tfservice.exe
ThreatFire by PC Tools (Signed)
Overview
tfservice.exe has 5 known versions, the most recent one is 4.12.9.28. It is started as a Windows Service with the name 'ThreatFire' and described as “The ThreatFire engine responsible for monitoring your system for viruses, spyware, and other malware. Turning this service off makes your machine vulnerable to such attacks.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 69.65 KB. It is an authenticode code-signed executable issued to PC Tools by the certification authority VeriSign. Some variations of the file have been seen to be installed with the program ThreatFire from PC Tools Software. During the process's lifecycle, the typical CPU resource utilization is about 0.0016% including both foreground and background operations, the average private memory consumption is about 16.82 MB.
What is tfservice.exe?
PC Tools Security which offers protection from online threats, is regularly updated, and even includes some useful extras like Web site ratings, phishing alerts, and spyware, adware and malware protection.
About tfservice.exe (from PC Tools)
“PC Tools Security is a full antivirus and antispyware package designed to protect from known viruses, worms, Trojans and other threats while defending against spyware, adware, bots, keyloggers and oth”
 Details
|
| File name: | tfservice.exe |
| Publisher: | PC Tools |
| Product name: | ThreatFire |
| Description: | PC Tools ThreatFire Service |
| Typical file path: | C:\Program Files\pc tools\pc tools security\tfengine\tfservice.exe |
| Original name: | OCService.dll |
| Certificate |
| Issued to: | PC Tools |
| Authority (CA): | VeriSign |
| Windows Service |
| Service name: | ThreatFire |
| Description: | “The ThreatFire engine responsible for monitoring your system for viruses, spyware, and other malware. Turning this service off makes your machine vulnerable to such attacks.” |
| Type: | Win32OwnProcess, InteractiveProcess |
Programs installed in
(Note, the programs listed below are for all versions of ThreatFire.)
“Traditional antivirus solutions cannot protect you until after they have discovered a new threat and produced a signature to counter it. ThreatFire does not rely on signatures, but instead provides be...”
Behaviors
(Note, the behaviors below are for all versions of tfservice.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of tfservice.exe
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
40.00% |
|
| Windows 7 Home Premium |
30.00% |
|
| Windows Vista Home Premium |
10.00% |
|
| Windows 7 Ultimate N |
10.00% |
|
| Windows 7 Professional |
10.00% |
|
Distribution by country
United States installs about 40.00% of ThreatFire.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
50.00% |
|
| Intel |
25.00% |
|
| Hewlett-Packard |
12.50% |
|
| American Megatrends |
12.50% |
|
