Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

5.1.2600.5512 (xpsp.080413-2108) 60.76%
5.1.2600.5512 (xpsp.080413-2108) 2.95%
5.1.2600.5512 (xpsp.080413-2108) 6.33%
5.1.2600.5512 (xpsp.080413-2108) 2.53%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 2.11%
5.1.2600.5512 (xpsp.080413-2108) 0.84%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 1.69%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 0.84%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.5512 (xpsp.080413-2108) 0.42%
5.1.2600.3311 (xpsp.080212-0003) 0.84%
5.1.2600.3300 (xpsp.080125-2027) 0.42%
5.1.2600.3244 (xpsp.071030-1534) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.77%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.84%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.42%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
FreeSid, AllocateAndInitializeSid, GetSecurityDescriptorDacl, AccessCheck, AddAccessDeniedAce, DuplicateToken, GetLengthSid, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, CreateProcessAsUserW, GetSecurityInfo, ImpersonateNamedPipeClient, OpenThreadToken, RevertToSelf, SetNamedSecurityInfoW
kernel32.dll
CreateDirectoryW, GetSystemWindowsDirectoryW, LoadLibraryExW, GetSystemDirectoryW, CloseHandle, GetCurrentThreadId, GetCurrentProcessId, LocalFree, GetCurrentThread, HeapFree, GetProcessHeap, DuplicateHandle, GetCurrentProcess, ProcessIdToSessionId, GetVersionExW, OpenProcess, FreeLibrary, GetLastError, GetProcAddress, DisconnectNamedPipe, WriteFile, GetOverlappedResult, WaitForMultipleObjects, ReadFile, ResetEvent, CreateEventW, SetEvent, ConnectNamedPipe, WaitForSingleObject, CreateNamedPipeW, HeapAlloc, LeaveCriticalSection, EnterCriticalSection, CreateThread, DeleteCriticalSection, InitializeCriticalSection, CreateMutexW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, LocalAlloc, GetTempPathW, DisableThreadLibraryCalls
ntdll.dll
memmove, _wcsicmp, wcslen, RtlUnwind, _vsnwprintf, NtQueryVirtualMemory, _chkstk, swprintf, _alloca_probe, wcscpy, wcscat
rpcrt4.dll
RpcBindingFree, NdrClientCall2, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW
user32.dll
GetUserObjectInformationW, OpenWindowStationW, CloseWindowStation
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock, ExpandEnvironmentStringsForUserW
winsta.dll
WinStationFreeMemory, WinStationEnumerateW, WinStationQueryInformationW

ERSVC.dll

Windows Error Reporting Service by Microsoft

Remove ERSVC.dll
Version:   5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
MD5:   f477b2453b5c3d28de060121e064999d
SHA1:   478d5e0f4d249c0fe66d7b8ce0e00d11108634a3
SHA256:   7460b5c02261f4581f58504d6e1bc20d8422350db1b0a82fb0d1cc12ef3fbc31
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ERSVC.dll?

Windows Error Reporting (WER) is a set of Windows technologies that capture software crash and hang data from end users. Through the Winqual website, software and hardware vendors can access these reports in order to analyze, fix and respond to these problems. WER technologies were originally implemented in Windows XP/Windows Server 2003, and are still a part of current Windows releases.

About ERSVC.dll (from Microsoft)

Microsoft sorts error reports received through Windows Error Reporting into virtual "buckets." A bucket is a categorization of all instances of a specific error associated with a particular version of

DetailsDetails

File name:ersvc.dll
Publisher:Microsoft Corporation
Product name:Windows Error Reporting Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\ersvc.dll
File version:5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Product version:5.1.2600.2180
Size:22.5 KB (23,040 bytes)
Build date:8/4/2004 3:47 PM
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'
  • Shared name is 'ERSvc'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%

Distribution by countryDistribution by country

United States installs about 34.90% of Windows Error Reporting Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 37.33%
Intel 10.67%
Toshiba 10.67%
American Megatrends 8.00%
GIGABYTE 5.33%
Hewlett-Packard 5.33%
Compaq 5.33%
Sahara 4.67%
Lenovo 4.00%
ASUS 2.67%
Acer 2.00%
Gateway 1.33%
Sony 1.33%
MSI 1.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE