"LiveComm.exe" Process on Windows 8

Q

What is the "LiveComm.exe" process on windows 8? Is the "LiveComm.exe" process a virus? Can I terminate the "LiveComm.exe" process?

✍: FYIcenter.com

A

"LiveComm.exe" process represents "Communications Service" program.

"LiveComm.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   LiveComm

On the Processes tab of "Task Manager", "LiveComm.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
LiveComm.exe             19,500 K   Communications Service

Additional information about "LiveComm.exe" process:

Command line:
   "C:\Program Files\WindowsApps\microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe\LiveComm.exe" 
   -ServerName:Microsoft.WindowsLive.Platform.Server

Programe file information:
   Name: LiveComm.exe
   Location: C:\Program Files\WindowsApps\microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe\LiveComm.exe
   Description: Communications Service
   Version: 16.4.4204.0712
   Size: 108400 bytes
   Last modified: 7/26/2012 3:53:16 AM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Program Files\WindowsApps\microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe
C:\Users\fyi\AppData\Local\Packages\microsoft.windowsphotos_8wekyb3d8bbwe\LocalState\LiveComm.etl
C:\Users\fyi\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat
C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9200.16658_none_776622cb3175a40c

Some registry keys used:
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\ActivatableClassId
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\CLSID
HKCR\ActivatableClasses\Package
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids
HKCU\ActivatableClasses\Package
HKCR\ActivatableClasses\CLSID
HKCU\ActivatableClasses\CLSID
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\Server
HKCR\ActivatableClasses\Package

Some DLL libraries used:
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\KERNEL32.DLL
C:\Windows\system32\KERNELBASE.dll
C:\Windows\system32\ADVAPI32.dll
C:\Program Files\WindowsApps\Microsoft.VCLibs.110.00_11.0.50727.1_x64__8wekyb3d8bbwe\MSVCR110.dll
C:\Windows\SYSTEM32\combase.dll
C:\Program Files\WindowsApps\microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe\wllog.dll
C:\Windows\system32\OLEAUT32.dll
C:\Windows\system32\msvcrt.dll

"LiveComm.exe" process is not a virus. You should not terminate "LiveComm.exe" process. It is used by the Photos app.

 

Application Program Processes on Windows 8

⇒⇒Windows 8 Processes Tutorials

2017-01-05, 597👍, 0💬