What is rthdcpd.exe?

rthdcpd.exe's description is "Driver helper service" according to the rthdcpd.exe version information.

rthdcpd.exe is usually located in the 'c:\Program Files (x86)\msrtn32\' folder.

None of the anti-virus scanners at VirusTotal reports anything malicious about rthdcpd.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on rthdcpd.exe:

PropertyValue
File descriptionDriver helper service
File version6.2.0.2

Here's a screenshot of the file properties when displayed by Windows Explorer:

File descriptionDriver helper service
File version6.2.0.2

Digital signatures [?]

rthdcpd.exe is not signed.

VirusTotal report

None of the 54 anti-virus programs at VirusTotal detected the rthdcpd.exe file.

None of the 54 anti-virus programs detected the rthdcpd.exe file.

Folder name variants

rthdcpd.exe may also be located in other folders than c:\Program Files (x86)\msrtn32\. The most common variants are listed below:

Hashes [?]

PropertyValue
MD5af1b67fb8496f3410ecaebc87c354286
SHA256be6db8ab7a2c09a1a50fd74f7dde2e9b7134fc8bca65a41409edfc61fd679548

Error Messages

These are some of the error messages that can appear related to rthdcpd.exe:

rthdcpd.exe has encountered a problem and needs to close. We are sorry for the inconvenience.

rthdcpd.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.

Driver helper service has stopped working.

End Program - rthdcpd.exe. This program is not responding.

rthdcpd.exe is not a valid Win32 application.

rthdcpd.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.

What will you do with rthdcpd.exe?

To help other users, please let us know what you will do with rthdcpd.exe:



What did other users do?

The poll result listed below shows what users chose to do with rthdcpd.exe. 97% have voted for removal. Based on votes from 155 users.

User vote results: There were 150 votes to remove and 5 votes to keep

NOTE: Please do not use this poll as the only source of input to determine what you will do with rthdcpd.exe.

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

Please select the option that best describe your thoughts on the information provided on this web page


Free online surveys

And now some shameless self promotion ;)

A screenshot of FreeFixer's scan result.Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

marcW writes

0 thumbs

What will you do with rthdcpd.exe?
I do not know! It appears 5 times in revieuw of processes that are going on!!

# 29 Jul 2014, 12:36

Roger Karlsson writes

0 thumbs

The rthdcpd.exe file looks very suspicious. MalwareBytes is now detecting this as Trojan.FakeMS:

https://www.virustotal.com/en/analisis//file/be6db8ab7a2c09a1a50fd74f7dde2e9b7134fc8bca65a41409edfc61fd679548/analysis/

# 4 Aug 2014, 0:10

marcW writes

0 thumbs

It is indeed a suspicious file.
I have removed it and the problem i had with the cpu all the time working at 95% is over .
Forgotten to write this as an answer.

# 4 Aug 2014, 2:38

Roger Karlsson writes

0 thumbs

@Markw: Good to hear you solved the problem.

# 9 Aug 2014, 7:28

ams writes

0 thumbs

How do you remove it?

# 12 Aug 2014, 9:19

marcW writes

0 thumbs

@ ams : first you locate it and then i used the program "unlocker" and in restart it was gone.
Succes

# 13 Aug 2014, 12:01

Roger Karlsson writes

0 thumbs

@Ams: FreeFixer can remove the rthdcpd.exe file:

1. Start the FreeFixer scan.
2. Check the rthdcpd.exe file for removal. It should be located under "Processes" in the scan result.
3. Click Fix.
4. Reboot your machine.

Hope that helped you remove the file.

# 13 Aug 2014, 12:22

marcW writes

0 thumbs

Sorry to say , it is back.
Seems a damm thing to remove. I'll try freefixer ;-)

# 14 Aug 2014, 3:01

Roger Karlsson writes

0 thumbs

@MarcW: Did you solve the rthdcpd.exe problem?

# 20 Aug 2014, 6:51

casey writes

0 thumbs

how do i remove it im geting aoe that says the program cant start because crackcaptchaAPI.dll is missing

# 26 Aug 2015, 11:35

Roger Karlsson writes

0 thumbs

Many of the anti-virus programs are now detecting the rthdcpd.exe file:

ALYac Trojan.GenericKD.1849672 20150511
AVG Clicker.BHDD 20150511
AVware Trojan.Win32.Clicker!BT 20150511
Ad-Aware Trojan.GenericKD.1849672 20150511
Agnitum Trojan.CL.Clamtext! 20150511
Antiy-AVL Trojan/Win32.SGeneric 20150511
Avast Win32:Rootkit-gen [Rtk] 20150511
BitDefender Trojan.GenericKD.1849672 20150511
CAT-QuickHeal TrojanClicker.Clamtext.r5 20150511
Comodo UnclassifiedMalware 20150511
ESET-NOD32 Win32/TrojanClicker.Clamtext.A 20150511
Emsisoft Trojan.GenericKD.1849672 (B) 20150511
F-Secure Trojan.GenericKD.1849672 20150510
GData Trojan.GenericKD.1849672 20150511
Ikarus Trojan-Clicker.Win32.Clamtext 20150511
K7AntiVirus Spyware ( 004a94f91 ) 20150511
K7GW Spyware ( 004a94f91 ) 20150511
Malwarebytes Trojan.FakeMS 20150511
McAfee Artemis!AF1B67FB8496 20150511
MicroWorld-eScan Trojan.GenericKD.1849672 20150511
Microsoft TrojanClicker:Win32/Clamtext.B 20150511
Norman Suspicious_Gen4.GZDQT 20150511
Panda Trj/CI.A 20150510
Rising PE:Trojan.Win32.Generic.17436242!390292034 20150510
Sophos Mal/Generic-S 20150511
Symantec Trojan.Adclicker 20150511
Tencent Win32.Trojan.Generic.Lnod 20150511
TrendMicro TROJ_GEN.R002C0DID14 20150511
TrendMicro-HouseCall TROJ_GEN.R002C0DID14 20150511
VIPRE Trojan.Win32.Clicker!BT 20150511
ViRobot Trojan.Win32.S.Agent.378880.CR[h] 20150511
nProtect Trojan.GenericKD.1849672 20150508

# 23 Sep 2015, 8:34

Leave a reply