What is Netdde.exe

Network DDE DSDM - Microsoft® Windows® Operating System - Microsoft Corporation

File description

Netdde.exe with description Network DDE DSDM is a process file from company Microsoft Corporation belonging to product Microsoft® Windows® Operating System.
The file is digitally signed from Microsoft Windows Component Publisher - Microsoft Timestamping Service
We do not recommend removing digitally signed files from Microsoft Windows Component Publisher

What is netdde.exe?
This is the Windows Network Dynamic Data Exchange Server. Its purpose is to allow data to be exchanged over the network. It is included with most installations of Windows.

The execution of this process is not essential to the system; however, you should not terminate it if you are using the Network DDE functionality. If you do not need the functionality, however, it is recommended that you disable the Network DDE service in services.msc, as this service is a common method for attacking a system over a network. The following screenshot illustrates how this process should appear in the Task Manager:



As you can see in this screenshot, this process typically runs as as SYSTEM. A process with this name running as a different user may be indicative of a malware infection.

Dangers of netdde
As this is a relatively common process that exists on most installations of Windows, it is common for virus writers and spyware vendors to disguise their malware as the genuine one.

Some malicious files may have the same name but be stored somewhere other than in %SystemRoot%\System32. Other malware may use a name that appears similar to it but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as netdde.exe:
  • W32/Rbot-DBU (Creates system driver service called "Windows netdde")
    • This is a worm that copies itself to many locations on your hard drive and tries to spread to any floppy disks you insert.
  • W32/Codbot-Y (%SystemRoot%\System32\netddesrv.exe)
    • This is a worm and backdoor Trojan that spreads via many known network vulnerabilities.
There will typically be no more than one instance of this process running at any given time. The presence of multiple instances may be indicative of a malware infection. Furthermore, if you do not have the Network DDE service enabled, the presence of this executable is a likely sign of infection.

Common problems
  • There are no problems that are commonly associated with this process. If you encounter any problems, terminate the process and then run a virus scan. If your system is clean and that was the real Network DDE service, you can safely disable it if you do not need its functionality.

Automatic startup locations

001 Running Processes
003 Autorun registry entries Current User
010 Installed services
011 Installed drivers

Digital signatures found for this file

    Certificate 
67 Microsoft Windows Component Publisher - Microsoft Timestamping Service
41 Microsoft Windows Publisher - VeriSign Time Stamping Services Signer
28 Microsoft Windows XP Publisher - VeriSign Time Stamping Service
26 Microsoft Windows 2000 Publisher - VeriSign Time Stamping Services Signer
14 Microsoft Windows XP Publisher - VeriSign Time Stamping Services Signer
14 Microsoft Windows 2000 Publisher - VeriSign Time Stamping Service
13 Microsoft Windows XP Publisher (Europe) - VeriSign Time Stamping Service
7 Microsoft Windows Publisher - VeriSign Time Stamping Service
5 Microsoft Windows Component Publisher - VeriSign Time Stamping Services Signer
2 Microsoft Windows 2000 Publisher (Europe) - VeriSign Time Stamping Service CA SW1
2 Microsoft Windows 2000 Publisher (Europe) - VeriSign Time Stamping Service
1 Microsoft Windows 2000 Publisher - NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.

MD5 security rating in our database

844 files (Not yet rated and not signed)
3 files (Not yet rated and digitally signed)
7 files (Safe and not signed)
270 files (Safe and digitally signed)
Some versions of this filename have not yet been checked for safety.
Warning: Some malware might rename itself to netdde.exe. Always make sure that your file is from a verified publisher.

User ratings for this file

File rating: Average rating of netdde.exe: by 1124 files and users.

Application errors

Fix netdde.exe application error:  Run a FREE registry scan

User comments

I am happy to report that w3.org is behind it.


Please add your comments if you have more information about this file or if you know how to solve netdde.exe application errors.


File safety :

File security rating :

Are you human? How much is 11+5:


Like this page?

Please support this free service by giving us a Google+1


Browse files by letter

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

More system processes

netdde32.exe NetDeploySvc.exe netdet.exe
netdetect.exe netdevio.sys NetDevSW.exe
netdftp.exe netdiag.exe netdictsvr.exe
NetDirect.ocx netdirect.sys netdirectservice.exe

Lansweeper computer inventory From the creator of Runscanner:

Lansweeper
is an automated IT asset management tool. It can quickly scan your computers and has over 250 default reports available.

There is no need to install any agents on the scanned computers, all hardware and software inventory scanning is done by standard build-in functionality.