PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

ntfrs.exe (File Replication Service)

Percentage of recently scanned PC's with this process running: 0.04%
Average CPU use for this program: 0%
Average RAM for this program: 1 MB

---

PC Pitstop Analysis

ntfrs.exe - Windows File Replication Service.

---

Recommendation

ntfrs.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.

---

Identification

In addition to the file name, ntfrs.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:	Microsoft
Product contains:	Windows

To view version information with Windows Explorer, right-click the file and click Properties, Version.

---

MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called ntfrs.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.

MD5 Report Summary
Program Name	MD5 Count
ntfrs.exe	> 20

#	MD5	Size
1	0x190f3dd36ca97d01401e457ee630cec9	792576 bytes
2	0x4088c02bd4c6994f8fd5e2af79e0bca1	792576 bytes
3	0xaff431102ed2d78f7520c65976864ce1	792064 bytes
4	0x65d47867a14be31eb172719674130f5d	745232 bytes
5	0x90ecd889ed35fb6ee3d381d0838a3b42	791552 bytes
6	0xbc348a0a96c38778fbf2870e7e250f2f	745232 bytes
7	0xf3483e9cede54a8748448538a5352a8d	24576 bytes
8	0x981756f0532439aa3a1a4ae9da9f930e	792064 bytes
9	0xfd5f03ebc119e753808b71b6ae05deae	766464 bytes
10	0x9a43ad0232c80c998b31222dbd031500	792576 bytes
11	0xec5e99ebcafdf098ae025e4f689d31b4	792576 bytes
12	0x5ff08e6e6a9bd858d5492b51c0512091	792064 bytes
13	0x49fecb48950360bfb816cb0665051755	766976 bytes
14	0x03c356db84875baeb56a7e65339ea1e4	745744 bytes
15	0xb12035c01f8769a5f8c8b9130002c937	792576 bytes
16	0x2a138edd6bfd76e6bb02aac5ed893649	623888 bytes
17	0xf8c60c59f1c3a5effd86b3115ed5392f	792576 bytes
18	0x3c42fca07044a56b78a767182bfebd99	766976 bytes
19	0x54fc206f699cda4e7b6408bd2202ce31	745232 bytes
20	0x2ffed7b671a03dd026b00c4fbbf5bcdc	766976 bytes

---

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. ntfrs.exe (File Replication Service) has been seen on 0.04% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 1 MB. The average CPU load for this program was 0%.

---

Vendor or Distributor's Web Site

http://www.microsoft.com/

Detailed Description and/or Removal Instructions

http://www.liutilities.com/products/wintaskspro/processlibrary/ntfrs/