Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.0.1 36.00%
1.0.0.1 12.00%
1.0.0.1 24.00%
1.0.0.1 20.00%
1.0.0.1 4.00%
1.0.0.1 4.00%
(Note, Wondershare Software Co. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerW, RegEnumValueW, ChangeServiceConfigW, ChangeServiceConfig2W, RegEnumKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegQueryInfoKeyW, ControlService, DeleteService, CreateServiceW, RegSetValueExW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegDeleteValueW, RegQueryValueExW, RegCloseKey, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, StartServiceCtrlDispatcherW
kernel32.dll
CreateThread, CreateEventW, MultiByteToWideChar, LoadLibraryExW, WritePrivateProfileStringW, GetTickCount, GetLocalTime, InterlockedDecrement, SetEvent, MoveFileExW, FileTimeToSystemTime, FileTimeToLocalFileTime, GetProcessTimes, GetCurrentThreadId, EnterCriticalSection, LeaveCriticalSection, InterlockedIncrement, CompareStringW, SetStdHandle, WriteConsoleW, SetFilePointer, Sleep, OpenProcess, WaitForSingleObject, GetModuleFileNameW, lstrcmpiW, CreateDirectoryW, CreateFileW, CloseHandle, GetModuleHandleW, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetLastError, RaiseException, lstrlenW, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, LoadLibraryW, GetProcAddress, FreeLibrary, GetCommandLineW, GetCurrentProcess, SetEnvironmentVariableA, GetStringTypeW, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, WideCharToMultiByte, HeapCreate, GetStdHandle, WriteFile, ExitProcess, IsProcessorFeaturePresent, TerminateProcess, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, LCMapStringW, SetLastError, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, EncodePointer, DecodePointer, RtlUnwind, ExitThread, ResumeThread, HeapSetInformation, GetStartupInfoW, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage
ole32.dll
CoTaskMemAlloc, CoTaskMemRealloc, CoRegisterClassObject, CoInitializeSecurity, CoTaskMemFree, CoInitialize, CoUninitialize, StringFromGUID2, CoCreateInstance, CoAddRefServerProcess, CoReleaseServerProcess, CoRevokeClassObject
psapi.dll
GetModuleFileNameExW, EnumProcesses
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
PathAddBackslashW
user32.dll
PostThreadMessageW, GetMessageW, DispatchMessageW, CharNextW, TranslateMessage, CharUpperW, MessageBoxW, LoadStringW

caremon.exe

By Wondershare Software Co. (Signed)

Remove caremon.exe
Version:   1.0.0.1
MD5:   7f771059963775add679efed7b1910c9
SHA1:   6ab9e365af0c0943400a2f6cb8b408afec338dc8
SHA256:   97a0d60d4df97b21300f914454781f477b3825ca1e8aeea1171791836296dd92

About caremon.exe (from Wondershare Software Co.)

Most computers encounter the following common problems. When the computer is new, it runs fast at first,and then months later it is running very slow. It takes long time to startup, to load websites

Overview

caremon.exe runs as a service under the name CareMon with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Wondershare Software Co. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:caremon.exe
Typical file path:C:\Program Files\tuneup360\caremon.exe
File version:1.0.0.1
Size:143.35 KB (146,792 bytes)
Certificate
Issued to:Wondershare Software Co.
Authority (CA):VeriSign
Expiration date:Friday, September 20, 2013
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'CareMon'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00001380%
0.028634%
Kernel CPU:0.00001380%
0.013761%
Kernel CPU time:16 ms/min
100,923,805ms/min
CPU cycles:5,392/sec
17,470,203/sec
Memory
Private memory:1.48 MB
21.59 MB
Private (maximum):4.49 MB
Private (minimum):4.48 MB
Non-paged memory:1.48 MB
21.59 MB
Virtual memory:41.37 MB
140.96 MB
Virtual memory (peak):46.25 MB
169.69 MB
Working set:4.49 MB
18.61 MB
Working set (peak):4.52 MB
37.95 MB
Page faults:1,436/min
2,039/min
I/O
I/O read transfer:362 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:13 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:3 Bytes/sec
448.09 KB/min
I/O other operations:2/sec
1,671/min
Resource allocations
Threads:4
12
Handles:80
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\spotmau\powersuite golden edition\powersuite 2012\pccheck\caremon.exe"
Owner:SYSTEM
Windows Service
Service name:CareMon
Description:“TuneUp360 monitor”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
CareMon.exe (main module)
Total CPU:0.00005550%
0.272967%
Kernel CPU:0.00005550%
0.107585%
User CPU:0.00000000%
0.165382%
CPU cycles:809/sec
5,741,424/sec
Memory:156 KB
1.16 MB
sechost.dll
Total CPU:0.00005550%
Kernel CPU:0.00005550%
User CPU:0.00000000%
CPU cycles:1,195/sec
Memory:100 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 40.00%
Windows 7 Ultimate 24.00%
Microsoft Windows XP 20.00%
Windows 7 Ultimate N 8.00%
Windows 7 Professional 4.00%
Windows Vista Home Premium 4.00%

Distribution by countryDistribution by country

United States installs about 54.17% of caremon.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 66.67%
Acer 26.67%
Sahara 6.67%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE