What is Nslookup.exe

nslookup APP - Microsoft® Windows® Operating System - Microsoft Corporation

File description

Nslookup.exe with description nslookup APP is a process file from company Microsoft Corporation belonging to product Microsoft® Windows® Operating System.
The file is digitally signed from Microsoft Windows Component Publisher - Microsoft Timestamping Service
We do not recommend removing digitally signed files from Microsoft Windows Component Publisher

What is nslookup.exe?
This is the Microsoft name server lookup utility. It is a command-line program that allows you to lookup name server information, such as what IP address a domain name resolves to or what domain name an IP address resolves to. The following is a screenshot of nslookup running under Windows XP:

This process is not essential to the operation of the system; however, as it is a system file, it should not be deleted. By terminating this process, the nslookup tool will simply close. This should not be running unless you intentionally are running it; therefore, it should not start up with your system. As such, there is no reason to take any steps to disable this process. The following screenshot illustrates how this process should appear in the Task Manager:

As you can see in this screenshot, this process typically runs as as the current user (in this case, Mike). A process with this name running as a different user may be indicative of a malware infection.

Dangers of nslookup
As this is a process that is a utility that is included with most Windows installations, it is possible for virus writers and spyware vendors to disguise their malware as the genuine one.

Some malicious files may have the same name but will be stored somewhere other than in a subdirectory of %SystemRoot%\System32. Other malware will use a name that appears similar to that of the legitimate one but with slight differences in spelling or with appended digits. While there are currently no known viruses, Trojans, or adware applications that disguise themselves as this process, you should look out for the presence of this file in an incorrect location or with a slightly different name.

There is typically only one instance of this process running at a given time on a system. The presence of multiple instances may be an indicator of a malware infection. Furthermore, if you see this process when you are not knowingly running nslookup, it is likely that your system is infected with malware.

Common problems
  • There are not any commonly known errors that are caused by this process. If you encounter any problems with this program, though, you can safely terminate it.

Automatic startup locations

001 Running Processes
003 Autorun registry entries Current User

Digital signatures found for this file

7 Microsoft Windows Component Publisher - Microsoft Timestamping Service
2 Microsoft Windows - Microsoft Time-Stamp Service
1 Microsoft Windows Publisher - VeriSign Time Stamping Services Signer
1 Microsoft Windows - VeriSign Time Stamping Services Signer

MD5 security rating in our database

3 files (Not yet rated and not signed)
12 files (Safe and digitally signed)
Some versions of this filename have not yet been checked for safety.
Warning: Some malware might rename itself to nslookup.exe. Always make sure that your file is from a verified publisher.

User ratings for this file

File rating: Average rating of nslookup.exe: by 15 files and users.

Application errors

Fix nslookup.exe application error:  Run a FREE registry scan

User comments

There are no user comments yet for this file.

Please add your comments if you have more information about this file or if you know how to solve nslookup.exe application errors.

File safety :

File security rating :

Are you human? How much is 1+9:

Like this page?

Please support this free service by giving us a Google+1

Browse files by letter


More system processes

nslookupi.exe nslservice.exe nslsp.dll
nslsvice.exe nsm_attendant.exe nsm_engine.exe
nsm11.dll nsm17.dll nsm2a.dll
nsm4.dll nsm9.dll nsmAC77.dll

Lansweeper computer inventory From the creator of Runscanner:

is an automated IT asset management tool. It can quickly scan your computers and has over 250 default reports available.

There is no need to install any agents on the scanned computers, all hardware and software inventory scanning is done by standard build-in functionality.