should I delete C:\Windows\System32\grpconv.exe

Posted on 2011-10-03
Last Modified: 2012-08-13
Whilst trying to clean up a nasty redirect virus I ran RKill. According to the RKILL log it stopped one process. here's the log:

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Rkill was run on 10/03/2011 at  9:30:41.
Operating System: Windows 7 Professional
Processes terminated by Rkill or while it was running:


Rkill completed on 10/03/2011 at  9:30:41.
Rkill completed on 10/03/2011 at  9:31:20.

I've read grpconv.exe can be an essential windows element. I've read it can be a virus. So what do I do now? Thanks
Question by:oliviajones
    LVL 7

    Expert Comment

    A quick search shows 50/50 results.

    I would scan the file using VirusTotal to make sure.

    LVL 51

    Expert Comment

    what is size and modification on this exe?

    I have this

    16,384 byte
    created : ¿July-¿13-¿09, ¿¿7:40:18 PM
    modified : ¿July-¿13-¿09, ¿¿9:14:21 PM
    accessed : ¿July-¿13-¿09, ¿¿7:40:18 PM
    Product version: 6.1.7600.16385

    Author Comment

    All of my info in properties is identical to Hainkurt's. Does that mean the file's OK? Thanks.
    LVL 51

    Accepted Solution

    this program is a part of MS Operating System, named as "Windows Progman Group Converter"

    nothing to worry about this :) any other entry in log?

    Author Comment

    nope. thanks.

    Author Closing Comment

    thanks for quickest, most direct solution

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    So you got the Conficker. You could go to each machine and run the eye chart test (, but in a bigger environment, or if you prefer to work smarter and not harder, you need some …
    The purpose of this Article is to provide information for a newly released variant of malware – with the assumption that many EE Members will have need of the information. According to “Computerworld”, well over one million web sites have been co…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now