Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.5.1302.1018 63.64%
8.5.1288.0816 9.09%
8.1.0178.00 27.27%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, StartServiceCtrlDispatcherW, RegCloseKey, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, SetServiceStatus, RegisterServiceCtrlHandlerExW, DeregisterEventSource, RegisterEventSourceW, ReportEventW, ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSidToStringSidW, GetTokenInformation, OpenProcessToken, OpenThreadToken, FreeSid, CheckTokenMembership, ConvertStringSidToSidW, RegQueryValueExW, CryptReleaseContext, CryptGenRandom, CryptAcquireContextW, CryptDestroyHash, CryptGetHashParam, CryptHashData, CryptCreateHash
kernel32.dll
InterlockedExchange, GetLastError, Sleep, InterlockedCompareExchange, CreateEventW, InitializeCriticalSection, DeleteCriticalSection, CloseHandle, LeaveCriticalSection, EnterCriticalSection, InterlockedIncrement, InterlockedDecrement, SetEvent, PostQueuedCompletionStatus, CreateThread, MultiByteToWideChar, LocalFree, LocalAlloc, GetCurrentProcess, GetCurrentThread, GetCurrentThreadId, RaiseException, CreateTimerQueueTimer, DeleteTimerQueueTimer, CreateIoCompletionPort, GetQueuedCompletionStatus, DeviceIoControl, GetVolumePathNameW, CreateFileW, GetFullPathNameW, DuplicateHandle, OpenProcess, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, FlushFileBuffers, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, GetCommandLineA, GetVersionExA, RtlUnwind, GetProcAddress, GetModuleHandleA, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualAlloc, LoadLibraryA, GetCPInfo, GetACP, GetOEMCP, SetFilePointer, GetConsoleCP, GetConsoleMode, GetLocaleInfoA, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW
ole32.dll
CoImpersonateClient, CoRevertToSelf, CoRegisterClassObject, StringFromGUID2, CoRevokeClassObject, CoInitializeEx, CoInitializeSecurity, CoUninitialize

usnsvc.exe

Messenger by Microsoft Corporation (Signed)

Remove usnsvc.exe
Version:   8.5.1302.1018
MD5:   9d19b042a4fd5c02195071ea2fe0c821
SHA1:   ad3f221fd646f90c49023379e30f511f7ee568c9
SHA256:   94825411f84801fda598e59a38fa5398d1e640aa3d704f026234feaebe9898bb

What is usnsvc.exe?

Messenger Sharing USN Journal Reader Service for Windows Messenger is a client by Microsoft that is included in Windows. It has a variety of features, such as instant messaging, presence awareness, support for Session Initiation Protocol (SIP), file transfer, application sharing and whiteboarding. The software integrates with Microsoft Exchange, Microsoft Outlook, Outlook Express, and the Remote Assistance feature of Windows XP.

Overview

usnsvc.exe runs as a service under the name usnjsvc (SYSTEM\CurrentControlSet\Services\usnjsvc) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Windows Live Essentials published by Microsoft Corporation, Windows Live Essentials from Microsoft Corporation and Windows Live Essentials by Microsoft Corporation. The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:usnsvc.exe
Publisher:Microsoft Corporation
Product name:Messenger
Description:Messenger Sharing USN Journal Reader Service
Typical file path:C:\Program Files\msn messenger\usnsvc.exe
File version:8.5.1302.1018
Product version:8.5.1302
Size:96.02 KB (98,328 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Tuesday, April 4, 2006
Expiration date:Thursday, October 4, 2007
Digital DNA
Entropy:6.518048
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Microsoft Corporation
10% remove
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services. Essentials programs are designed to integrate well with each other, with Microsoft Windows, and with other Microsoft web-based services such as SkyDrive and Outlook.com, so that they operate as a seamless whole.
Microsoft Corporation
2% remove
Windows Live Messenger is an instant messaging client connects to Microsoft Messenger service. Microsoft announced that Windows Live Messenger will be retired in favor of Skype. Windows Live Messenger's album viewer is based on Windows Photo Gallery and provides users a photo viewing experience for photo albums shared via SkyDrive and Facebook.
Microsoft Corporation
9% remove
Windows Live is the former collective brand name for a set of services and software products from Microsoft; part of their software plus services platform. A majority of these services are Web applications, accessible from a browser, but there are also client-side binary applications that require installation. There are three ways in which Windows Live services are offered: Windows Essentials applications, web services, and mobile servi...
Microsoft Corporation
3% remove
To play Windows Media in Firefox, you need the Windows Media Player browser plugin installed. Even if you already have Windows Media Player installed, you may still be missing the plugin required to play back Windows Media audio and video embedded in Web Pages.
ScanSoft, Inc
8% remove
Scan Manager 5.2 contains the necessary software and hardware drivers to connect the scanner to the various ScanSoft products.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • usnjsvc
  • 'usnjsvc' (Messenger Sharing Folders USN Journal Reader service)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00001878%
0.028634%
Kernel CPU:0.00000757%
0.013761%
User CPU:0.00001121%
0.014873%
Kernel CPU time:109 ms/min
100,923,805ms/min
CPU cycles:2,869/sec
17,470,203/sec
Memory
Private memory:1.85 MB
21.59 MB
Private (maximum):3.77 MB
Private (minimum):1.82 MB
Non-paged memory:1.85 MB
21.59 MB
Virtual memory:37 MB
140.96 MB
Virtual memory (peak):38.58 MB
169.69 MB
Working set:1.9 MB
18.61 MB
Working set (peak):4.14 MB
37.95 MB
Page faults:3,242/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:9 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:3
12
Handles:119
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\windows live\messenger\usnsvc.exe"
Owner:SYSTEM
Windows Service
Service name:SYSTEM\CurrentControlSet\Services\usnjsvc
Display name:usnjsvc
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 45.45%
Windows Vista Home Premium 27.27%
Windows 7 Ultimate 9.09%
Windows XP Professional 9.09%
Windows Vista Ultimate 9.09%

Distribution by countryDistribution by country

Germany installs about 22.22% of Messenger.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 28.57%
Hewlett-Packard 28.57%
Toshiba 28.57%
Sahara 14.29%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE