CPU:0.00154530%
    User CPU:0.00294684%
    CPU cycles:89,923/sec
    Memory:792 KB
    bdfltdp.dll (BitDefender 2010 by BitDefender)
    Total CPU:0.00216285%
    Kernel CPU:0.00182303%
    User CPU:0.00033982%
    CPU cycles:44,650/sec
    Memory:56 KB
    framework.dll (Plugin Framework)
    Total CPU:0.00081272%
    Kernel CPU:0.00064951%
    User CPU:0.00016322%
    CPU cycles:38,618/sec
    Memory:104 KB
    accessal.dll (BitDefender 2010 by BitDefender)
    Total CPU:0.00050377%
    Kernel CPU:0.00043180%
    User CPU:0.00007197%
    CPU cycles:8,263/sec
    Memory:64 KB
    smartscn.dll (smartscn Dynamic Link Library)
    Total CPU:0.00046775%
    Kernel CPU:0.00035981%
    User CPU:0.00010794%
    CPU cycles:61,411/sec
    Context switches:1/sec
    Memory:268 KB
    npcomm.dll (BitDefender 13 by BitDefender LLC)
    Total CPU:0.00007187%
    Kernel CPU:0.00005391%
    User CPU:0.00001797%
    CPU cycles:29,324/sec
    Memory:56 KB
    ole32.dll
    Total CPU:0.00003598%
    Kernel CPU:0.00003598%
    User CPU:0.00000000%
    CPU cycles:1,437/sec
    Memory:1.27 MB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows Vista Home Premium 100.00%

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Acer 100.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE