Microsoft Forefront Client Security Antimalware Service
What is Microsoft Forefront Client Security Antimalware Service? (from Microsoft)
The Forefront Client Security Antimalware Service updates the anti-malware engine files and the anti-malware definition files without leaving a gap in malware protection. To stay current with malware threats, the System Center 2012 Endpoint Protection, Forefront Endpoint Protection 2010, and Forefront Client Security A... Read more
Overview
Microsoft Forefront Client Security Antimalware Service is a program developed by Microsoft. The most used version is 1.5.1993.0, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software installer includes 23 files and is usually about 6.8 MB (7,134,523 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 55% of users of Microsoft Forefront Client Security Antimalware Service come from the United States, it is also popular in India and Norway.
Program details
Installation folder: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware
Uninstaller: MsiExec.exe /I{A22989EE-AE7A-42F8-A0C0-9C99CFB644FB}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 6.8 MB
Language: English (United States)
Files installed by Microsoft Forefront Client Security Antimalware Service
-
MSASCui.exe - Microsoft Forefront Client Security (Microsoft Forefront Client Security User Interface)
-
msmplics.dll - License Module
-
MsMpRes.dll - Microsoft Forefront Client Security Resource Module
-
MpAsDesc.dll - Microsoft Malware Protection (Definition Update Descriptions)
-
MpAvRtm.dll - AntiVirus Realtime Monitor
-
mpclient.dll - Client Interface
-
MpCmdRun.exe - Microsoft Malware Protection Command Line Utility
-
mpevmsg.dll - Event Resource Module
-
mpoav.dll - IOfficeAntiVirus Module
-
MpRtMon.dll - Realtime Monitor
-
MpSigDwn.dll - Signature Download Utility
-
MpSoftEx.dll - Software Explorers Data Provider
-
MpSvc.dll - Service Module
-
MpUtil.dll - Sample / Spynet Submission
-
MsMpCom.dll - COM Utility
-
MsMpEng.exe - Service Executable
-
mpfilter.sys - Minifilter
Behaviors exhibited
2 Scheduled Tasks
- MSASCui.exe is scheduled as a task with the class '{FA818021-8BA8-437A-9F48-118A69FB9BC5}' (runs on registration).
- MpCmdRun.exe is scheduled as a task named 'Update Forefront' (runs daily at 08:05).
Service
- MsMpEng.exe runs as a service named 'Microsoft Forefront Client Security Antimalware Service' (FCSAM) "Helps protect users from spyware and other potentially unwanted software".
Startup File (All Users Run)
- MSASCui.exe is loaded in the all users (HKLM) registry as a startup file name 'Microsoft Forefront Client Security Antimalware Service' which loads as "C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MSASCui.exe" -hide.
How do I remove Microsoft Forefront Client Security Antimalware Service?
You can uninstall Microsoft Forefront Client Security Antimalware Service from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Microsoft Forefront Client Security Antimalware Service, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Microsoft Forefront Client Security Antimalware Service.
OS VERSIONS
Win 7 (SP1) 72%
Win XP 0%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 8%
Keep it 92%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
77.73% |
|
| Windows 10 |
10.93% |
|
| Windows XP |
7.42% |
|
| Windows Vista |
3.71% |
|
| Windows Server 2003 |
0.21% |
|
Which OS releases does it run on? |
| Windows 7 Enterprise |
34.64% |
|
| Windows 7 Professional |
29.07% |
|
| Microsoft Windows XP |
7.63% |
|
| Windows 7 Home Premium |
7.22% |
|
| Windows 7 Ultimate |
4.54% |
|
| Windows 8 Enterprise |
3.09% |
|
Geography
54.95% of installs come from the United States
Which countries install it?
| United States |
54.95% |
| India |
4.15% |
| Norway |
3.35% |
| Canada |
2.40% |
| Sweden |
2.24% |
| Mexico |
1.92% |
| Italy |
1.76% |
| Portugal |
1.60% |
| United Kingdom |
1.60% |
| South Africa |
1.44% |
| Netherlands |
1.44% |
| United Arab Emirates |
1.44% |
| Spain |
1.28% |
| Taiwan |
1.12% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
42.22% |
|
| Hewlett-Packard |
37.22% |
|
| Lenovo |
6.94% |
|
| Acer |
3.61% |
|
| Toshiba |
3.06% |
|
| ASUS |
2.50% |
|
| GIGABYTE |
2.22% |
|
| Sahara |
0.83% |
|
| Samsung |
0.83% |
|
| Intel |
0.56% |
|
Common models |
| Dell Latitude E6400 |
2.94% |
|
| Dell Latitude E6420 |
2.52% |
|
| HP ProBook 4440s |
2.52% |
|
| Dell Latitude E6410 |
2.52% |
|
| Dell OptiPlex 755 |
2.10% |
|
| HP EliteBook 8460p |
2.10% |
|
About Microsoft
Microsoft Corporation develops, manufactures, licenses and supports a variety of products and services related to computing.
Publisher URL: www.microsoft.com