comcastantispyservice.exe
By Visicom Media Inc. (Signed)
| Version: | 1.0.0.51 |
| MD5: | f9dac844b1d370da4c984d4c22f5e696 |
| SHA1: | ff3f15068272014d73ccf8004289c0aa0a0bc653 |
| SHA256: | 753b08e4d4cc09c91c16394f6a420e6da033d41fde510a41f900c1ced0e6b946 |
What is comcastantispyservice.exe?
Comcast Toolbar is a Visicom toolbar installed in your Web browser that collects and stores information about your web browsing habits and sends this information to Visicom so they can suggest services or provide ads via the toolbar. Comcast has a built in site scanner to look for web sites that could present security risks.
Overview
comcastantispyservice.exe runs as a service under the name Comcast AntiSpyware (AntiSpywareService) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Visicom Media Inc. which was issued by the Thawte Consulting (Pty) Ltd. certificate authority (CA).
Details
| File name: | comcastantispyservice.exe |
| Typical file path: | C:\Program Files\comcasttb\comcastspywarescan\comcastantispyservice.exe |
| File version: | 1.0.0.51 |
| Product version: | 1.0.0.0 |
| Size: | 601.96 KB (616,408 bytes) |
| Certificate |
| Issued to: | Visicom Media Inc. |
| Authority (CA): | Thawte Consulting (Pty) Ltd. |
| Effective date: | Tuesday, May 27, 2008 |
| Expiration date: | Tuesday, June 22, 2010 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'AntiSpywareService' (Comcast AntiSpyware)
- AntiSpywareService
Network connections
[TCP] a96-17-148-35.deploy.akamaitechnologies.com (96.17.148.35:80)
[TCP] a184-51-159-174.deploy.akamaitechnologies.com (184.51.159.174:80)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00045556% | |
| Kernel CPU: | 0.00017811% | |
| User CPU: | 0.00027745% | |
| Kernel CPU time: | 445 ms/min | |
| CPU cycles: | 2,023/sec | |
| Memory |
| Private memory: | 17.46 MB | |
| Private (maximum): | 20.53 MB | |
| Private (minimum): | 1.58 MB | |
| Non-paged memory: | 17.46 MB | |
| Virtual memory: | 70.2 MB | |
| Virtual memory (peak): | 86.39 MB | |
| Working set: | 1.95 MB | |
| Working set (peak): | 30.61 MB | |
| Page faults: | 15,482/min | |
| I/O |
| I/O read transfer: | 3.26 KB/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 770 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 84 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 215 | |
| GUI GDI count: | 24 | |
| GUI USER count: | 15 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\comcasttb\comcastspywarescan\comcastantispyservice.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | AntiSpywareService |
| Display name: | Comcast AntiSpyware |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ComcastAntiSpyService.exe (main module) |
| Total CPU: | 0.00003250% | |
| Kernel CPU: | 0.00002813% | |
| User CPU: | 0.00000437% | |
| CPU cycles: | 122/sec | |
| Memory: | 636 KB | |
| ntdll.dll |
| Total CPU: | 0.00000291% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00000291% | |
| CPU cycles: | 1/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
42.86% |
|
| Windows Vista Home Premium |
21.43% |
|
| Microsoft Windows XP |
21.43% |
|
| Windows 8.1 |
7.14% |
|
| Windows Vista Business |
7.14% |
|
Distribution by country
United States installs about 100.00% of comcastantispyservice.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
57.14% |
|
| Toshiba |
14.29% |
|
| Hewlett-Packard |
14.29% |
|
| ASUS |
14.29% |
|
