Take Control services and processes
Take Control includes a number of executables that run continuously or only during a single session.
Running executables
BASupSrvc.exe
(Service) - Allows remote sessions and maintains communication between Take Control, N-able N-central, and the cloud infrastructure.BASupSrvcUpdater.exe
(Service) - Watches and updates the BASupSrvc service.BASupSrvcCnfg.exe
(Normal process) - Allows in-session chats between the technician and the local user. This process is loaded for each user logged on the machine. Multiple instances can exist at the same time. If this process is killed, in-session chatting will not be possible.
Session executables
BASupTSHelper.exe
(Elevated process) - Allows image capturing during the remote session.BASupSrvcEvnt.dll
- Displays Take Control-related events registered on Windows and is visible through the Event Viewer.
This .dll will remain on the device after uninstalling the N-able N-central Take Control agent. Otherwise, events will appear as unknown.