Should I remove CMU Security Behavior Observatory SBO Client?
What percent of users and experts removed it?
6% remove it94% keep it
What do people think about it?
Be the first to rate (click star to rate)
How common is it?
Reach <0.001%
Versions
| Version | Distribution |
| 3.0.14 |
100.00% |
|
CMU Security Behavior Observatory SBO Client
by Carnegie Mellon University (CMU) Usable Privacy and Security (CUPS) research group
Overview
CMU Security Behavior Observatory SBO Client is a program developed by Carnegie Mellon University (CMU) Usable Privacy and Security (CUPS) research group. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The software installer includes 29 files and is usually about 1.02 MB (1,071,797 bytes). A majority of the PCs this is running on, most OS versions are Windows 7 (SP1). The distribution of this has mostly been seen in the United States.
Program details
Installation folder: C:\Program Files\cmu-sbo\client
Uninstaller: MsiExec.exe /X{AF64D591-CFA5-4AD9-9C1A-D281ED76AF5B}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 1.02 MB
Language: English (United States)
Files installed by CMU Security Behavior Observatory SBO Client
-
interop.shdocvw.dll - Assembly imported from type library 'SHDocVw'.
-
cmu-sbofilesystemsensorservice.exe (by CMU) - CMU-SBO FileSystem Sensor Service
-
cmu-sboeventlogsensorservice.exe (by CMU) - CMU-SBO Event Log Sensor Service
-
cmu-sboregistrysensorservice.exe - CMU-SBO Registry Sensor Service
-
cmu-sbosessionsensorservice.exe - CMU-SBO Session Sensor Service
-
cmu-sboupdatesensorservice.exe - CMU-SBO Update Sensor Service
-
cmu-sbowifisensorservice.exe - CMU-SBO Wifi Sensor Service
-
cmu-sbowmisensorservice.exe - CMU-SBO Wmi Sensor Service
-
cmu-sbocontrolservice.exe - CMU-SBO Control Service
-
managedwifi.dll (by Monfort Software Engineering) - Managed Wifi API
-
ieextension.dll (by CMU-SBO) - IEExtension
-
log4net.dll (by The Apache Software Foundation) - log4net (Apache log4net for .NET Framework 4.0)
-
cmu-sboclientcollectionservice.exe
-
readregistry_installsensor.vbs
-
readregistry_startupsensor.vbs
-
urlhistorylibrary.dll
-
bootstrap.js
-
edu.cmu.cylab.sbo.sensors.dll (by Microsoft) - edu.cmu.cylab.sbo.sensors
-
handle.exe (by Sysinternals) - Sysinternals Handle (Handle viewer)
-
harness-options.json
-
historychecker.exe (by Microsoft) - HistoryChecker
-
icepropertiesparser.exe - IcePropertiesParser
-
install.rdf
-
jnetpcap.dll
-
locales.json
-
main.js
-
newtonsoft.json.dll (by Newtonsoft) - Json.NET
-
runcmd.vbs
Behaviors exhibited
9 Services
- cmu-sboclientcollectionservice.exe runs as a service named 'CMU-SBO Client Logs Sensor' (CMU-SBOLogsSensor) "CMU Security Behavior Observatory (SBO) Client Logs Sensor".
- cmu-sbocontrolservice.exe runs as a service named 'CMU-SBO Client Control Service' (CMU-SBOControlService) "CMU Security Behavior Observatory (SBO) Client Control Service".
- cmu-sbowmisensorservice.exe runs as a service named 'CMU-SBO Client WMI Sensor' (CMU-SBOWmiSensor) "CMU Security Behavior Observatory (SBO) Client WMI Sensor".
- cmu-sbowifisensorservice.exe runs as a service named 'CMU-SBO Client Wifi Sensor' (CMU-SBOWifiSensor) "CMU Security Behavior Observatory (SBO) Client Wifi Sensor".
- cmu-sbosessionsensorservice.exe runs as a service named 'CMU-SBO Client Session Sensor' (CMU-SBOSessionSensor) "CMU Security Behavior Observatory (SBO) Client Session Sensor".
- cmu-sboupdatesensorservice.exe runs as a service named 'CMU-SBO Client Update Sensor' (CMU-SBOUpdateSensor) "CMU Security Behavior Observatory (SBO) Client Update Sensor".
Plus 3 more
Startup File (All Users Run)
- historychecker.exe is loaded in the all users (HKLM) registry as a startup file name 'CMU-SBOHistoryChecker' which loads as C:\Program Files\CMU-SBO\client\HistoryChecker.exe.
How do I remove CMU Security Behavior Observatory SBO Client?
You can uninstall CMU Security Behavior Observatory SBO Client from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program CMU Security Behavior Observatory (SBO) Client, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove CMU Security Behavior Observatory SBO Client.
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 6%
Keep it 94%
|
|
|
MOST USED OS
~99%
Windows 7 (SP1)
|
Geography
100.00% of installs come from the United States
Which countries install it?