"naPrdMgr.exe" Process on Windows 7

Q

What is the "naPrdMgr.exe" process on windows 7? Is the "naPrdMgr.exe" process a virus? Can I terminate the "naPrdMgr.exe" process?

✍: FYIcenter.com

A

"naPrdMgr.exe" process represents "NAI Product Manager" program. "naPrdMgr.exe" process is the Product Manager for the McAfee Framework service. It is loaded by the "McAfee Framework Service" service and communicates to the various point product plugins.

"naPrdMgr.exe" process is normally running under the parent process "svchost" as shown in the process tree below:

Boot
   wininit
      services
         svchost
            naPrdMgr

On the Processes tab of "Task Manager", "naPrdMgr.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
naPrdMgr.exe              1,532 K   NAI Product Manager

Additional information about "naPrdMgr.exe" process:

Command line:
   "C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe" -Embedding

Programe file information:
   Name: naPrdMgr.exe
   Location: C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe
   Description: NAI Product Manager
   Version: 4.8.0.1938
   Size: 340336 bytes
   Last modified: 2/10/2015 4:08:00 PM
   Company Name: McAfee, Inc.
   
Some data files used:
C:\Windows
C:\Windows\SysWOW64
C:\ProgramData\McAfee\Common Framework\DB\PrdMgr_FYICENTER.log
C:\ProgramData\McAfee\Common Framework\DB\PrdMgr_FYICENTER_error.log

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKU\.DEFAULT\Control Panel\International
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale\Alternate Sorts
HKLM\SYSTEM\ControlSet001\Control\Nls\Language Groups
HKLM\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\wow64.dll
C:\windows\SYSTEM32\wow64win.dll
C:\windows\SYSTEM32\wow64cpu.dll
C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe
C:\windows\SysWOW64\ntdll.dll
C:\windows\syswow64\kernel32.dll
C:\windows\syswow64\KERNELBASE.dll
C:\Program Files (x86)\McAfee\Common Framework\cryptshim.dll
C:\windows\syswow64\ADVAPI32.dll

"naPrdMgr.exe" process is not a virus. You should not terminate "naPrdMgr.exe" process.

 

McAfee Program Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2016-12-21, 464👍, 0💬