Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.17031 (winblue_gdr.140221-1952) 0.52%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.41%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.02%
6.2.9200.16384 (win8_rtm.120725-1247) 0.76%
6.2.9200.16384 (win8_rtm.120725-1247) 4.51%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.03%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.03%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.02%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.03%
6.1.7600.16385 (win7_rtm.090713-1255) 5.42%
6.1.7600.16385 (win7_rtm.090713-1255) 63.61%
6.1.7600.16385 (win7_rtm.090713-1255) 18.22%
6.1.7600.16385 (win7_rtm.090713-1255) 5.86%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.46%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.08%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.02%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, OpenProcessToken, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, TraceMessage, CreateProcessWithTokenW, DuplicateTokenEx, GetLengthSid, CopySid, LookupAccountNameW, CloseServiceHandle, QueryServiceStatusEx, OpenServiceW, OpenSCManagerW, EnableTrace, ControlTraceW, GetTokenInformation, DuplicateToken, CreateWellKnownSid, CheckTokenMembership, RegQueryValueExW, CloseTrace, ConvertStringSecurityDescriptorToSecurityDescriptorW, StartTraceW
comctl32.dll
InitCommonControlsEx, ImageList_ReplaceIcon, ImageList_Create, PropertySheetW, ImageList_AddMasked, ImageList_Add, ImageList_Destroy
credui.dll
CredUIPromptForCredentialsW
crypt32.dll
CryptProtectMemory, CryptUnprotectMemory
gdi32.dll
CreateFontIndirectW, ExcludeClipRect, CreateCompatibleDC, SetLayout, GdiFlush, DeleteDC, CreateDIBSection, GetObjectW, SelectObject, GetTextExtentPoint32W, SetBkMode, SetTextColor, SetBkColor, ExtTextOutW, GetDeviceCaps, DeleteObject
kernel32.dll
TlsAlloc, TlsSetValue, TlsGetValue, GetTickCount, LoadLibraryW, GetProcAddress, InterlockedPopEntrySList, InitializeSListHead, RtlCaptureStackBackTrace, InterlockedPushEntrySList, CompareFileTime, GetCalendarInfoW, GetTimeFormatW, EncodePointer, GetLocaleInfoW, RaiseException, InitializeCriticalSection, GetWindowsDirectoryW, GetVolumePathNameW, DecodePointer, FormatMessageW, MoveFileExW, ExpandEnvironmentStringsW, DeviceIoControl, GetVolumePathNamesForVolumeNameW, FileTimeToLocalFileTime, FileTimeToSystemTime, GetDateFormatW, GetUserDefaultLCID, WTSGetActiveConsoleSessionId, ProcessIdToSessionId, GetVolumeNameForVolumeMountPointW, DeleteFileW, CreateDirectoryW, GetComputerNameW, CreateFileW, GetFileAttributesW, OutputDebugStringA, UnhandledExceptionFilter, GetCurrentProcessId, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, GetVersionExA, DeleteCriticalSection, CloseHandle, InterlockedDecrement, GetSystemPowerStatus, Sleep, GetLastError, OpenProcess, lstrlenW, EnterCriticalSection, LeaveCriticalSection, InterlockedIncrement, lstrcmpiW, RegisterApplicationRestart, LocalFree, HeapSetInformation, SetErrorMode, GetCommandLineW, TerminateProcess, GetCurrentProcess, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, GetModuleHandleW, GetModuleFileNameW, GetSystemTimeAsFileTime, SetLastError, GetVolumeInformationW, CreateThread, InitializeCriticalSectionAndSpinCount, ResetEvent, CreateEventW, WaitForMultipleObjects, GetLocalTime, GetDiskFreeSpaceExW, GetThreadId, WaitForSingleObject, GetCurrentThreadId, InterlockedExchange, SetEvent
msvcrt.dll
DllMain
ntdll.dll
RtlGetThreadErrorMode, RtlFreeHeap, RtlAllocateHeap, NtQuerySystemInformation, NtQueryVolumeInformationFile, RtlNtStatusToDosError, NtSetInformationProcess, RtlSetThreadErrorMode, WinSqmAddToStream
ole32.dll
CoDisconnectObject, GetRunningObjectTable, CreateClassMoniker, CLSIDFromString, CoCreateInstance, CoInitializeSecurity, CoWaitForMultipleHandles, CreateBindCtx, CoGetClassObject, StringFromGUID2, CoCreateGuid, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc
secur32.dll
GetUserNameExW
shell32.dll
SHGetPathFromIDListW, SHGetFileInfoW, SHGetDesktopFolder, SHParseDisplayName, SHBindToParent, SHBrowseForFolderW, SHGetSpecialFolderLocation, SHGetFolderLocation, Shell_NotifyIconW, ShellExecuteExW, SHGetFolderPathW, SHGetIDListFromObject, SHBindToObject, SHGetStockIconInfo, CommandLineToArgvW, SHCreateItemFromParsingName
shlwapi.dll
PathIsNetworkPathW, PathCompactPathExW, PathFindFileNameW, StrRetToBufW, SHAutoComplete, PathIsDirectoryW, PathFileExistsW
slc.dll
SLGetWindowsInformationDWORD
spp.dll
SxTracerDebuggerBreak, SxTracerShouldTrackFailure, SxTracerGetThreadContextRetail
user32.dll
SetMenuDefaultItem, DestroyMenu, SendMessageW, AppendMenuW, PostMessageW, TrackPopupMenu, GetCursorPos, CharNextW, ReleaseDC, IsWindow, CreateDialogParamW, LoadStringW, LoadImageW, SetForegroundWindow, KillTimer, DialogBoxParamW, SystemParametersInfoW, RegisterWindowMessageW, ChangeWindowMessageFilter, SetProcessDPIAware, GetDC, UnregisterClassA, GetShellWindow, MsgWaitForMultipleObjectsEx, PeekMessageW, SendMessageTimeoutW, MessageBoxW, GetClassNameW, SetTimer, EnableWindow, GetLastActivePopup, UnregisterClassW, PostThreadMessageW, DestroyWindow, SetFocus, GetDlgItem, DefWindowProcW, DispatchMessageW, TranslateMessage, IsDialogMessageW, GetMessageW, CreateWindowExW, RegisterClassExW, GetSysColorBrush, GetSysColor, GetWindowLongW, SetWindowPos, MapWindowPoints, GetWindowThreadProcessId, GetClassInfoExW, EndPaint, BeginPaint, CreatePopupMenu, GetWindowRect, GetParent, EndDialog, MapDialogRect, FindWindowExW, BeginDeferWindowPos, EndDeferWindowPos, SendDlgItemMessageW, EqualRect, DeferWindowPos, IsWindowVisible, GetAncestor, InflateRect, DrawFrameControl, GetDesktopWindow, CopyRect, OffsetRect, GetFocus, GetDlgItemTextW, RedrawWindow, GetKeyState, IsWindowEnabled, LoadCursorW, SetCursor, SetWindowLongW, GetWindowDC, GetWindowTextW, GetClientRect, UpdateWindow, CheckRadioButton, CheckDlgButton, IsDlgButtonChecked, CallWindowProcW, SetWindowTextW, DestroyIcon, LoadIconW, SetDlgItemTextW, ShowWindow, GetSystemMetrics, MoveWindow, EnumWindows
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory

sdclt.exe

Microsoft Windows Backup by Microsoft

Remove sdclt.exe
Version:   6.2.8102.0 (winmain_win8m3.110823-1455)
MD5:   937ada1725f8544784ed2eae3b923d00
SHA1:   e5169c67da6f321d85083c4cc909ad94d73b558e
SHA256:   491819477c2c671025da125af536e6a169b3dd9fe0f2cd5a0bc22f6ddb0e37a3
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is sdclt.exe?

You can use the Backup utility to back up and restore data on your computer's disks.

About sdclt.exe (from Microsoft)

Backup and Restore—improved for Windows 7—creates safety copies of your most important personal files, so you're always prepared for the worst. Let Windows choose what to back up, or pick individual f

Overview

sdclt.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). It configures an autoplay handler withing explorer.exe named MSSdConfigBackup that will launch the program automatically. This version is installed on Windows 8.

DetailsDetails

File name:sdclt.exe
Publisher:Microsoft Corporation
Product name:Microsoft® Windows Backup
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\sdclt.exe
Original name:sdclt.exe.mui
File version:6.2.8102.0 (winmain_win8m3.110823-1455)
Product version:6.2.8102.0
Size:1.06 MB (1,114,112 bytes)
Build date:8/24/2011 5:46 AM
Digital DNA
PE subsystem:Windows GUI
Entropy:6.860738
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled tasks
  • The task 'CheckFull' runs weekly in the path '\Microsoft\Windows\WindowsBackup\CheckFull'
  • The task 'ConfigNotification' runs daily in the path '\Microsoft\Windows\WindowsBackup\ConfigNotification'
  • The task 'Windows Backup Monitor' runs daily in the path '\Microsoft\Windows\WindowsBackup\Windows Backup Monitor'
  • Entry path '\Microsoft\Windows\WindowsBackup\CheckFull'
  • Entry path '\Microsoft\Windows\WindowsBackup\Windows Backup Monitor'
  • Entry path '\Microsoft\Windows\WindowsBackup\ConfigNotification'
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'MSSdRunBackup'
  • Handler name 'MSSdConfigBackup'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
  • Login entry path '\Microsoft\Windows\WindowsBackup\Windows Backup Monitor'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 61.00%
Windows 7 Ultimate 17.50%
Windows 7 Professional 8.00%
Windows 8.1 3.00%
Windows Seven Black Edition 2.50%
Windows 7 Home Basic 2.50%
Windows 8 2.00%
Windows 8.1 Pro 1.50%
Windows 8.1 Single Language 1.50%
Windows 8 Enterprise N 0.50%

Distribution by countryDistribution by country

United States installs about 58.00% of Microsoft® Windows Backup.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 23.22%
Hewlett-Packard 22.47%
Toshiba 17.23%
Acer 13.48%
ASUS 12.73%
Sony 4.49%
Samsung 2.25%
Alienware 1.87%
Lenovo 1.50%
Intel 0.75%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE