What is the "mscorsvw.exe" process on windows 7? Is the "mscorsvw.exe" process a virus? Can I terminate the "mscorsvw.exe" process?

"mscorsvw.exe" process represents ".NET Runtime Optimization Service" program. It is created by the "Microsoft .NET Framework NGEN v4.0.30319_X86" and "Microsoft .NET Framework NGEN v4.0.30319_X64" services.

"mscorsvw.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   mscorsvw

On the Processes tab of "Task Manager", "mscorsvw.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
mscorsvw.exe              8,808 K   .NET Runtime Optimization Service

Additional information about "mscorsvw.exe" process:

Command line:
   C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

Programe file information:
   Name: mscorsvw.exe
   Location: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
   Description: .NET Runtime Optimization Service
   Version: 4.6.1099.0 built by: NETFXREL4STAGE
   Size: 125064 bytes
   Last modified: 3/26/2017 8:29:16 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows
C:\Windows\SysWOW64
C:\Windows\SysWOW64\en-US\setupapi.dll.mui
C:\Windows\System32
C:\Windows\System32\en-US\setupapi.dll.mui

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKLM\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState
HKLM\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State
HKLM\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\MSVCR120_CLR0400.dll
C:\windows\system32\mscoree.dll
C:\windows\system32\ole32.dll

"mscorsvw.exe" process is not a virus. You can terminate "mscorsvw.exe" process, if you are not using .NET 4.0 applications that often.

 

⇒ "PresentationFontCache.exe" Process on Windows 7

⇐ "CmRcService.exe" Process on Windows 7

⇑ Application Service Processes on Windows 7

⇑⇑ Windows 7 Processes Tutorials