File description |
Dumprep.exe with description Windows Error Reporting Dump Reporting Tool is a process file from company Microsoft Corporation belonging to product Microsoft® Windows® Operating System.
The file is
digitally signed from Microsoft Windows Component Publisher - Microsoft Timestamping Service
We do not recommend removing digitally signed files from Microsoft Windows Component Publisher
What is dumprep.exe?
Dumprep.exe, or the Windows Error Dump Reporting Tool, is the component of Windows that prepares and offers the option to send error reports when a program crashes.
This executable is not essential to the proper operation of the system. If you see it in the Task Manager, it is safe to terminate. Doing so, however, will prevent an error report from being generated for the program that probably crashed immediately prior. If you wish to prevent this process from ever being executed, disable Error Reporting in services.msc.
Dangers of dumprep
As this is a common process that is run whenever a program crashes, it is common for virus writers and spyware vendors to disguise their malware as the genuine Windows Error Dump Reporting Tool.
Some malicious files may have the same name as this process but be stored somewhere other than in %SystemRoot%\System32. Other malware may use a name that appears similar to that of this process but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as the genuine process:
- W32/Codox-A (%SystemRoot%\System32\dump.exe)
- This worm also creates a registry entry called "dumprep" in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
It is possible for there to be more than one instance of this process running at any given time. The presence of multiple instances is not necessarily an indicator of a malware infection. If dumprep.exe is running without any program having crashed, though, your system may be infected.
Common problems
- Dumprep.exe continues running after a program has crashed and uses excessive CPU time
- This is a known problem that can be solved by killing dumprep.exe in the Task Manager. If this occurs frequently, you may want to disable Error Reporting.
- I see a KernelFaultCheck registry entry with the value dumprep.exe 0 -k
- This is normal behavior and is nothing to be concerned about.
|
Automatic startup locations |
 |
001 Running Processes |
 |
002 Autorun registry entries local machine |
 |
010 Installed services |
|
Digital signatures found for this file |
| |
Signer of certificate |
Issuer of certificate |
 |
Microsoft Windows Component Publisher |
Microsoft Timestamping Service |
|
Microsoft Windows Component Publisher |
VeriSign Time Stamping Services Signer |
|
Microsoft Windows Publisher |
VeriSign Time Stamping Service |
|
Microsoft Windows Publisher |
VeriSign Time Stamping Services Signer |
|
Microsoft Windows XP Publisher |
VeriSign Time Stamping Service |
|
Microsoft Windows XP Publisher (Europe) |
VeriSign Time Stamping Service |
|
|
MD5 security rating in our database |
 |
 |
|
130 |
files (Not yet rated
and
not
signed) |
|
|
2 |
files (Not yet rated
and
digitally
signed) |
 |
|
5 |
files (Safe
and
not
signed) |
|
|
127 |
files (Safe
and
digitally
signed) |
|
|
|
Some versions of this filename have not yet been checked for safety.
|
| Warning: Some malware might rename itself to dumprep.exe. Always make sure that your file is from a verified publisher. |
|
Application errors |
|
| User comments. |
There are no comments yet.
|
|
Database statistics
Top process list
