Information and startup locations can be examined on this page: verify all your files to make sure that they are legitimate, digitally signed and from the company Microsoft Corporation to which they should belong.
tcpsvcs.exe security and file info
TCP/IP Services Application
- Microsoft(R) Windows (R) 2000 Operating System
- Microsoft Corporation
 |
 |
 |
| Filetype : executable |
An executable file is a program that can be executed in your windows environment.
|
|
What is tcpsvcs.exe?
This is the Microsoft TCP/IP Services Application. It is responsible for providing a multitude of TCP/IP services; however, its most common use is to serve as a DHCP server. It is included with most installations of Windows.
The execution of this process is not essential to the operation of the system; however, as it is a system file, the existence of it may be essential to the proper operation of the system. If it is causing problems or you do not need the services it provides, there should be no harm in terminating it and/or disabling the service.
Dangers of tcpsvcs
As this is the name of a legitimate system process, it is possible for virus writers and spyware vendors to disguise their malware as the genuine one.
Some malicious files will have the same name but will be stored somewhere other than in %SystemRoot%\System32\. Other malware will use a name that appears similar to that of the legitimate one but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as tcpsvcs.exe:
- Backdoor.Egghead (%SystemRoot%)
- This is a backdoor Trojan horse that allows a remote attacker to take control over your system. It also exploits a number of legitimate programs; therefore, this could continue running even after terminating tcpsvcs.exe.
There will typically be no more than one instance of this process running at any given time. The presence of multiple instances may be indicative of a malware infection.
Common problems
- This process uses 100% of the CPU
- This is a known symptom of the Backdoor.Egghead Trojan. Reboot into safe mode and run a virus scan to ensure that your system is not infected.
- If the problem persists and you do not need the functionality this service provides, you can safely disable it.
|
|
|
|
|
|
| MD5 File security rating |
A MD5 hash is a unique fingerprint of a file.
Different files/versions can have the same filenames. The MD5 hash verifies that the legitimate file is not altered.
Runscanner (Freeware) can help you checking the file's MD5 hashes
| Tcpsvcs.exe files in Runscanner database |
 |
|
5 different item(s) in database |
 |
|
1 different item(s) in database |
 |
|
46 different item(s) in database |
|
 |
Green items are verified safe to use |
 |
Unrated items are not yet checked for safety. |
 |
Red items are not safe (typically virusses, spyware or other malware) |
 |
This file is digitally signed by it's publisher.
This means that the file is from the company claiming to created it, this does not mean by default that the file is safe
|
|
|
|
| General file info |
| Product name: |
Microsoft(R) Windows (R) 2000 Operating System
|
| Description: |
TCP/IP Services Application
|
| Company: |
Microsoft Corporation
|
| Fix TCPSVCS.EXE errors: Free registry scan |
|
|
|
Automatic startup locations
 |
| |
 |
001 Running Processes |
| |
 |
010 Installed services |
User comments for this file
More system processes
|
|
| Filename / Process |
|
| Guid / CLSID |
|
| MD5 hash |
|
|
|
52 MD5 version(s) found
only top 10 displayed
|
|
|
| Check your autostart files
|
|
|
|