What is the "ieetwcollector.exe" process on windows 7? Is the "ieetwcollector.exe" process a virus? Can I terminate the "ieetwcollector.exe" process?

"ieetwcollector.exe" process represents "IE ETW Collector Service" program. "ieetwcollector.exe" process is created by the service: "Internet Explorer ETW Collector Service".

"ieetwcollector.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         ieetwcollector

On the Processes tab of "Task Manager", "ieetwcollector.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
ieetwcollector.exe        4,560 K   IE ETW Collector Service

Additional information about "ieetwcollector.exe" process:

Command line:
   C:\windows\system32\IEEtwCollector.exe /V

Programe file information:
   Name: ieetwcollector.exe
   Location: C:\windows\system32\IEEtwCollector.exe
   Description: IE ETW Collector Service
   Version: 11.00.9600.18525 (winblue_ltsb.161027-0600)
   Size: 114688 bytes
   Last modified: 10/27/2016 2:37:41 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\ole32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\USER32.dll

"ieetwcollector.exe" process is not a virus. You should not terminate "ieetwcollector.exe" process.

 

⇒Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials