What is the "officeclicktorun.exe" process on windows 7? Is the "officeclicktorun.exe" process a virus? Can I terminate the "officeclicktorun.exe" process?

"officeclicktorun.exe" process represents "Microsoft Office Click-to-Run" program. "officeclicktorun.exe" is for "Microsoft Office ClickToRun Service" which manages resource coordination, background streaming, and system integration of Microsoft Office products and their related updates. This service is required to run during the use of any Microsoft Office program, during initial streaming installation and all subsequent updates.

"officeclicktorun.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         officeclicktorun

On the Processes tab of "Task Manager", "officeclicktorun.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
officeclicktorun.exe     33,668 K   Microsoft Office Click-to-Run

Additional information about "officeclicktorun.exe" process:

Command line:
   "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service

Programe file information:
   Name: officeclicktorun.exe
   Location: C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
   Description: Microsoft Office Click-to-Run
   Version: 15.0.4873.1000
   Size: 3040496 bytes
   Last modified: 10/4/2016 4:31:02 AM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23545_none_14599ab28b920323
C:\Windows\Temp\officeclicktorun.exe_c2ruidll(20161216143739824).log
C:\Windows\System32\en-US\setupapi.dll.mui
C:\Windows\Temp\FYICENTER-20161216-1437.log
C:\Windows\Temp\officeclicktorun.exe_streamserver(20161216143740824).log
C:\Program Files\Microsoft Office 15\ClientX64
C:\Windows\System32\en-US\KernelBase.dll.mui
C:\Windows\System32\en-US\crypt32.dll.mui
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKU\.DEFAULT\Software\Policies
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun\ProductReleaseIDs
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun\ProductReleaseIDs\Active
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun\ProductReleaseIDs\Active\O365ProPlusRetail
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun\ProductReleaseIDs\Active\O365ProPlusRetail\x-none
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun\ProductReleaseIDs\Active\O365ProPlusRetail\en-us

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\ole32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\USER32.dll

"officeclicktorun.exe" process is not a virus. You can terminate "officeclicktorun.exe" process or stop the "Microsoft Office ClickToRun Service". But it may affect Microsoft Office applications.

 

⇒Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials