Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

a8e29 15.00%
94d96 10.00%
00c00 20.00%
9abb2 35.00%
82f80 5.00%
3077e 5.00%
eb32a 5.00%
90af6 5.00%
(Note, Ashampoo GmbH & Co. KG publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorDacl, ReportEventW, RegisterEventSourceW, RegSetValueExW, RegQueryInfoKeyW, RegFlushKey, RegEnumValueW, RegEnumKeyExW, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, OpenProcessToken, LookupPrivilegeValueA, InitializeSecurityDescriptor, GetTokenInformation, FreeSid, DeregisterEventSource, AllocateAndInitializeSid, AdjustTokenPrivileges, StartServiceCtrlDispatcherW, SetServiceStatus, RegisterServiceCtrlHandlerW, OpenServiceW, OpenSCManagerW, DeleteService, CreateServiceW, CloseServiceHandle
comctl32.dll
InitializeFlatSB, FlatSB_SetScrollProp, FlatSB_SetScrollPos, FlatSB_SetScrollInfo, FlatSB_GetScrollPos, FlatSB_GetScrollInfo, _TrackMouseEvent, ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_Add, ImageList_SetImageCount, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
gdi32.dll
UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RoundRect, RestoreDC, Rectangle, RectVisible, RealizePalette, Polyline, Polygon, PolyBezierTo, PolyBezier, PlayEnhMetaFile, Pie, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsW, GetTextExtentPointW, GetTextExtentPoint32W, GetSystemPaletteEntries, GetStockObject, GetRgnBox, GetPixel, GetPaletteEntries, GetObjectW, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileDescriptionW, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, FrameRgn, ExtTextOutW, ExtFloodFill, ExcludeClipRect, EnumFontFamiliesExW, Ellipse, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreateRectRgn, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectW, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileW, Chord, BitBlt, Arc
kernel32.dll
lstrcmpiA, LoadLibraryA, LocalFree, LocalAlloc, GetACP, Sleep, VirtualFree, VirtualAlloc, GetSystemInfo, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenW, lstrcpynW, LoadLibraryExW, IsValidLocale, GetSystemDefaultUILanguage, GetStartupInfoA, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, GetUserDefaultUILanguage, GetLocaleInfoW, GetLastError, GetCommandLineW, FreeLibrary, FindFirstFileW, FindClose, ExitProcess, ExitThread, CreateThread, CompareStringW, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, CloseHandle, TlsSetValue, TlsGetValue, lstrcpyW, lstrcmpA, WaitForSingleObject, WaitForMultipleObjectsEx, WaitForMultipleObjects, VirtualQueryEx, UnmapViewOfFile, TerminateThread, TerminateProcess, SwitchToThread, SuspendThread, SizeofResource, SignalObjectAndWait, SetThreadPriority, SetThreadLocale, SetProcessWorkingSetSize, SetPriorityClass, SetLastError, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, ReleaseSemaphore, ReleaseMutex, ReadFile, OutputDebugStringW, OpenProcess, OpenMutexA, OpenFileMappingA, OpenFileMappingW, OpenEventA, OpenEventW, MulDiv, MapViewOfFile, LockResource, LoadResource, LoadLibraryExA, LoadLibraryW, IsBadReadPtr, GlobalUnlock, GlobalLock, GlobalFree, GlobalFindAtomW, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomW, GetWindowsDirectoryW, GetVersionExA, GetVersionExW, GetThreadPriority, GetThreadLocale, GetThreadContext, GetSystemDirectoryW, GetPriorityClass, GetModuleHandleA, GetModuleFileNameA, GetLocalTime, GetFullPathNameW, GetExitCodeThread, GetDiskFreeSpaceW, GetDateFormatW, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, GetComputerNameW, GetCPInfo, FreeResource, InterlockedExchangeAdd, InterlockedExchange, InterlockedCompareExchange, FormatMessageA, FormatMessageW, FindResourceW, EnumCalendarInfoW, DuplicateHandle, DeviceIoControl, CreateSemaphoreW, CreatePipe, CreateMutexA, CreateMutexW, CreateFileMappingA, CreateFileMappingW, CreateFileA, CreateFileW, CreateEventA, CreateEventW
msimg32.dll
AlphaBlend
ole32.dll
OleUninitialize, OleInitialize, CoTaskMemFree, CoTaskMemAlloc, ProgIDFromCLSID, StringFromCLSID, CoCreateInstance, CoUninitialize, CoInitialize, IsEqualGUID
oleaut32.dll
SysFreeString, SysReAllocStringLen, SysAllocStringLen, GetErrorInfo, GetActiveObject, SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit
psapi.dll
GetProcessImageFileNameW
shell32.dll
SHGetSpecialFolderLocation, SHGetPathFromIDListW
user32.dll
LoadStringW, MessageBoxA, CharNextW, DllMain
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW

livetunerservice.exe

By Ashampoo GmbH & Co. KG (Signed)

Remove livetunerservice.exe
MD5:   00c00f62801f5980517a55105f396d38
SHA1:   5d26af85abcb31f16c9c5438231c15d81921fdc0
SHA256:   1fcb6ba6b27dc80b39934fbe087854047c316e8a7874adfafe34c5516565a1ab

Overview

livetunerservice.exe runs as a service under the name Ashampoo LiveTuner 2 Service (WO_LiveService2) with extensive SYSTEM privileges (full administrator access) as a shared service. The file is digitally signed by Ashampoo GmbH & Co. KG which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:livetunerservice.exe
Typical file path:C:\Program Files\ashampoo\ashampoo winoptimizer 8\livetunerservice.exe
Size:864.35 KB (885,096 bytes)
Certificate
Issued to:Ashampoo GmbH & Co. KG
Authority (CA):VeriSign
Effective date:Monday, March 7, 2011
Expiration date:Friday, February 28, 2014
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
  • 'WO_LiveService2' (Ashampoo LiveTuner 2 Service)
  • 'WO_LiveService' (Ashampoo LiveTuner Service)
  • WO_LiveService

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00314797%
0.028634%
Kernel CPU:0.00264202%
0.013761%
User CPU:0.00050595%
0.014873%
Kernel CPU time:39,078 ms/min
100,923,805ms/min
Context switches:6/sec
284/sec
Memory
Private memory:3.44 MB
21.59 MB
Private (maximum):1.9 MB
Private (minimum):1.86 MB
Non-paged memory:3.44 MB
21.59 MB
Virtual memory:60.59 MB
140.96 MB
Virtual memory (peak):63.96 MB
169.69 MB
Working set:2.2 MB
18.61 MB
Working set (peak):5.86 MB
37.95 MB
Page faults:2,366/min
2,039/min
Resource allocations
Threads:12
12
Handles:128
600

BehaviorsProcess properties

Integrety level:Undefined
Platform:64-bit
Command line:"C:\Program Files\ashampoo\ashampoo winoptimizer 10\livetunerservice.exe"
Owner:SYSTEM
Windows Service
Service name:WO_LiveService2
Display name:Ashampoo LiveTuner 2 Service
Type:Win32ShareProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 35.00%
Windows 8 Pro 35.00%
Windows 7 Home Premium 20.00%
Microsoft Windows XP 5.00%
Windows 8 5.00%

Distribution by countryDistribution by country

Germany installs about 25.00% of livetunerservice.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 38.46%
ASUS 23.08%
Hewlett-Packard 15.38%
GIGABYTE 7.69%
Alienware 7.69%
Acer 3.85%
American Megatrends 3.85%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE