Should I block it?

No, this file is 100% safe to run.

Additional versions

9.0.8.36	8.33%
8.5.4.28	25.00%
8.4.2.5	8.33%
8.1.2.62	8.33%
8.1.0.78	8.33%
3.3.2.27	8.33%
3.3.2.27	8.33%
3.2.0.275	25.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyW, RegQueryValueExW, ReportEventW, RegSetValueExW, RegCreateKeyW, ChangeServiceConfig2W, CreateServiceW, RegDeleteValueW, RegCloseKey, RegDeleteKeyW, RegOpenKeyExW, DeleteService, ControlService, StartServiceW, StartServiceCtrlDispatcherW, RegisterEventSourceW, SetServiceStatus, CloseServiceHandle, OpenServiceW, OpenSCManagerW, DeregisterEventSource, RegisterServiceCtrlHandlerExW, SetNamedSecurityInfoW, CryptGenRandom, CryptReleaseContext, RegisterEventSourceA, ReportEventA, RegCreateKeyExW, CryptAcquireContextW, AllocateAndInitializeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, FreeSid, SetEntriesInAclW, QueryServiceStatus

crypt32.dll

CertCloseStore, CertFindCertificateInStore, CertGetNameStringW, CryptQueryObject, CryptMsgClose, CryptMsgGetParam

gdi32.dll

CreateFontW, GetStockObject, DeleteObject

kernel32.dll

DllMain

setupapi.dll

CMP_WaitNoPendingInstallEvents, CM_Get_Device_IDW, CM_Locate_DevNodeW, CM_Get_Sibling, CM_Get_DevNode_Registry_PropertyW, CM_Get_Parent, CM_Get_DevNode_Status, CM_Get_Child, SetupDiGetClassDevsExW, SetupDiGetDeviceInterfaceDetailW, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiSetClassInstallParamsW, SetupDiEnumDeviceInfo, SetupDiGetDeviceInfoListDetailW, SetupDiCallClassInstaller, CM_Get_Device_ID_ExW, SetupDiOpenDeviceInfoW

shell32.dll

SHGetFolderPathW

shlwapi.dll

StrStrIW

user32.dll

PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, SetTimer, KillTimer, SetWindowLongW, GetClientRect, DefWindowProcW, CallNextHookEx, SystemParametersInfoW, SetParent, GetSystemMetrics, GetFocus, LoadImageW, SetWindowsHookExW, UnhookWindowsHookEx, TranslateAcceleratorW, RegisterClassExW, LoadIconW, LoadCursorW, GetClassInfoExW, wsprintfW, LoadStringW, LoadAcceleratorsW, IsChild, DestroyWindow, CloseDesktop, SwitchDesktop, CallWindowProcW, GetDlgItem, OpenDesktopW, GetParent, CloseWindowStation, DestroyIcon, SetProcessWindowStation, IsWindow, GetUserObjectInformationW, GetDesktopWindow, MessageBoxA, OpenWindowStationW, GetProcessWindowStation, GetWindowTextLengthW, SetFocus, SendMessageW, EndPaint, CreateWindowExW, BeginPaint, CharToOemBuffW, RegisterDeviceNotificationW, PostThreadMessageW, UnregisterDeviceNotification, MessageBoxW

version.dll

GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW

wtsapi32.dll

WTSRegisterSessionNotification

ATService.exe

AuthenTec Fingerprint Security System (AFSS) by AuthenTec (Signed)

Remove ATService.exe

Version:	8.5.4.28
MD5:	769354fd96284d705e8183b2b5c06aed
SHA1:	6556d5b58ba31b2fa5325fe4c85f98c1f98307c8
SHA256:	6cccf1f22640ef26228a3cd0990c388316c577226fd3a0d8d68a11baad31dce8

What is ATService.exe?

AuthenTec Fingerprint Security System (AFSS) is a Biometric logon application that enables the user to logon to their personal computer through the use of the biometric fingerprint reader in replacement of a password.

Overview

AtService.exe runs as a service under the name ATService (SYSTEM\CurrentControlSet\Services\ATService) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program AuthenTec Fingerprint Software published by AuthenTec, Inc.. The file is digitally signed by AuthenTec which was issued by the VeriSign certificate authority (CA).

Details

File name:	AtService.exe
Publisher:	AuthenTec, Inc.
Product name:	AuthenTec Fingerprint Security System (AFSS)
Description:	AFSS Service
Typical file path:	C:\Windows\System32\atservice.exe
File version:	8.5.4.28
Size:	1.73 MB (1,815,800 bytes)
Certificate
Issued to:	AuthenTec
Authority (CA):	VeriSign
Effective date:	Thursday, October 25, 2007
Expiration date:	Friday, December 5, 2008
Digital DNA
Entropy:	6.606106
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

AuthenTec Fingerprint Software

AuthenTec, Inc.

11% remove

The AuthenTec Fingerprint Application is a Biometric logon application that enables the user to logon to their personal computer through the use of the biometric fingerprint reader in replacement of a password.

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

ATService
'ATService' (AuthenTec Fingerprint Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00443030%	0.028634%
Kernel CPU:	0.00065522%	0.013761%
User CPU:	0.00377508%	0.014873%
Kernel CPU time:	95,402 ms/min	100,923,805ms/min
CPU cycles:	15,724,521/sec	17,470,203/sec
Memory
Private memory:	15.23 MB	21.59 MB
Private (maximum):	10.25 MB
Private (minimum):	3.98 MB
Non-paged memory:	15.23 MB	21.59 MB
Virtual memory:	68.06 MB	140.96 MB
Virtual memory (peak):	68.57 MB	169.69 MB
Working set:	8.79 MB	18.61 MB
Working set (peak):	10.69 MB	37.95 MB
Page faults:	15,006/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	21.55 KB/sec	448.09 KB/min
I/O other operations:	644/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	174	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\fingerprint sensor\atservice.exe"
Owner:	SYSTEM
Windows Service
Service name:	SYSTEM\CurrentControlSet\Services\ATService
Display name:	ATService
Description:	“Provides applications with access to AuthenTec fingerprint sensors.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads