Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

services.exe (by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

GetTokenInformation, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclA, AllocateAndInitializeSid, RegSetValueExA, RegCloseKey, RegCreateKeyA, StartServiceA, LookupPrivilegeValueA, AdjustTokenPrivileges, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerW, QueryServiceStatusEx, DeleteService, RegisterEventSourceA, ChangeServiceConfigW, CreateServiceW, ChangeServiceConfig2A, ChangeServiceConfigA, QueryServiceConfigW, OpenServiceA, ControlService, RegQueryInfoKeyA, RegQueryInfoKeyW, OpenThreadToken, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, IsValidSid, GetLengthSid, CopySid, RegDeleteValueA, RegDeleteKeyA, RegCreateKeyExA, SetServiceStatus, RegisterEventSourceW, ReportEventA, DeregisterEventSource, OpenSCManagerA, OpenServiceW, CloseServiceHandle, GetSecurityDescriptorLength, ConvertStringSecurityDescriptorToSecurityDescriptorW, OpenProcessToken, RegEnumKeyA, ConvertStringSidToSidA, LookupAccountSidW, RegOpenKeyA, RegEnumKeyExA, CryptAcquireContextA, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, RegQueryValueExA, RegOpenKeyExA, SetNamedSecurityInfoA

crypt32.dll

CertOpenSystemStoreA, CertCloseStore, CertFreeCertificateContext, CertFreeCertificateChain, CertGetCertificateChain, CertCreateCertificateContext, CertNameToStrA, CertEnumCRLsInStore, CertEnumCertificatesInStore, CertOpenStore

gdi32.dll

CreateCompatibleDC, GetDeviceCaps, CreateCompatibleBitmap, SelectObject, GetObjectA, BitBlt, GetBitmapBits, DeleteObject, DeleteDC, CreateDCA

kernel32.dll

DllMain

ole32.dll

CoInitializeSecurity, CoUninitialize, CoTaskMemRealloc, CoTaskMemAlloc, CoRegisterClassObject, CoRevokeClassObject, CoCreateFreeThreadedMarshaler, CoCreateGuid, StringFromGUID2, CoInitializeEx, CoInitialize, CoCreateInstance, ProgIDFromCLSID, CoTaskMemFree

psapi.dll

GetProcessImageFileNameW, GetModuleFileNameExW

secur32.dll

GetUserNameExW

user32.dll

MessageBoxA, GetDesktopWindow, GetUserObjectInformationW, LoadStringA, CharNextA, CharNextW, PostThreadMessageA, DispatchMessageA, MsgWaitForMultipleObjectsEx, DestroyWindow, CreateWindowExA, UnregisterClassA, DefWindowProcA, RegisterClassA, KillTimer, PostMessageA, GetMessageA, TranslateMessage, SetTimer, GetProcessWindowStation, SetProcessWindowStation, CreateDesktopA, SetThreadDesktop, PeekMessageA

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW

ws2_32.dll

WSASocketA, WSAEventSelect, WSAIoctl, WSCGetProviderPath, WSCEnumProtocols

psclikseguro.exe

PsClikSeguro.exe by PSafe Tecnologia S.A

Remove psclikseguro.exe

Version:	2.2.4.3
MD5:	f72710c736da128bf7a580ae925b6b0d
SHA1:	f29a539b58dfd48c54dd8d711fcba34128e6e005

Overview

psclikseguro.exe runs as a service under the name PsClikSeguro with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including PSafe ClikSeguro published by PSafe, PSafe ClikSeguro from PSafe and PSafe ClikSeguro by PSafe. This particular version is usually found on Windows 7 Ultimate (6.1.7600.0).

Details

File name:	psclikseguro.exe
Publisher:	PSafe Tecnologia S.A.
Product name:	PsClikSeguro.exe
Typical file path:	C:\Program Files\psafe\clikseguro\psclikseguro.exe
File version:	2.2.4.3
Size:	3.41 MB (3,576,832 bytes)
Build date:	3/15/2013 7:42 AM
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

PSafe ClikSeguro

PSafe

45% remove

“With ClikSeguro their search online will never be the same. You will know which site is reliable before you even click on it. Using symbols and colors simple ClikSeguro tells whether a link provides some risk to your computer. Click only on trusted sites and navigate safely!”

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'PsClikSeguro'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00170794%	0.028634%
Kernel CPU:	0.00055224%	0.013761%
User CPU:	0.00115570%	0.014873%
Kernel CPU time:	439,580 ms/min	100,923,805ms/min
Memory
Private memory:	12.22 MB	21.59 MB
Private (maximum):	4.77 MB
Private (minimum):	4.66 MB
Non-paged memory:	12.22 MB	21.59 MB
Virtual memory:	133.61 MB	140.96 MB
Virtual memory (peak):	136.83 MB	169.69 MB
Working set:	4.69 MB	18.61 MB
Working set (peak):	13.9 MB	37.95 MB
Resource allocations
Threads:	147	12
Handles:	677	600

Process properties

Integrety level:	System
Platform:	32-bit
Owner:	SYSTEM
Windows Service
Service name:	PsClikSeguro
Description:	“PSafe ClikSeguro”
Type:	Win32OwnProcess
Parent process:	services.exe (by Microsoft)

Threads

Averages

sechost.dll
Total CPU:	0.02415513%	0.272967%
Kernel CPU:	0.01107942%	0.107585%
User CPU:	0.01307571%	0.165382%
CPU cycles:	9,564,708/sec	5,741,424/sec
Memory:	100 KB	1.16 MB
PsClikSeguro.exe (main module)
Total CPU:	0.01303133%
Kernel CPU:	0.01217269%
User CPU:	0.00085864%
CPU cycles:	506,115/sec
Memory:	3.45 MB
ntdll.dll
Total CPU:	0.00671506%
Kernel CPU:	0.00671506%
User CPU:	0.00000000%
CPU cycles:	169,205/sec
Memory:	1.23 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	100.00%

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	100.00%

Remove Adware and Spyware Programs, FREE Download!