Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

9.0.29480.0 1.63%
9.0.29327.0 1.36%
9.0.28223.0 2.71%
9.0.26297.0 0.54%
9.0.24951.0 0.81%
8.0.26038.0 1.36%
8.0.22298.0 8.67%
8.0.20935.0 2.17%
8.0.20202.0 1.63%
8.0.19617.0 4.88%
8.0.19045.0 3.79%
8.0.18930.0 1.90%
8.0.18051.0 4.88%
8.0.17396.0 8.40%
8.0.17292.0 5.69%
8.0.16642.0 15.99%
8.0.16447.0 4.34%
8.0.15959.0 0.27%
7.0.17271.0 1.63%
7.0.15723.0 6.50%
7.0.14563.0 5.42%
7.0.14484.0 1.08%
7.0.13989.0 4.88%
7.0.12979.0 4.34%
7.0.12799.0 0.54%
View more

Relationships

Parent process
Child processes
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
DeleteService, RegDeleteKeyW, RegDeleteValueW, RegEnumKeyExW, RegQueryInfoKeyW, RevertToSelf, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetNamedSecurityInfoW, DeleteAce, GetAce, GetNamedSecurityInfoW, SetEntriesInAclW, CloseServiceHandle, StartServiceW, QueryServiceStatus, ControlService, CreateProcessAsUserW, FreeSid, EqualSid, LookupAccountSidW, RegCloseKey, RegCreateKeyExW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetServiceStatus, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, RegOpenKeyExW, RegSetValueExW, RegQueryValueExW, CryptGenRandom, CryptReleaseContext, CryptAcquireContextA, LsaLookupNames, LsaFreeMemory, LsaClose, ConvertSidToStringSidW, LsaOpenPolicy, GetUserNameW, RegFlushKey, ImpersonateLoggedOnUser, AllocateAndInitializeSid, GetSecurityInfo, SetSecurityInfo, RegCreateKeyW, InitiateSystemShutdownW, LogonUserW, RegOpenCurrentUser, OpenThreadToken, RegSetValueExA, LookupAccountNameW, ConvertStringSecurityDescriptorToSecurityDescriptorW
crypt32.dll
CertGetNameStringA, CertGetNameStringW, CryptVerifyMessageSignature, CertFreeCertificateContext, CryptHashCertificate
imagehlp.dll
ImageGetCertificateHeader, ImageGetCertificateData, ImageEnumerateCertificates
iphlpapi.dll
DeleteIPAddress, GetAdapterIndex, GetAdaptersInfo, SendARP, IpRenewAddress, FlushIpNetTable, GetBestInterface, GetIfEntry, GetIpAddrTable
kernel32.dll
DllMain, GetDriveTypeA, FindFirstFileA, LoadLibraryA, GetSystemDirectoryA, GetWindowsDirectoryA, GetModuleFileNameA, GetModuleHandleA, CompareStringA, FreeLibrary, InterlockedExchange, InterlockedIncrement, InterlockedExchangeAdd, InterlockedDecrement, SetLastError, SetConsoleCtrlHandler, Sleep, TlsFree, TlsAlloc, ExpandEnvironmentStringsA, GetThreadTimes, lstrlenA, SetEnvironmentVariableA, SetStdHandle, GetConsoleOutputCP, WriteConsoleA, CreateFileA, IsValidLocale, EnumSystemLocalesA, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, GetOEMCP, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineW, GetCommandLineA, GetEnvironmentStrings, FreeEnvironmentStringsA, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, HeapSize, GetStdHandle, ExitProcess, GetCurrentThreadId, GetLastError, GetFullPathNameA, GetCurrentDirectoryA, CreateSemaphoreA, GetStringTypeA, LCMapStringA, RtlUnwind, HeapReAlloc, GetDateFormatA, GetTimeFormatA, ExitThread, IsDebuggerPresent, UnhandledExceptionFilter, CreateWaitableTimerA, AreFileApisANSI, SetEndOfFile, FormatMessageA, GetThreadLocale, GetACP, GetVersionExA, FileTimeToLocalFileTime, SetUnhandledExceptionFilter, FileTimeToSystemTime, DeleteCriticalSection, CloseHandle, WaitForMultipleObjects, InitializeCriticalSectionAndSpinCount, GetCurrentProcessId, GetCurrentProcess, SetFilePointer, GetSystemTimeAsFileTime, WriteFile, GetTickCount, ReleaseMutex, SetWaitableTimer, GetFileSize, PostQueuedCompletionStatus, LeaveCriticalSection, WaitForSingleObject, SleepEx, SetEvent, EnterCriticalSection, CreateEventA, QueueUserAPC, InitializeCriticalSection, GetQueuedCompletionStatus, TerminateThread, LocalFree, OpenProcess, QueryPerformanceFrequency, FindClose, GetSystemDefaultLCID, GetUserDefaultLCID, GetLocaleInfoA, GetLocalTime, GetCurrentThread, QueryPerformanceCounter, DuplicateHandle, ReleaseSemaphore, InterlockedCompareExchange, TlsSetValue, TlsGetValue, OpenEventA, ResetEvent, HeapAlloc, GetProcessHeap, HeapFree, CreateIoCompletionPort, ReadFile, TerminateProcess, SizeofResource, LoadResource, RaiseException, CreateThread, ResumeThread, DeviceIoControl, SetThreadPriority, GetOverlappedResult, SystemTimeToFileTime, GetExitCodeThread, SetThreadAffinityMask, GetExitCodeProcess
mpr.dll
WNetCloseEnum, WNetEnumResourceW, WNetOpenEnumW
mswsock.dll
AcceptEx, GetAcceptExSockaddrs
netapi32.dll
NetApiBufferFree, NetWkstaGetInfo
ole32.dll
CoInitializeSecurity, CoTaskMemAlloc, StringFromGUID2, OleInitialize, OleUninitialize, CoTaskMemRealloc, CoCreateInstance, CoCreateGuid, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, ProgIDFromCLSID, CoUninitialize, CoInitializeEx, CoRevertToSelf, CoImpersonateClient
secur32.dll
GetUserNameExW
sensapi.dll
IsNetworkAlive
setupapi.dll
SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, SetupDiGetDeviceRegistryPropertyW, SetupDiOpenDevRegKey
shell32.dll
SHGetPathFromIDListW, SHGetSpecialFolderLocation, ShellExecuteExW, SHGetMalloc, ShellExecuteW
user32.dll
MessageBoxW, GetMessageW, TranslateMessage, DispatchMessageW, MessageBoxA, PostThreadMessageW, CharNextW, DestroyWindow, SendMessageW, FindWindowW, PeekMessageW, MsgWaitForMultipleObjectsEx, ExitWindowsEx, UnregisterClassA, LoadStringA
userenv.dll
UnloadUserProfile, CreateEnvironmentBlock, LoadUserProfileW, DestroyEnvironmentBlock
wininet.dll
HttpSendRequestA, InternetErrorDlg, InternetQueryOptionW, InternetGoOnlineA, HttpOpenRequestA, HttpAddRequestHeadersA, HttpSendRequestExA, InternetWriteFile, HttpEndRequestA, InternetQueryDataAvailable, InternetReadFile, HttpQueryInfoW, InternetOpenW, InternetSetOptionW, InternetCloseHandle, InternetConnectW
winspool.drv
DeletePrinter, SetPrinterW, OpenPrinterW, GetPrinterW, ClosePrinter, AddPrinterW, SetJobW, EnumPrintersW
wintrust.dll
WinVerifyTrust, CryptCATCatalogInfoFromContext, CryptCATAdminEnumCatalogFromHash, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext, CryptCATAdminReleaseCatalogContext, CryptCATAdminReleaseContext, WTHelperProvDataFromStateData, WTHelperGetProvSignerFromChain
ws2_32.dll
WSAResetEvent, WSADuplicateSocketW, WSACreateEvent, WSACloseEvent, WSAWaitForMultipleEvents, WSAEventSelect, WSASetEvent, WSARecv, WSARecvFrom, WSASocketW, WSASend, WSAAddressToStringA
wtsapi32.dll
WTSQuerySessionInformationW, WTSCloseServer, WTSEnumerateProcessesW, WTSFreeMemory, WTSEnumerateSessionsW

teamviewer_service.exe

TeamViewer by TeamViewer (Signed)

Remove teamviewer_service.exe
Version:   9.0.29480.0
MD5:   9a019abd9ceaa6ea528e5438402907f7
SHA1:   7f483f15eb7b441d30da14ce4aa177d5a776263c

What is teamviewer_service.exe?

TeamViewer Remote Control Application for TeamViewer is a proprietary computer software package for remote control, desktop sharing, online meetings, web conferencing and file transfer between computers. While the main focus of the application is remote control of computers, collaboration and presentation features are included. TeamViewer may be installed with an installation procedure, although the 'Quick Support' version will run without installation.

About teamviewer_service.exe (from TeamViewer)

Control computers remotely via the internet, as if you were sitting right in front of them. Whether you are providing spontaneous support, administering servers or working from your home office, TeamV

DetailsDetails

File name:teamviewer_service.exe
Publisher:TeamViewer GmbH
Product name:TeamViewer
Description:TeamViewer Remote Control Application
Typical file path:C:\Program Files\teamviewer\version6\teamviewer_service.exe
Original name:TeamViewer.exe
File version:9.0.29480.0
Product version:9.0
Size:4.8 MB (5,037,888 bytes)
Build date:6/16/2014 5:10 AM
Certificate
Issued to:TeamViewer
Authority (CA):VeriSign
Effective date:Sunday, August 7, 2011
Expiration date:Thursday, August 7, 2014
Digital DNA
Entropy:6.404721
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
TeamViewer GmbH
6% remove
Remote control any computer or Mac over the internet within seconds or use TeamViewer for online meetings. Open multiple remote sessions in tabs, just like in your browser. For an optimal overview, you can also open all the monitors belonging to a remote computer in separate tabs. You won't miss a thing because opened tabs will always flash when new activity occurs on the remote computer, e.g. a new chat message from a customer.

BehaviorsBehaviors

Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe'
  • Firewall exception for 'C:\Programas\TeamViewer\Version8\TeamViewer_Service.exe'
  • Firewall exception for 'C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe'
  • Firewall exception for 'C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe'
  • Firewall exception for 'C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe'
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • TeamViewer6
  • 'TeamViewer9' (TeamViewer 9)
  • 'TeamViewer6' (TeamViewer 6)
  • 'TeamViewer8' (TeamViewer 8)
  • 'TeamViewer7' (TeamViewer 7)
Network connections
Access through an approved Windows firewall exception
  • [TCP] server3322.teamviewer.com (46.165.192.223:5938)
  • [TCP] server3323.teamviewer.com (46.165.192.222:5938)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00017573%
    0.028634%
    Kernel CPU:0.00012341%
    0.013761%
    User CPU:0.00005233%
    0.014873%
    Kernel CPU time:18,924 ms/min
    100,923,805ms/min
    CPU cycles:3,493,463/sec
    17,470,203/sec
    Memory
    Private memory:7.07 MB
    21.59 MB
    Private (maximum):14.7 MB
    Private (minimum):12.06 MB
    Non-paged memory:7.07 MB
    21.59 MB
    Virtual memory:106.4 MB
    140.96 MB
    Virtual memory (peak):114.65 MB
    169.69 MB
    Working set:13.34 MB
    18.61 MB
    Working set (peak):24.69 MB
    37.95 MB
    Page faults:15,730/min
    2,039/min
    I/O
    I/O read transfer:2 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:439 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:32.13 KB/sec
    448.09 KB/min
    I/O other operations:163/sec
    1,671/min
    Resource allocations
    Threads:18
    12
    Handles:436
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:"C:\Program Files\teamviewer\version9\teamviewer_service.exe"
    Owner:User
    Windows Service
    Service name:TeamViewer9
    Display name:TeamViewer6
    Description:“TeamViewer Remote Software”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.01999190%
    0.272967%
    Kernel CPU:0.01999190%
    0.107585%
    User CPU:0.00000000%
    0.165382%
    CPU cycles:216,106/sec
    5,741,424/sec
    Memory:1.66 MB
    1.16 MB
    TeamViewer_Service.exe (main module)
    Total CPU:0.01112572%
    Kernel CPU:0.00330393%
    User CPU:0.00782179%
    CPU cycles:656,978/sec
    Context switches:4/sec
    Memory:4.84 MB
    wow64.dll
    Total CPU:0.00077742%
    Kernel CPU:0.00020824%
    User CPU:0.00056919%
    CPU cycles:19,666/sec
    Memory:252 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 32.50%
    Windows 7 Home Premium 27.00%
    Microsoft Windows XP 11.50%
    Windows 7 Professional 11.00%
    Windows 8 Pro 5.00%
    Windows Vista Home Premium 2.50%
    Windows 8.1 Pro 2.00%
    Windows 8 2.00%
    Windows 8.1 1.50%
    Windows 7 Home Basic 1.50%
    Windows Vista Home Basic 1.00%
    Windows 8 Single Language 1.00%
    Windows 8 Enterprise 1.00%
    Windows 8.1 Pro with Media Center 0.50%

    Distribution by countryDistribution by country

    United States installs about 24.00% of TeamViewer.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 20.69%
    Hewlett-Packard 15.33%
    Acer 12.26%
    ASUS 10.73%
    Toshiba 9.96%
    Sony 9.20%
    Intel 6.90%
    Lenovo 5.36%
    GIGABYTE 4.21%
    Apple 1.53%
    American Megatrends 1.53%
    Sahara 1.15%
    Samsung 0.77%
    Alienware 0.38%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE