Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.0.2.1 2.17%
2, 0, 2, 0 8.70%
2, 0, 2, 0 47.83%
2, 0, 2, 0 2.17%
2, 0, 2, 0 21.74%
2, 0, 1, 3 6.52%
2, 0, 1, 3 8.70%
1, 1, 8, 4 2.17%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
CreateServiceA, GetUserNameA, StartServiceCtrlDispatcherA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegCreateKeyExA, RegSetValueExA, RegFlushKey, RegEnumKeyExA, RegQueryValueExA, RegOpenKeyExA, RegCloseKey, RegisterServiceCtrlHandlerA, OpenServiceA, ControlService, QueryServiceStatus, DeleteService, OpenSCManagerA, CloseServiceHandle, SetServiceStatus, RegisterEventSourceA, ReportEventA, DeregisterEventSource
gdi32.dll
StretchBlt, CreateCompatibleDC, SelectObject, DeleteDC
imm32.dll
ImmDisableIME, ImmIsIME
kernel32.dll
WaitForMultipleObjects, CreateThread, ConnectNamedPipe, CreateNamedPipeA, TerminateThread, WinExec, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, MultiByteToWideChar, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, HeapReAlloc, VirtualAlloc, HeapAlloc, GetLocaleInfoA, WaitForSingleObject, RtlUnwind, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, GetConsoleMode, GetConsoleCP, SetFilePointer, DisconnectNamedPipe, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, HeapFree, VirtualFree, HeapCreate, GetFileType, SetHandleCount, GetEnvironmentStringsW, WideCharToMultiByte, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, InitializeCriticalSectionAndSpinCount, LoadLibraryA, SetEvent, CreateMutexA, GetSystemPowerStatus, CreateEventA, ReadFile, WaitNamedPipeA, lstrcpynA, GetSystemDirectoryA, GetVersionExA, DeviceIoControl, CloseHandle, CreateFileA, SetConsoleCtrlHandler, Sleep, GetModuleFileNameA, FormatMessageA, lstrlenA, LocalFree, GetLastError, ResetEvent, GetSystemTimeAsFileTime, WriteFile, FlushFileBuffers, HeapSize, DeleteCriticalSection, GetStdHandle, GetModuleHandleW, GetProcAddress, ExitProcess, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EnterCriticalSection, LeaveCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement
shell32.dll
Shell_NotifyIconA, ShellExecuteA
shlwapi.dll
SHGetValueA
user32.dll
GetMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, LoadCursorA, RegisterClassExA, BeginPaint, EndPaint, PostQuitMessage, RegisterWindowMessageA, DestroyWindow, LoadMenuA, GetSubMenu, GetCursorPos, DeleteMenu, SetMenuItemInfoA, DrawMenuBar, TrackPopupMenu, DestroyMenu, GetDoubleClickTime, DefWindowProcA, LoadAcceleratorsA, DialogBoxParamA, LoadIconA, LoadBitmapA, GetDC, GetClientRect, ReleaseDC, EndDialog, SetTimer, IsDlgButtonChecked, KillTimer, PostMessageA, wsprintfA, GetWindowRect, GetSystemMetrics, SetWindowPos, LoadStringA, LoadImageA, DestroyIcon, CreateWindowExA, ShowWindow, UpdateWindow, GetKeyboardLayout, FindWindowA, SendMessageA, SetForegroundWindow
wtsapi32.dll
WTSUnRegisterSessionNotification, WTSRegisterSessionNotification

ThpSrv.exe

TOSHIBA HDD Protection by TOSHIBA CORPORATION (Signed)

Remove ThpSrv.exe
Version:   2, 0, 2, 0
MD5:   0b4734ae9ec70b843df02e7b1c056377
SHA1:   a3ff083dea2e64ce9d00db31c4ea0e8c7ba09d37
SHA256:   2218b973c377f869f88bc925df77d0dc922f62cc10adf60cab1cd0f64d6a8e94

Overview

ThpSrv.exe runs as a service under the name TOSHIBA HDD Protection (Thpsrv) within the local user context. It is installed with a couple of know programs including TOSHIBA HDD Protection published by TOSHIBA Corporation, TOSHIBA HDD Protection from TOSHIBA Corporation and TOSHIBA HDD Protection by TOSHIBA Corporation. The file is digitally signed by TOSHIBA CORPORATION which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:ThpSrv.exe
Publisher:TOSHIBA Corporation
Product name:TOSHIBA HDD Protection
Description:TOSHIBA HDD Protection Service
Typical file path:C:\Windows\System32\thpsrv.exe
File version:2, 0, 2, 0
Product version:2.0.2.0
Size:545.5 KB (558,592 bytes)
Certificate
Issued to:TOSHIBA CORPORATION
Authority (CA):VeriSign
Expiration date:Thursday, August 5, 2010
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
TOSHIBA Corporation
4% remove
Using the acceleration sensor built in the PC, HDD Protection detects vibration, shocks and similar signs in the PC, and automatically moves the Hard Disk Drive (HDD) head to a safe position to reduce the risk of damage that could be caused by head-to-disk contact.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Thpsrv' (TOSHIBA HDD Protection)
  • Thpsrv

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00021306%
0.028634%
Kernel CPU:0.00019272%
0.013761%
User CPU:0.00002033%
0.014873%
Kernel CPU time:261 ms/min
100,923,805ms/min
CPU cycles:133,345/sec
17,470,203/sec
Memory
Private memory:2.15 MB
21.59 MB
Private (maximum):12.35 MB
Private (minimum):11.03 MB
Non-paged memory:2.15 MB
21.59 MB
Virtual memory:64.15 MB
140.96 MB
Virtual memory (peak):66.66 MB
169.69 MB
Working set:11.42 MB
18.61 MB
Working set (peak):12.37 MB
37.95 MB
Page faults:3,433/min
2,039/min
I/O
I/O read transfer:141 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:100 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:1.1 KB/sec
448.09 KB/min
I/O other operations:5/sec
1,671/min
Resource allocations
Threads:4
12
Handles:149
600
GUI GDI count:28
103
GUI GDI peak:32
142
GUI USER count:9
49
GUI USER peak:12
71

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command lines:
  • "C:\Windows\System32\thpsrv.exe" /logon
  • C:\Windows\System32\thpsrv.exe
Owner:User
Windows Service
Service name:Thpsrv
Display name:TOSHIBA HDD Protection
Description:“TOSHIBA HDD Protection Service”
Type:Win32OwnProcess
Parent processes:

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 71.43%
Windows Vista Home Premium 11.43%
Microsoft Windows XP 8.57%
Windows 8 2.86%
Windows 7 Professional 2.86%
Windows 8 Pro 2.86%

Distribution by countryDistribution by country

United States installs about 87.50% of TOSHIBA HDD Protection.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 93.88%
Hewlett-Packard 6.12%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE