Anti-Spyware Background Processes..

[JD]

Doing some research about a question in another newsgroup, I fired up
Process Explorer, from http://technet.microsoft.com/en-us/sysinternals
and I found a couple of new process running the the background:

SASCORE.exe: The Description is "core service." I run SUPERAntiSpyware
Free as an on-demand scanner and manually update it so I'm curious as to
why this process starts with Windows? The SAS response is: "You need it
for the free edition - leave it set as we set it. The core service
should be left running - that's the bottom line - it uses little memory
or cpu." Anybody here familiar with this service? I can easily set it to
manual or disabled using Control Panel, Administrative Tools, Services.

a2Service.exe: The Description is Emsisoft Anti-Malware Service. I run
Emsisoft Anti-Malware as an on-demand scanner and manually update it so
I'm also curious as to why this process starts with Windows? I haven't
found a real description of what it does. Anybody here familiar with
this service? I can easily set it to manual or disabled using Control
Panel, Administrative Tools, Services.

I'm not a big fan of services that run in the background for no real
reason.

--
JD..

[David H. Lipman]

From: "JD" <JD@example.invalid>

> Doing some research about a question in another newsgroup, I fired up Process Explorer,
> from http://technet.microsoft.com/en-us/sysinternals and I found a couple of new
> process running the the background:
>
> SASCORE.exe: The Description is "core service." I run SUPERAntiSpyware Free as an
> on-demand scanner and manually update it so I'm curious as to why this process starts
> with Windows? The SAS response is: "You need it for the free edition - leave it set as
> we set it. The core service should be left running - that's the bottom line - it uses
> little memory or cpu." Anybody here familiar with this service? I can easily set it to
> manual or disabled using Control Panel, Administrative Tools, Services.
>
> a2Service.exe: The Description is Emsisoft Anti-Malware Service. I run Emsisoft
> Anti-Malware as an on-demand scanner and manually update it so I'm also curious as to
> why this process starts with Windows? I haven't found a real description of what it
> does. Anybody here familiar with this service? I can easily set it to manual or disabled
> using Control Panel, Administrative Tools, Services.
>
> I'm not a big fan of services that run in the background for no real reason.
>

The "a2Service.exe" Emsisoft Anti-Malware Service is for removing malware under a Limited
User Account (LUA).

I don't know know what SASCORE.exe is or what it is used for.


--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[Han]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:j6t1a902nmc@news4.newsguy.com:

> From: "JD" <JD@example.invalid>
>
>> Doing some research about a question in another newsgroup, I fired up
>> Process Explorer, from
>> http://technet.microsoft.com/en-us/sysinternals and I found a couple
>> of new process running the the background:
>>
>> SASCORE.exe: The Description is "core service." I run
>> SUPERAntiSpyware Free as an on-demand scanner and manually update it
>> so I'm curious as to why this process starts with Windows? The SAS
>> response is: "You need it for the free edition - leave it set as we
>> set it. The core service should be left running - that's the bottom
>> line - it uses little memory or cpu." Anybody here familiar with this
>> service? I can easily set it to manual or disabled using Control
>> Panel, Administrative Tools, Services.
>>
>> a2Service.exe: The Description is Emsisoft Anti-Malware Service. I
>> run Emsisoft Anti-Malware as an on-demand scanner and manually update
>> it so I'm also curious as to why this process starts with Windows? I
>> haven't found a real description of what it does. Anybody here
>> familiar with this service? I can easily set it to manual or disabled
>> using Control Panel, Administrative Tools, Services.
>>
>> I'm not a big fan of services that run in the background for no real
>> reason.
>>
>
> The "a2Service.exe" Emsisoft Anti-Malware Service is for removing
> malware under a Limited User Account (LUA).
>
> I don't know know what SASCORE.exe is or what it is used for.

I have SAS paid, and have SASCore64.exe running from system, I believe.

--
Best regards
Han
email address is invalid

[David H. Lipman]

From: "Han" <nobody@nospam.not>

> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
> news:j6t1a902nmc@news4.newsguy.com:
>
>> From: "JD" <JD@example.invalid>
>>
>>> Doing some research about a question in another newsgroup, I fired up
>>> Process Explorer, from
>>> http://technet.microsoft.com/en-us/sysinternals and I found a couple
>>> of new process running the the background:
>>>
>>> SASCORE.exe: The Description is "core service." I run
>>> SUPERAntiSpyware Free as an on-demand scanner and manually update it
>>> so I'm curious as to why this process starts with Windows? The SAS
>>> response is: "You need it for the free edition - leave it set as we
>>> set it. The core service should be left running - that's the bottom
>>> line - it uses little memory or cpu." Anybody here familiar with this
>>> service? I can easily set it to manual or disabled using Control
>>> Panel, Administrative Tools, Services.
>>>
>>> a2Service.exe: The Description is Emsisoft Anti-Malware Service. I
>>> run Emsisoft Anti-Malware as an on-demand scanner and manually update
>>> it so I'm also curious as to why this process starts with Windows? I
>>> haven't found a real description of what it does. Anybody here
>>> familiar with this service? I can easily set it to manual or disabled
>>> using Control Panel, Administrative Tools, Services.
>>>
>>> I'm not a big fan of services that run in the background for no real
>>> reason.
>>>
>>
>> The "a2Service.exe" Emsisoft Anti-Malware Service is for removing
>> malware under a Limited User Account (LUA).
>>
>> I don't know know what SASCORE.exe is or what it is used for.
>
> I have SAS paid, and have SASCore64.exe running from system, I believe.
>

And you are running a 64bit OS Han ?



--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[Han]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:j6t2u002ofk@news4.newsguy.com:

> From: "Han" <nobody@nospam.not>
>
>> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
>> news:j6t1a902nmc@news4.newsguy.com:
>>
>>> From: "JD" <JD@example.invalid>
>>>
>>>> Doing some research about a question in another newsgroup, I fired
>>>> up Process Explorer, from
>>>> http://technet.microsoft.com/en-us/sysinternals and I found a
>>>> couple of new process running the the background:
>>>>
>>>> SASCORE.exe: The Description is "core service." I run
>>>> SUPERAntiSpyware Free as an on-demand scanner and manually update
>>>> it so I'm curious as to why this process starts with Windows? The
>>>> SAS response is: "You need it for the free edition - leave it set
>>>> as we set it. The core service should be left running - that's the
>>>> bottom line - it uses little memory or cpu." Anybody here familiar
>>>> with this service? I can easily set it to manual or disabled using
>>>> Control Panel, Administrative Tools, Services.
>>>>
>>>> a2Service.exe: The Description is Emsisoft Anti-Malware Service. I
>>>> run Emsisoft Anti-Malware as an on-demand scanner and manually
>>>> update it so I'm also curious as to why this process starts with
>>>> Windows? I haven't found a real description of what it does.
>>>> Anybody here familiar with this service? I can easily set it to
>>>> manual or disabled using Control Panel, Administrative Tools,
>>>> Services.
>>>>
>>>> I'm not a big fan of services that run in the background for no
>>>> real reason.
>>>>
>>>
>>> The "a2Service.exe" Emsisoft Anti-Malware Service is for removing
>>> malware under a Limited User Account (LUA).
>>>
>>> I don't know know what SASCORE.exe is or what it is used for.
>>
>> I have SAS paid, and have SASCore64.exe running from system, I
>> believe.
>>
>
> And you are running a 64bit OS Han ?

I believe so, David. Got a new laptop, ASUS X53E, Intel core i3-2310M @
2.1 GHz, 8 GB RAM, 64 bit Win7 Pro.


--
Best regards
Han
email address is invalid

[David H. Lipman]

From: "FredW" <fredw@blackholespam.net>

> On Sun, 9 Oct 2011 17:15:39 -0400, "David H. Lipman"
> <DLipman~nospam~@Verizon.Net> wrote:
>> From: "Han" <nobody@nospam.not>
>>
>>>
>>> I have SAS paid, and have SASCore64.exe running from system, I believe.
>>>
>>
>> And you are running a 64bit OS Han ?
>
> I have Windows 7 Home Premium 64-bit and the free version of SAS
> installed.
> I have the service !SASCORE running - SAS Core Service
>
> Path to executable:
> "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
>
> Startup type: Automatic
>
> --

So we know what the service belongs to and we knows there are 32 bit and 64 bit versiosn.
The questiion is what does this SAS NT Service perform ?

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[Han]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:j6t6fd02q69@news4.newsguy.com:

> From: "FredW" <fredw@blackholespam.net>
>
>> On Sun, 9 Oct 2011 17:15:39 -0400, "David H. Lipman"
>> <DLipman~nospam~@Verizon.Net> wrote:
>>> From: "Han" <nobody@nospam.not>
>>>
>>>>
>>>> I have SAS paid, and have SASCore64.exe running from system, I
>>>> believe.
>>>>
>>>
>>> And you are running a 64bit OS Han ?
>>
>> I have Windows 7 Home Premium 64-bit and the free version of SAS
>> installed.
>> I have the service !SASCORE running - SAS Core Service
>>
>> Path to executable:
>> "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
>>
>> Startup type: Automatic
>>
>> --
>
> So we know what the service belongs to and we knows there are 32 bit
> and 64 bit versiosn. The questiion is what does this SAS NT Service
> perform ?

Hi David:
SAS has been updating lately. The file in Windows Taskmanager has under
Properties a description of Core Service, type application, file version
1.0.0.1066, copyright 2005-2011 SUPERAntispyware, 0 bytes, but in
TaskManager it's listed as 1440K. Opening file location, and it is
138KB, dated 8/11/2011 7:38PM.

I tend to trust SAS, but I don't understand how this works, really. Do
you want me to email you the file?

--
Best regards
Han
email address is invalid

[JD]

David H. Lipman wrote:
> From: "JD"<JD@example.invalid>
>
>> Doing some research about a question in another newsgroup, I fired up Process Explorer,
>> from http://technet.microsoft.com/en-us/sysinternals and I found a couple of new
>> process running the the background:
>>
>> SASCORE.exe: The Description is "core service." I run SUPERAntiSpyware Free as an
>> on-demand scanner and manually update it so I'm curious as to why this process starts
>> with Windows? The SAS response is: "You need it for the free edition - leave it set as
>> we set it. The core service should be left running - that's the bottom line - it uses
>> little memory or cpu." Anybody here familiar with this service? I can easily set it to
>> manual or disabled using Control Panel, Administrative Tools, Services.
>>
>> a2Service.exe: The Description is Emsisoft Anti-Malware Service. I run Emsisoft
>> Anti-Malware as an on-demand scanner and manually update it so I'm also curious as to
>> why this process starts with Windows? I haven't found a real description of what it
>> does. Anybody here familiar with this service? I can easily set it to manual or disabled
>> using Control Panel, Administrative Tools, Services.
>>
>> I'm not a big fan of services that run in the background for no real reason.
>>
>
> The "a2Service.exe" Emsisoft Anti-Malware Service is for removing malware under a Limited
> User Account (LUA).
>
> I don't know know what SASCORE.exe is or what it is used for.
>
>

I set both services to Manual, using Control Panel, Administrative
Tools, Services and both programs seem to work without the services
running. I ended up updating Emsisoft Anti-Mailware from Version
5.1.0.19 to Version 6.0.6.40 and it changed the Service to version 6,
which I also set to Manual.

It also didn't give me an option on the install location. Not a good thing.

Do you use Emsisoft Anti-Mailware? It seems like it's turning into what
I call "crap-ware" where it has a whole slew of questionable things I
had to disable, "Enable Guard on system startup" and "Join the
Anti-Malware Network." What the Hell?

So much for a simple, on-demand, manually updated scanners. 8-)

--
JD..

[David H. Lipman]

From: "Han" <nobody@nospam.not>

> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
> news:j6t6fd02q69@news4.newsguy.com:
>
>> From: "FredW" <fredw@blackholespam.net>
>>
>>> On Sun, 9 Oct 2011 17:15:39 -0400, "David H. Lipman"
>>> <DLipman~nospam~@Verizon.Net> wrote:
>>>> From: "Han" <nobody@nospam.not>
>>>>
>>>>>
>>>>> I have SAS paid, and have SASCore64.exe running from system, I
>>>>> believe.
>>>>>
>>>>
>>>> And you are running a 64bit OS Han ?
>>>
>>> I have Windows 7 Home Premium 64-bit and the free version of SAS
>>> installed.
>>> I have the service !SASCORE running - SAS Core Service
>>>
>>> Path to executable:
>>> "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
>>>
>>> Startup type: Automatic
>>>
>>> --
>>
>> So we know what the service belongs to and we knows there are 32 bit
>> and 64 bit versiosn. The questiion is what does this SAS NT Service
>> perform ?
>
> Hi David:
> SAS has been updating lately. The file in Windows Taskmanager has under
> Properties a description of Core Service, type application, file version
> 1.0.0.1066, copyright 2005-2011 SUPERAntispyware, 0 bytes, but in
> TaskManager it's listed as 1440K. Opening file location, and it is
> 138KB, dated 8/11/2011 7:38PM.
>
> I tend to trust SAS, but I don't understand how this works, really. Do
> you want me to email you the file?
>

You can upload it to http://www.uploadmalware.com/ but I believe it's a legitimate SAS NT
Service. I just don't know what that service is for.



--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

[David H. Lipman]

From: "JD" <JD@example.invalid>

> David H. Lipman wrote:
>> From: "JD"<JD@example.invalid>
>>
>>> Doing some research about a question in another newsgroup, I fired up Process
>>> Explorer,
>>> from http://technet.microsoft.com/en-us/sysinternals and I found a couple of new
>>> process running the the background:
>>>
>>> SASCORE.exe: The Description is "core service." I run SUPERAntiSpyware Free as an
>>> on-demand scanner and manually update it so I'm curious as to why this process starts
>>> with Windows? The SAS response is: "You need it for the free edition - leave it set as
>>> we set it. The core service should be left running - that's the bottom line - it uses
>>> little memory or cpu." Anybody here familiar with this service? I can easily set it to
>>> manual or disabled using Control Panel, Administrative Tools, Services.
>>>
>>> a2Service.exe: The Description is Emsisoft Anti-Malware Service. I run Emsisoft
>>> Anti-Malware as an on-demand scanner and manually update it so I'm also curious as to
>>> why this process starts with Windows? I haven't found a real description of what it
>>> does. Anybody here familiar with this service? I can easily set it to manual or
>>> disabled
>>> using Control Panel, Administrative Tools, Services.
>>>
>>> I'm not a big fan of services that run in the background for no real reason.
>>>
>>
>> The "a2Service.exe" Emsisoft Anti-Malware Service is for removing malware under a
>> Limited
>> User Account (LUA).
>>
>> I don't know know what SASCORE.exe is or what it is used for.
>>
>>
>
> I set both services to Manual, using Control Panel, Administrative Tools, Services and
> both programs seem to work without the services running. I ended up updating Emsisoft
> Anti-Mailware from Version 5.1.0.19 to Version 6.0.6.40 and it changed the Service to
> version 6, which I also set to Manual.
>
> It also didn't give me an option on the install location. Not a good thing.
>
> Do you use Emsisoft Anti-Mailware? It seems like it's turning into what I call
> "crap-ware" where it has a whole slew of questionable things I had to disable, "Enable
> Guard on system startup" and "Join the Anti-Malware Network." What the Hell?
>
> So much for a simple, on-demand, manually updated scanners. 8-)
>


I stopped using Nick Skrepeto's s software years ago.

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp