"RdrCEF.exe" Process on Windows 8

Q

What is the "RdrCEF.exe" process on Windows 8? Is the "RdrCEF.exe" process a virus? Can I terminate the "RdrCEF.exe" process?

✍: FYIcenter.com

A

"RdrCEF.exe - Adobe RdrCEF" process is part of the Adobe Acrobat Reader DC Updater checks and notifies you for updates of Adobe products like Adobe Arobat Reader.

"RdrCEF.exe" process is created by the "AdobeARM.exe" process. It will also create an child process with the same name. So you may see 2 "RdrCEF.exe" processes on your computer.

On the Processes tab of "Task Manager", 2 "RdrCEF.exe" processed may be listed as:

Image Name  PID   Memory    Description

RdrCEF.exe  5644   3,564 K  Adobe RdrCEF
RdrCEF.exe  8096  29,600 K  Adobe RdrCEF

Additional information about "RdrCEF.exe" process:

Command line:
   "C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"
   
Started by: AdobeARM.exe

Files used:
C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF
C:\Users\...\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cookie\Cookies
C:\Windows\System32
C:\Windows\System32\drivers\etc
C:\Windows\System32\en-US\MMDevAPI.dll.mui
   
Registry keys: 
HKCU\Software\Classes
HKCU\Software\Microsoft\Windows NT\CurrentVersion
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\Session Manager
HKLM\SYSTEM\ControlSet001\services\Dnscache\Parameters
HKLM\SYSTEM\ControlSet001\services\TCPIP6\Parameters
HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\NameSpace_Catalog5
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9

"RdrCEF.exe" process is not a virus. You can terminate both "RdrCEF.exe" processes. or remove the startup program entry "Adobe Reader and Acrobat Manager". You can check for updates manually from Abode website.

 

Application Program Processes on Windows 8

"AdobeARM.exe" Process on Windows 8

Startup Program Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials

2016-12-28, 449👍, 0💬