Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

5.1.2600.5512 (xpsp.080413-2108) 60.76%
5.1.2600.5512 (xpsp.080413-2108) 2.95%
5.1.2600.5512 (xpsp.080413-2108) 6.33%
5.1.2600.5512 (xpsp.080413-2108) 2.53%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 2.11%
5.1.2600.5512 (xpsp.080413-2108) 0.84%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 1.69%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 0.84%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.3311 (xpsp.080212-0003) 0.84%
5.1.2600.3300 (xpsp.080125-2027) 0.42%
5.1.2600.3244 (xpsp.071030-1534) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.77%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.84%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
FreeSid, AllocateAndInitializeSid, GetSecurityDescriptorDacl, AccessCheck, AddAccessDeniedAce, DuplicateToken, GetLengthSid, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, CreateProcessAsUserW, GetSecurityInfo, ImpersonateNamedPipeClient, OpenThreadToken, RevertToSelf, SetNamedSecurityInfoW
kernel32.dll
CreateDirectoryW, GetSystemWindowsDirectoryW, LoadLibraryExW, GetSystemDirectoryW, CloseHandle, GetCurrentThreadId, GetCurrentProcessId, LocalFree, GetCurrentThread, HeapFree, GetProcessHeap, DuplicateHandle, GetCurrentProcess, ProcessIdToSessionId, GetVersionExW, OpenProcess, FreeLibrary, GetLastError, GetProcAddress, DisconnectNamedPipe, WriteFile, GetOverlappedResult, WaitForMultipleObjects, ReadFile, ResetEvent, CreateEventW, SetEvent, ConnectNamedPipe, WaitForSingleObject, CreateNamedPipeW, HeapAlloc, LeaveCriticalSection, EnterCriticalSection, CreateThread, DeleteCriticalSection, InitializeCriticalSection, CreateMutexW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, LocalAlloc, GetTempPathW, DisableThreadLibraryCalls
ntdll.dll
memmove, _wcsicmp, wcslen, RtlUnwind, _vsnwprintf, NtQueryVirtualMemory, _chkstk, swprintf, _alloca_probe, wcscpy, wcscat
rpcrt4.dll
RpcBindingFree, NdrClientCall2, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW
user32.dll
GetUserObjectInformationW, OpenWindowStationW, CloseWindowStation
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock, ExpandEnvironmentStringsForUserW
winsta.dll
WinStationFreeMemory, WinStationEnumerateW, WinStationQueryInformationW

ERSVC.dll

Windows Error Reporting Service by Microsoft

Remove ERSVC.dll
Version:   5.1.2600.5512 (xpsp.080413-2108)
MD5:   bc5287dc6dc7ebb13aa825caa6482f94
SHA1:   e9c5b03746127633edb8828ef6432258180d1013
SHA256:   418dccd7264762240ccd2f72b9addd077caf40e81ca8339a1c8b646b07d4fd26
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ERSVC.dll?

Windows Error Reporting (WER) is a set of Windows technologies that capture software crash and hang data from end users. Through the Winqual website, software and hardware vendors can access these reports in order to analyze, fix and respond to these problems. WER technologies were originally implemented in Windows XP/Windows Server 2003, and are still a part of current Windows releases.

About ERSVC.dll (from Microsoft)

Microsoft sorts error reports received through Windows Error Reporting into virtual "buckets." A bucket is a categorization of all instances of a specific error associated with a particular version of

DetailsDetails

File name:ersvc.dll
Publisher:Microsoft Corporation
Product name:Windows Error Reporting Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\ersvc.dll
File version:5.1.2600.5512 (xpsp.080413-2108)
Product version:5.1.2600.5512
Size:22.5 KB (23,040 bytes)
Build date:4/14/2008 6:03 PM
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%

Distribution by countryDistribution by country

United States installs about 34.90% of Windows Error Reporting Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 37.33%
Intel 10.67%
Toshiba 10.67%
American Megatrends 8.00%
GIGABYTE 5.33%
Hewlett-Packard 5.33%
Compaq 5.33%
Sahara 4.67%
Lenovo 4.00%
ASUS 2.67%
Acer 2.00%
Gateway 1.33%
Sony 1.33%
MSI 1.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE