What is GWX.exe?

GWX.exe is part of Operativsystemet Microsoft® Windows® and developed by Microsoft Corporation according to the GWX.exe version information.

GWX.exe's description is "GWX"

GWX.exe is digitally signed by Microsoft Windows.

GWX.exe is usually located in the 'c:\Windows\winsxs\wow64_microsoft-windows-gwx_31bf3856ad364e35_6.1.7601.18804_none_18fdc1e9a139c989\' folder.

None of the anti-virus scanners at VirusTotal reports anything malicious about GWX.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on GWX.exe:

Product nameOperativsystemet Microsoft® Windows®
Company nameMicrosoft Corporation
File descriptionGWX
Internal nameGWX
Original filenameGWX.exe
Legal copyright© Microsoft Corporation. Med ensamrätt.
Product version6.3.9600.17738
File version6.3.9600.17738 (winblue_r9.150323-1723)

Here's a screenshot of the file properties when displayed by Windows Explorer:

Product nameOperativsystemet Microsoft® Windows®
Company nameMicrosoft Corporation
File descriptionGWX
Internal nameGWX
Original filenameGWX.exe
Legal copyright© Microsoft Corporation. Med ensamr..
Product version6.3.9600.17738
File version6.3.9600.17738 (winblue_r9.150323-17..

Digital signatures [?]

GWX.exe has a valid digital signature.

Signer nameMicrosoft Windows
Certificate issuer nameMicrosoft Windows Verification PCA
Certificate serial number330000002d31f64fb7a2f9756b00000000002d

VirusTotal report

None of the 57 anti-virus programs at VirusTotal detected the GWX.exe file.

None of the 57 anti-virus programs detected the GWX.exe file.

Folder name variants

GWX.exe may also be located in other folders than c:\Windows\winsxs\wow64_microsoft-windows-gwx_31bf3856ad364e35_6.1.7601.18804_none_18fdc1e9a139c989\. The most common variants are listed below:

Hashes [?]


Error Messages

These are some of the error messages that can appear related to gwx.exe:

gwx.exe has encountered a problem and needs to close. We are sorry for the inconvenience.

gwx.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.

GWX has stopped working.

End Program - gwx.exe. This program is not responding.

gwx.exe is not a valid Win32 application.

gwx.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.

What will you do with GWX.exe?

To help other users, please let us know what you will do with GWX.exe:

What did other users do?

The poll result listed below shows what users chose to do with GWX.exe. 77% have voted for removal. Based on votes from 1165 users.

User vote results: There were 898 votes to remove and 267 votes to keep

NOTE: Please do not use this poll as the only source of input to determine what you will do with GWX.exe.

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

Please select the option that best describe your thoughts on the information provided on this web page

Free online surveys

And now some shameless self promotion ;)

A screenshot of FreeFixer's scan result.Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.


Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

Quibus writes

15 thumbs

GWX.exe stands for Get Windows X. This is just a shameless Windows commercial tool to get you to update your system to Windows 10. It provides an systemtray icon without any options to disable it. Listed as an 'essential' update, which it is not.
Listed on your system as Windows update KB3035583, find it in your list of installed Windows updates and remove it.

# 1 Jun 2015, 7:56

Soulsplosion writes

2 thumbs

I don't know if it does any harm, but I found that it appeared randomly on my PC without me installing anything related, so I don't find it necessary. However it won't let me remove it without permission from "Trusted Installer".

# 3 Jun 2015, 5:21

iShotZz (S Stewart) writes

-3 thumbs

GWX is not a virus, it comes with a update, for reserving Windows 10 upgrades. "Trusted Installer" is Windows-related stuff, it is officially made by MS. Why not just end GWX in task manager if you want to get rid of it?

# 3 Jun 2015, 17:05

Dx125 writes

10 thumbs

I've heard that if you do uninstall it, it'll just reinstall later in another update. (Doesn't help that in the description of it's update, it doesn't just come right out and say 'this is if you want to see if your computer is compatiable with and will be elidgable to upgrade to Windows 10 for free on July 28th 2015)

If you ask me, all of its behavior basically makes it nothing more than malware. Plain and simple.

It isn't a virus, and *is* genuinely from Microsoft, but it's a massive pain.

And ending the GWX in the task manager is a temporary solution. Like taking morphine when you have a broken leg and the bone is sticking out.

There are many ways listed by others to remove the eyesore (and more than few reasons why It should be removed, especially since it can eat up a heck of a lot of your computer's / laptop's processor power. One person who checked even said it was using up 50% of theirs. scary.)

The way I found that works for me on windows 7 home premium is as follows.

Bassano Collection Hungary

I did a brute force approach that seemingly works on Win7 Home Premium.
1. Open C:\windows\System32 and locate GWX folder. (The content of the folder is rather well protected therefore I couldn't rename or tamper the GWX.exe or other files.)
2. Rename it as you pleased (I did an uderscore _ in front to be able to reactivate it on 28 July)
3. Restart your computer.
4. If you want to accept the free download provided, don't forget to undo the renaming on 28th July

I just did this and rebooted my computer. The system tray icon went away so far. I did not check whether it affects other programs, have hidden dependencies, etc. so any observations are not only welcomed but expected

I've done this myself. Been through a restart and several hours. So far, no problems to report with it. My pc is running as smoothly as ever, and, added bonus, no signs of the stupid little GWX icon in my taskbar.

And, as for just how I feel about it, this dude sums up my feelings pretty well.

besides... as bad as the reception was for Windows 8, they completely skipped past Windows 9 because they KNEW it was crap, they're now (for those elidgeable and even with illegal copies) giving away (upgrading windows pcs) Windows 10 >>>FOR FREE<<

... just how bad does a product have to be in order for it to be given away for free? No commercials on tv, nothing on the radio, no flash ads on websites. Just 'Reserve your Free Upgrade!'

makes me wish there was an Android OS for desktops. seriously.

# 5 Jun 2015, 10:30

- Bob - writes

1 thumb

Just thought I would add, I heard the reason 9 was skipped is that in China, (a vast windows market), the number 9 is considered unlucky, so actually 10 is really 9. on my system, GWX consumes only 0.1 MB of memory and 0% CPU, this causes me no bother but is simple to remove/disable with any of the above methods. As for Android OS, well there is always any of the free linux distributions.

# 14 Jun 2015, 5:50

Dr. Edward B. writes

2 thumbs

I noticed running windows task manager that I was getting several "hard page faults" in my memory. I looked up witch program was causing the fault and it was the GWX.exe so I looked it up to see what it was and I came here. just something to ponder

# 26 Jun 2015, 19:42

Roger Karlsson writes

1 thumb

Thank you all for sharing!

# 4 Jul 2015, 8:05

Quibus writes

1 thumb

"Dx125 writes: I've heard that if you do uninstall it, it'll just reinstall later in another update."

You're right, it's back. After removing it and hiding the update everything was fine, but it's back now. Still called KB3035583, so easily recognisable. Am hiding it again, will see when it pops up again.

# 10 Jul 2015, 6:33

McNac writes

-1 thumb

gwx.exe is definitely malware. It behaves like a worm in the way it was distributed and like a Trojan in the way it delivers a payload to damage your computer. Ultimately it locks up Windows Update to prevent legitimate updates from downloading, then sets up a doomsday timer that launches every time you log in and reboots your computer after 59 minutes. Once it hits the doomsday timer stage, it cannot be shut down. Does anyone know of a malware removal tool that can clean gwx.exe off the computer? Even if you let it run and install Windows 10, then roll back the installation, the malware puts you into the doomsday timer infinite loop.

# 26 Sep 2015, 8:13

Richard M. Levine writes

1 thumb

I have tried everything, including two GWX tools, but can not get rid of the GWX exe. I also have something like a doomsday timer in that there is a daily large text file added each day to WindowsUpdate file. I would like to stop this. It appears to be running tests to prepare for Win 10. There does not seem any way that works to delete/disable this activity. I suspect that if it never stops, it will eventually eat up all of my PCs memory. Does anyone know how to stop this? I am not interested in getting Win 19 even for free as I am relatively satisfied with Win 7. I also understand from the press that Win 10 may be worse that VISTA with its many crashes.

# 31 Oct 2015, 7:47

Leave a reply