PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  
PC Pitstop Libraries > Process Library > $sys$drmserver.exe

$sys$drmserver.exe (XCP DRM)

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 1%
Average RAM for this program: 2 MB

PC Pitstop Analysis

$sys$DRMServer.exe - Part of the XCP software used along with Sony's Digital Rights Management (DRM) that was originally concealed using a rootkit. We recommend removing this software and exchanging any affected CDs for ones without DRM. For more information see PC Pitstop's Sony XCP rootkit page.

Recommendation

PC Pitstop Exterminate

$sys$drmserver.exe is spyware/adware. PC Pitstop recommends strongly that all adware and spyware be immediately removed. This application category consumes considerable system resources and the performance gain is quite noticeable. Furthermore, adware/spyware pose a security risk to your computer as it sends your personal information back to the mothership.

PC Pitstop Exterminate removes $sys$drmserver.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.


Identification

In addition to the file name, $sys$drmserver.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:First 4
Product is not specified

To view version information with Windows Explorer, right-click the file and click Properties, Version.

MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called $sys$drmserver.exe, we have detected 2 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
$sys$drmserver.exe2
#MD5Size
10x3692633395142b264b0a73e4994f657f307200 bytes
20xef1afb4a83a8e378132e3f89d9a46df9274432 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. $sys$drmserver.exe (XCP DRM) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 2 MB. The average CPU load for this program was 1%.

Vendor or Distributor's Web Site

http://blog.sonymusic.com/sonybmg/archives/111505.html

Detailed Description and/or Removal Instructions

http://www3.ca.com/securityadvisor/pest/collateral.aspx?cid=76345

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.