Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

15.0.29.0 0.52%
15.0.17.0 0.52%
4.2.6.100 4.19%
4.2.3.100 14.66%
4.2.3.100 19.90%
4.0.1.102 5.76%
3, 5, 4, 0 1.57%
3, 5, 3, 0 6.81%
3, 5, 2, 0 0.52%
3, 5, 1, 0 6.28%
3, 2, 3, 0 1.57%
3, 1, 0, 0 0.52%
3, 1, 0, 0 5.24%
3, 0, 3, 0 4.71%
2, 10, 6, 4 2.09%
2, 10, 6, 1 1.05%
2, 10, 5, 1 1.05%
2, 10, 3, 2 7.85%
2, 9, 1, 0 4.71%
2, 7, 3, 2 1.05%
2, 7, 3, 2 1.05%
2, 7, 3, 1 3.66%
2, 7, 3, 0 0.52%
2, 7, 2, 0 3.14%
2, 6, 6, 0 1.05%

Relationships

Parent process
Child processes
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, FreeSid, LsaRemoveAccountRights, LsaAddAccountRights, LsaNtStatusToWinError, LsaOpenPolicy, RegCreateKeyW, GetFileSecurityW, GetSecurityDescriptorDacl, GetAclInformation, InitializeAcl, GetAce, AddAce, SetEntriesInAclW, SetSecurityDescriptorDacl, SetFileSecurityW, LookupAccountNameW, LogonUserW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, ControlService, DeleteService, CreateServiceW, ChangeServiceConfig2W, OpenThreadToken, OpenProcessToken, RegEnumKeyExW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, QueryServiceConfigW, QueryServiceStatus, SetServiceStatus, RegisterEventSourceW, ReportEventW, CloseEncryptedFileRaw, WriteEncryptedFileRaw, ReadEncryptedFileRaw, OpenEncryptedFileRawW, EncryptFileW, GetUserNameW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, LsaClose, RegSetValueExW, RegQueryInfoKeyW, CopySid, GetLengthSid, IsValidSid, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, DeregisterEventSource, RegOpenKeyW, RegEnumValueW, LookupPrivilegeValueW, AdjustTokenPrivileges, LsaQueryInformationPolicy, LsaFreeMemory
dbghelp.dll
GetTimestampForLoadedLibrary
kernel32.dll
GetProcessHeap, HeapAlloc, HeapFree, GetCommandLineW, GetModuleHandleW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, GetCurrentThreadId, GetCurrentThread, GetCurrentProcess, CloseHandle, LocalAlloc, LocalFree, lstrcmpiW, GetLastError, RaiseException, lstrlenW, GetModuleFileNameW, FreeLibrary, LoadLibraryW, GetProcAddress, FindFirstChangeNotificationW, WaitForMultipleObjects, FindCloseChangeNotification, FindNextChangeNotification, WaitForSingleObject, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoW, InterlockedCompareExchange, Sleep, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, CreateSemaphoreW, ReleaseSemaphore, BackupSeek, BackupWrite, BackupRead, SetEndOfFile, DeviceIoControl, SetFilePointer, FindFirstFileW, FindClose, SetLastError, FindNextFileW, GetCompressedFileSizeW, GetLocalTime, SystemTimeToFileTime, FileTimeToSystemTime, LocalFileTimeToFileTime, FileTimeToLocalFileTime, GetVolumeInformationW, GetWindowsDirectoryW, GetSystemDirectoryW, GetShortPathNameW, GetTempFileNameW, DeleteFileW, GetTempPathW, GetLogicalDriveStringsW, CopyFileW, ExpandEnvironmentStringsW, GetVersionExW, MoveFileW, GetComputerNameW, GetFileAttributesW, CompareStringW, GetDriveTypeW, GetDiskFreeSpaceW, CreateThread, CreateEventW, SetEvent, ResetEvent, TerminateThread, ResumeThread, SuspendThread, SetThreadPriority, GetThreadPriority, ExitThread, FormatMessageW, IsBadStringPtrA, IsBadStringPtrW, IsBadReadPtr, IsBadWritePtr, WideCharToMultiByte, CreateFileW, ReadFile, WriteFile, CreateDirectoryW, RemoveDirectoryW, SetFileAttributesW, SetFileTime, GetFileSize, GetGeoInfoW, GetUserGeoID, GetModuleHandleExW
msvcp80.dll
DllMain
msvcr80.dll
DllMain
netapi32.dll
NetWkstaUserGetInfo, NetApiBufferFree, NetWkstaGetInfo
ole32.dll
CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, CoCreateInstance, CoTaskMemRealloc, CoUninitialize, CoInitializeSecurity, CoInitializeEx, CoInitialize, StringFromGUID2, CoTaskMemAlloc, StringFromCLSID, CoCreateGuid, CoUnmarshalInterface, CoMarshalInterface
shell32.dll
SHGetPathFromIDListW, SHGetFileInfoW, ShellExecuteW, SHGetMalloc, SHGetDesktopFolder, SHGetSpecialFolderLocation
shlwapi.dll
SHDeleteValueW, SHDeleteKeyW
user32.dll
GetMessageW, CharNextW, LoadStringW, PostThreadMessageW, DispatchMessageW, FindWindowW, UnregisterClassA
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winmm.dll
PlaySoundW

NBService.exe

Nero BackItUp by Nero AG (Signed)

Remove NBService.exe
Version:   3, 5, 1, 0
MD5:   40d7d0a208ee863bca8d89e299216f15
SHA1:   a9da7378f40480abf438caf181386ddf1c5ffa05
SHA256:   4686e416a80d883b7c6cbe21e8d8d6c814d16dc48495f8acfe7b4664560ca5e3

What is NBService.exe?

Nero BackItUp is a Windows backup software application that provides both local and network based file backups. With Nero BackItUp & Burn you can create backup copies on demand by manually selecting the files and folders you want to include in them or set the program to do it automatically without user intervention.

Overview

nbservice.exe runs as a service under the name NBService (Nero BackItUp Scheduler 3) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Nero 8 published by Nero AG, Nero Update from Nero AG and Nero Update by Nero AG. The file is digitally signed by Nero AG which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:nbservice.exe
Publisher:Nero AG
Product name:Nero BackItUp
Typical file path:C:\Program Files\common files\nero\nero backitup 4\nbservice.exe
File version:3, 5, 1, 0
Size:857.29 KB (877,864 bytes)
Certificate
Issued to:Nero AG
Authority (CA):VeriSign
Effective date:Sunday, May 10, 2009
Expiration date:Thursday, June 21, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Nero AG
7% remove
Nero Multimedia Suite is a popular software suite for Microsoft Windows by Nero AG. Nero includes Nero Burning ROM, Nero Express, Nero DiscSpeed, Nero Video, Nero Recode, Nero BackItUp, Nero Wave Editor and various other disk authoring, video authoring and data backup untiliies as well as audio editing tools. The suite's name "Nero" is followed by its major version number. The most commonly available versions of Nero are the OEM suites,...
Nero AG
22% remove
Nero Update Manager is a program designed to manage all installed Nero programs on the user's PC and check for and update any new versions of the software if available. This service will run in the background when Windows starts and periodically check for updates.
Nero AG
12% remove
Nero 8 Essentials is a basic version of the Nero's regular programs, such as its CD burning software, according to Nero. Usually, hardware manufacturers include Nero Essentials so users have the bare minimum necessary to use their hardware. Nero Essentials only comes bundled with a new computer and pre-installed.
Nero AG
11% remove
Nero 8 Ultra Edition, the newest version of the world's best-selling multimedia suite, brings the digital world to your PC. Now it's easy to organize and manage all your multimedia files, as well as create and edit new digital content. Nero's sleek design and user-friendly tools make completing projects fun and enjoyable.
Nero AG
4% remove
Nero Multimedia Suite is a popular software suite for Microsoft Windows by Nero AG. Nero includes Nero Burning ROM, Nero Express, Nero DiscSpeed, Nero Video, Nero Recode, Nero BackItUp, Nero Wave Editor and various other disk authoring, video authoring and data backup untiliies as well as audio editing tools. The suite's name "Nero" is followed by its major version number. The most commonly available versions of Nero are the OEM suites,...
Nero AG
23% remove
These are the drivers the Nero backup service utilizes. Nero Backup Drivers is listed separately in Program and Features in addition to Nero 10, 11, etc.
Nero AG
6% remove
Nero Multimedia Suite is a popular software suite for Microsoft Windows by Nero AG. Nero includes Nero Burning ROM, Nero Express, Nero DiscSpeed, Nero Video, Nero Recode, Nero BackItUp, Nero Wave Editor and various other disk authoring, video authoring and data backup untiliies as well as audio editing tools. The suite's name "Nero" is followed by its major version number. The most commonly available versions of Nero are the OEM suites,...
Nero AG
26% remove
SecurDisc is the comprehensive, state-of-the-art protection solution for CDs, DVDs and Blu-ray Discs, offering multiple levels of protection for data, music, photo and video files. Rest assured that sensitive data is safe with SecurDisc. Burn discs with SecurDisc technology on any optical disc recorder. Secure and enhanced disc protection for important content and confidential data. Protect data against disc deterioration. Receive alert...
Nero AG
19% remove
SyncUP powered by Nero is the easy way to keep the smartphones, tablets and computers in your network in sync. Sync your photos, music, videos, and documents across the devices on your home network, so you have the content you want2 on the device you want. Choose what you want to sync by device and let SyncUP powered by Nero do the rest. Sync your files on all your supported networked devices on the same WiFi network, or save to your st...
Nero AG
10% remove
Nero Multimedia Suite is a popular software suite for Microsoft Windows by Nero AG. Nero includes Nero Burning ROM, Nero Express, Nero DiscSpeed, Nero Video, Nero Recode, Nero BackItUp, Nero Wave Editor and various other disk authoring, video authoring and data backup untiliies as well as audio editing tools. The suite's name "Nero" is followed by its major version number. The most commonly available versions of Nero are the OEM suites,...
Nero AG
21% remove
Nero Kwik Media connects immediately and automatically to all your photos, your music and videos. All photos, videos and music. Organization, playback, sharing and synchronization. Nero Kwik Media is available in three versions with some free apps available for a trial period and some for free. One that includes all the apps with exception of the blue-ray, and the other with all apps including the blue-ray.
Nero AG
27% remove
Nero Multimedia Suite 10 is a bundle of three powerful products – Nero Vision Xtra™, Nero BackItUp & Burn™ and Nero Burning ROM™. Designed to provide digital enthusiasts with advanced video editing and authoring, disc burning and backup solutions, plus project enhancing tools, it’s the most complete multimedia package available. Create, edit, play back and organize all your video, photo and music files. Reliably burn and copy data, musi...
Nero AG
25% remove
Nero BackItUp is a system backup utility. The product is available separately to buy.
Nero AG
22% remove
Nero Express is a simplified edition of Nero Burning ROM targeted at entry level users, is available with the Nero software suite. Although Nero Express is not as powerful as the full-featured Nero Burning ROM, it features a streamlined user interface, and offers a range of features than those offered by Windows. Nero Express is also integrated into Nero software suite, typically into OEM editions of this software which lack Nero Burnin...
Nero AG
23% remove
Nero BurnRights lets users without administrative rights burn discs by allowing system administrators to set up user accounts with exclusive burn rights for Nero.
Nero AG
21% remove
Nero RescueAgent helps you to recover files from damaged or partially-unreadable media and to restore files that were accidentally deleted.
Nero AG
18% remove
Nero InfoTool provides information about the most important features of installed drives, inserted discs, installed software, and much more.
Nero AG
26% remove
Nero StartSmart is the central starting point for all your audio, video, backup, and recording tasks. Choose a task from several categories to launch the corresponding Nero application, and customize the Nero StartSmart to suit your needs. A new tab within Nero StartSmart, the Nero Knowledge Center provides access to online step-by-step tutorials and manuals, networking with My Nero community, share blogs and tips with other Nero users,...
Nero AG
4% remove
Nero BackItUp performs incremental backups so only files that have changed since your last backup are included. This translates to significantly less time required to perform backups and it uses the least disc space necessary. Get selective with your backups. Nero BackItUp is seamlessly integrated with Nero Kwik Media so you can easily backup just your photos, videos and music.
Nero AG
24% remove

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Nero BackItUp Scheduler 3'
  • 'NBService'
  • 'Nero BackItUp Scheduler 4.0'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00062719%
0.028634%
Kernel CPU:0.00031597%
0.013761%
User CPU:0.00031122%
0.014873%
Kernel CPU time:104,024 ms/min
100,923,805ms/min
CPU cycles:2,829/sec
17,470,203/sec
Memory
Private memory:2.73 MB
21.59 MB
Private (maximum):5.58 MB
Private (minimum):4.97 MB
Non-paged memory:2.73 MB
21.59 MB
Virtual memory:47.42 MB
140.96 MB
Virtual memory (peak):50.75 MB
169.69 MB
Working set:5.07 MB
18.61 MB
Working set (peak):7.09 MB
37.95 MB
Page faults:3,142/min
2,039/min
I/O
I/O read transfer:42 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:35 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:127
600
GUI GDI count:4
103
GUI USER count:2
49

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\nero\nero8\nero backitup\nbservice.exe"
Owner:SYSTEM
Windows Service
Service name:Nero BackItUp Scheduler 3
Display name:NBService
Description:“Nero BackItUp Scheduler 3 is responsible to control all jobs created using Nero BackItUp 3. These jobs can create backups of selected files/folders/partitions or complete hard disk to hard disk, network drive, disc or FTP.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
NBService.exe (main module)
Total CPU:0.00106493%
0.272967%
Kernel CPU:0.00035387%
0.107585%
User CPU:0.00071106%
0.165382%
CPU cycles:1,059/sec
5,741,424/sec
Memory:852 KB
1.16 MB
wow64.dll (Win32 Emulation on NT64 by Microsoft)
Total CPU:0.00003528%
Kernel CPU:0.00003528%
User CPU:0.00000000%
CPU cycles:670/sec
Memory:252 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 26.01%
Microsoft Windows XP 24.86%
Windows 7 Home Premium 21.97%
Windows Vista Home Premium 6.36%
Windows 7 Professional 6.36%
Windows 7 Home Basic 2.89%
Windows 8 Pro 2.31%
Windows 8.1 1.73%
Windows 8 Single Language 1.16%
Windows Seven Black Edition 1.16%
Windows Vista Home Basic 1.16%
Windows Vista Ultimate 1.16%
Windows 8 Pro with Media Center 1.16%
Windows 8 0.58%
Windows 8 Enterprise 0.58%
Windows 8 Release Preview 0.58%

Distribution by countryDistribution by country

United States installs about 19.19% of Nero BackItUp.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 20.98%
ASUS 18.18%
Acer 14.69%
Hewlett-Packard 13.99%
Toshiba 9.79%
GIGABYTE 6.99%
American Megatrends 4.20%
Intel 4.20%
Sony 2.80%
Medion 1.40%
Compaq 1.40%
Packard Bell 1.40%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE