alsvc.exe
SKL Client by Deep Software Inc. (Signed)
Overview
There are 2 versions of alsvc.exe in the wild, the latest version being 6.1.2.1474. It is started as a Windows Service called 'Salsvc'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 895.67 KB. The file is a digitally signed and issued to Deep Software Inc. by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0031% including both foreground and background operations, the average private memory consumption is about 32.05 MB. Addionally, typically read and write I/O disk operations is about 140.21 KB per minute for reads and 402.04 KB per minute for writes.
What is alsvc.exe?
SKL Client (alsvc.exe) is part of the SoftActivity Keylogger. A key logging application that is designed to stay hidden on a system and capture key stroke activities and record them in real-time.
About alsvc.exe (from Deep Software Inc.)
“With Activity Monitor, SoftActivity TS Monitor and SoftActivity Keylogger you can have your hand always on the pulse of what is going on in your LAN. These unique keyloggers allow remote computer moni”
 Details
|
| File name: | alsvc.exe |
| Product name: | SKL Client |
| Typical file path: | C:\windows\syspkgwk\alsvc.exe |
| Certificate |
| Issued to: | Deep Software Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, February 12, 2013 |
| Windows Service |
| Display name: | Salsvc |
Behaviors
(Note, the behaviors below are for all versions of alsvc.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of alsvc.exe
