"explorer.exe" Process on Windows 7

Q

What is the "explorer.exe" process on windows 7? Is the "explorer.exe" process a virus? Can I terminate the "explorer.exe" process?

✍: FYIcenter.com

A

"explorer.exe" process represents "Windows Explorer" program. "explorer.exe" is the Windows desktop interface and the Windows Explorer folder and file manager.

"explorer.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   explorer

On the Processes tab of "Task Manager", "explorer.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
explorer.exe            115,576 K   Windows Explorer

Additional information about "explorer.exe" process:

Command line:
   C:\windows\Explorer.EXE

Programe file information:
   Name: explorer.exe
   Location: C:\windows\Explorer.EXE
   Description: Windows Explorer
   Version: 6.1.7600.16385 (win7_rtm.090713-1255)
   Size: 3229696 bytes
   Last modified: 8/29/2016 11:04:37 AM
   Company Name: Microsoft Corporation

Some data files used:
C:\Windows\System32
C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23545_none_14599ab28b920323
C:\Windows\en-US\explorer.exe.mui
C:\Windows\System32\en-US\setupapi.dll.mui
C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757
C:\Windows\System32\en-US\shell32.dll.mui

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SOFTWARE\Microsoft\MSF\Registration\Listen
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
HKCU\Software\Microsoft\Windows NT\CurrentVersion
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
HKCU\Software\Policies

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\USER32.dll
C:\windows\system32\LPK.dll

"explorer.exe" process is not a virus. You should not terminate "explorer.exe" process.

 

System Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2016-07-27, 1669👍, 0💬