Versions

2.3.39.217	6.02%
2.2.25.211	17.29%
2.1.18.208	11.28%
2.0.12.205	61.65%
2.0.10.205	2.26%
2.0.6.196	0.75%
2.0.3.160	0.75%

sdfssvc.exe has 7 known versions, the most recent one is 2.3.39.217. It is started as a Windows Service called 'SDScannerService' with the name 'SDScannerService' and described as “Offers malware scanning services to Spybot-S&D modules.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.92 MB. It is an authenticode code-signed executable issued to Safer Networking Ltd. by the certification authority VeriSign. Numerous variations of sdfssvc.exe have been installed with both Spybot - Search & Destroy and Spybot - Search & Destroy 2. During the process's lifecycle, the typical CPU resource utilization is about 0.0012% including both foreground and background operations, the average private memory consumption is about 35.36 MB. Addionally, typically read and write I/O disk operations is about 58.59 KB per minute for reads and 12.35 KB per minute for writes.

Spybot-S&D 2 Scanner Service for Spybot Search & Destroy (S&D) is a spyware and adware removal computer program that scans the computer hard disk and/or RAM for malicious software. In addition to spyware and adware detection and disinfection, Spybot-S&D can repair the registry, winsock LSPs, ActiveX objects, browser hijackers and BHOs, PUPS, computer cookies, trackerware, heavy duty, homepage hijackers, keyloggers, LSP, tracks, trojans, spybots, revision, and other kinds of malware.