Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › DISM

What Is per.exe? Is It Safe, and How to Fix per.exe Errors on Windows

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

per.exe is not automatically safe or malicious just because of its name. The exact file path, command line, publisher signature, hash, parent process and startup entry determine what you are dealing with. BleepingComputer’s startup database flags C:WindowsSystem32per.exe internat.dll,LoadKeyboardProfile as undesirable and associates that specific entry with the Troj/DwnLdr-FDP Trojan. Treat a matching file as suspicious, but verify the copy on your computer before deleting anything. The procedure below separates malware response from Windows component repair so you can fix the right problem without damaging a legitimate application.

What per.exe is—and why the filename is not enough

per.exe is the name of an executable file. Windows does not assign one universal meaning to every file with that name; unrelated programs can use identical filenames. A filename therefore cannot prove that a process is a Windows component, a legitimate third-party program or malware.

As an Amazon Associate I earn from qualifying purchases.

The strongest documented warning concerns a startup command recorded by BleepingComputer: C:WindowsSystem32per.exe internat.dll,LoadKeyboardProfile. Its startup database labels that entry undesirable and associates it with the Troj/DwnLdr-FDP Trojan. That is evidence about a matching path and command, not proof that every file called per.exe on every computer is the same threat.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft’s security guidance treats unknown software as higher risk and defines malware as code that compromises user security. In practical terms, you should establish what your copy does before deciding whether to repair, quarantine, remove or leave it alone.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

How to identify the copy that is running

Do this before deleting a file or attempting a system repair. Record the evidence so you can compare it with scan results and restore a legitimate application if necessary.

  1. Open the process details. Press Ctrl+Shift+Esc to open Task Manager. On Windows 11 or Windows 10, select Details, locate per.exe, right-click it and choose Open file location. If it starts only during boot, open Startup apps, select the entry and note its command or use Open file location where available.
  2. Copy the full path and command line. A path under a program’s own installation folder is different from a copy in a temporary or user-writable folder. Pay particular attention to a command that matches C:WindowsSystem32per.exe internat.dll,LoadKeyboardProfile, because that combination is the one documented as undesirable.
  3. Check Properties. Right-click the file, choose Properties, and inspect the Digital Signatures tab and the listed publisher. A missing signature, an invalid signature, an unexpected publisher or a signature that cannot be verified increases the risk. A valid signature is useful evidence, but it is not a complete safety guarantee.
  4. Record the file hash if you need to compare copies. In an elevated Command Prompt, you can run certutil -hashfile "C:fullpathper.exe" SHA256. Keep the resulting hash with the path and signature information. Do not replace the file merely because its hash differs from another copy; different legitimate applications can use the same filename.
  5. Identify the parent process. In Task Manager, add the Parent process ID column if it is available, or use Microsoft’s process-inspection tools to determine what launched per.exe. An unexpected script, temporary executable or recently downloaded program as the parent deserves additional scrutiny.

When is per.exe suspicious?

Use the following signals together rather than relying on one clue. They help distinguish a potentially unwanted program from a legitimate application that happens to use the same name.

Signal What it suggests What to do
Exact System32per.exe internat.dll,LoadKeyboardProfile startup command Matches the undesirable entry documented by BleepingComputer and associated with Troj/DwnLdr-FDP. Run updated Microsoft Defender scans, including Defender Offline if the behavior persists; do not add an exclusion.
File in a temporary, downloads or other user-writable folder Could be a recently dropped or impersonating executable, although location alone is not conclusive. Check publisher, signature, parent process and recent downloads, then scan before taking action.
No trustworthy digital signature or an invalid signature Identity of the publisher is not established. Treat it as untrusted until a security scan and application records identify it.
Startup entry appeared after installing a known application and points to that application’s folder May be a legitimate helper process. Verify the application’s publisher and use its repair or uninstall option rather than deleting the executable manually.
Repeated alerts, browser changes, unknown extensions or new scheduled tasks Could indicate unwanted software or persistence. Complete the malware-response workflow and review persistence locations.

Why per.exe errors or startup entries appear

There are two broad problem categories, and the remedy differs for each.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Malware or unwanted software

A malicious or unwanted program may register itself to run at startup, use a familiar-looking filename and generate errors after a component is quarantined or removed. The documented BleepingComputer entry is an example of why a startup command needs investigation rather than automatic approval.

Corrupted Windows components

If Windows reports that a system file is missing or damaged, the error may result from component corruption rather than a malicious per.exe. An interrupted update, disk problem or damaged component store can leave protected files inconsistent. Microsoft’s repair sequence is DISM first, followed by System File Checker (SFC).

A legitimate application that was changed or removed

An application can retain a startup reference after an update or partial uninstall. If the file’s publisher and installation path are trustworthy, repair or reinstall that application instead of treating the executable as malware.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Safe malware-response procedure

Use this sequence when the path, command line, signature or behavior is suspicious. Keep the full manual process separate from Windows component repair; running system-file commands does not remove an unrelated malicious startup entry.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Disconnect only when necessary. If the computer is actively sending suspicious traffic or showing signs of account compromise, disconnect it from the network while you preserve the path and command-line information. Do not delete files before recording their locations.
  2. Update Microsoft Defender security intelligence. Open Windows Security, choose Virus & threat protection, open Protection updates and select Check for updates. Scan with current definitions rather than relying on an old result.
  3. Run a full scan. In Virus & threat protection, choose Scan options, select Full scan and start it. Allow the scan to finish; a quick scan is not an equivalent check of every location.
  4. Use Defender Offline when unwanted behavior persists. Microsoft recommends Defender Offline for persistent unwanted software. In Scan options, select Microsoft Defender Offline scan and save open work. Windows will restart into its offline scanning environment, then return to Windows when the scan is complete. Review the result in Protection history.
  5. Quarantine or remove detections through Windows Security. Follow the action offered for the detected item and confirm the result in Protection history. Do not restore a detection merely because the filename looks familiar; first verify the publisher and path.
  6. Do not create an exclusion to silence the alert. Microsoft warns that an exclusion stops real-time checking for the excluded item and can leave the device and data vulnerable. An exclusion is not a repair and should not be used to make a startup error disappear.
  7. Review persistence after the scan. Check Task Manager > Startup apps, the Startup folders, scheduled tasks, services, browser extensions and recently downloaded programs. Remove an entry through the owning application or Windows management interface only after you have identified it. A scan that removes a file can leave a broken startup reference behind.
  8. Protect accounts if compromise is plausible. From a known-clean device, change important passwords after scans finish. Prioritize email, financial, work and administrator accounts, and review recent sign-ins and recovery details.

Repair Windows component errors with DISM and SFC

Use these commands when Windows reports missing or corrupted system files, or when the error remains after malware checks and the identified file belongs to a Windows component. They are intended for a running Windows installation. You need an administrator account.

1. Run DISM first

  1. Open Start, type Command Prompt, right-click it and choose Run as administrator. Approve the User Account Control prompt.
  2. Enter DISM.exe /Online /Cleanup-image /Restorehealth and press Enter.
  3. Wait for the operation to complete. DISM repairs the Windows component store and supplies the repair files that SFC may need. Do not close the window because progress can pause for an extended period.

2. Run System File Checker

  1. In the same elevated Command Prompt, enter sfc /scannow and press Enter.
  2. Wait until verification reaches 100 percent. Microsoft describes this command as scanning protected system files and replacing corrupted files with a cached copy.
  3. Read and save the final message. It may report that no integrity violations were found, that corrupted files were repaired, or that some files could not be repaired.

3. If SFC cannot repair everything

Do not download a replacement per.exe from an EXE or DLL download site. Record the SFC result and inspect the Component-Based Servicing (CBS) log for the affected files. Use Microsoft’s documented recovery options for the Windows edition and condition you have rather than copying an executable from another computer. If the path and signature identify a legitimate application instead of a protected Windows file, use that application’s repair or reinstall process.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to do when Windows will not start

If the computer cannot reach the normal sign-in screen, use the built-in Windows Recovery Environment rather than repeatedly deleting files from another installation.

  1. Enter Windows Recovery Environment. Windows may open it automatically after failed starts; you can also reach it from installation or recovery media for the same Windows installation.
  2. Select Troubleshoot > Advanced options > Startup Repair.
  3. Choose the Windows installation and provide administrator credentials if requested.
  4. Let Startup Repair complete and restart the computer. Microsoft says this tool targets missing or damaged system files, corrupted boot configuration data, a damaged master boot record, incompatible drivers and registry errors.

Startup Repair addresses boot failures; it is not a substitute for a malware scan. After Windows starts, update Defender and complete the full or Offline scan described above.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If the file belongs to a legitimate application

When the publisher, signature, path and installed-program records agree, avoid manually deleting the executable. Removing a file that an application still needs can create a new error and leave its startup registration orphaned.

Finding Recommended action Why
Trusted publisher, valid signature and expected application folder Open Settings > Apps > Installed apps (or Apps & features on older Windows), select the application and use its repair option if offered. Repairs the installation while preserving files and registrations the application needs.
Repair option fails or the application is damaged Uninstall it through Windows or the vendor’s uninstaller, restart, then reinstall from the publisher’s legitimate distribution channel. Recreates missing files and startup entries without downloading an isolated executable.
Publisher cannot be verified or the path is unexpected Do not approve it as safe. Complete Defender scans and remove or quarantine it only after reviewing the detection and persistence entry. Identity has not been established, so manual deletion could either miss persistence or damage a needed program.

Can you delete per.exe?

Only after you know which application or threat owns the file. A file matching the documented undesirable startup command should be handled through Defender’s quarantine or removal workflow and by deleting its persistence entry. A file with a verified legitimate publisher should be repaired or uninstalled through that application.

Do not force-delete a running executable, change permissions to remove it, or use a random “cleaner” to erase the file. If Windows says the file is in use, that is a reason to identify the parent process and persistence mechanism—not a reason to disable security protections. If a security product has quarantined the file, leave it quarantined while you verify that no legitimate application is broken.

Choosing the right response

Situation Primary path What it can and cannot solve
Suspicious path, signature or startup command Updated Defender full scan, then Defender Offline if the behavior persists; review persistence. Targets unwanted software. It does not repair unrelated Windows component corruption.
Windows is running but reports damaged system files Run DISM, then sfc /scannow in an elevated Command Prompt. Repairs the component store and protected files; it does not establish that an unknown third-party executable is safe.
Windows cannot boot Windows Recovery Environment > Troubleshoot > Advanced options > Startup Repair. Targets boot configuration and startup-related system damage; scan for malware after the machine starts.
Verified application is broken Application repair, then uninstall and reinstall if necessary. Restores that program’s files and registrations; it is not a malware-removal method.
File detected by Defender Quarantine or remove through Windows Security; do not add an exclusion. Removes the detected item while retaining security monitoring. It may leave a startup reference that you must review.

How to prevent the error from returning

  • Keep Windows and Microsoft Defender security intelligence current.
  • Install applications only from sources you can identify, and read the publisher information before allowing a program to start with Windows.
  • Review Startup apps after installing or removing software so obsolete entries do not accumulate.
  • Keep backups of important files. A backup gives you a recovery path if malware, a failed update or disk damage affects the installation.
  • Do not use DLL or EXE download sites to replace a missing file. Match the repair method to the owner: Defender for a detected threat, DISM/SFC for Windows components, and repair or reinstall for a legitimate application.

As an optional shortcut after you have identified the file and completed the appropriate security checks, Outbyte PC Repair can address more than 100 common Windows issues where possible, including broken system elements, invalid redirects and shared DLL problems, while also offering settings tweaks, temporary and cache cleanup, privacy and vulnerability checks, a real-time boost, file shredding and an app-crash log. It runs on Windows 11, 10, 8 and 7; its free trial is offered by category for at least two days before a paid subscription. It complements antivirus protection rather than replacing it, results vary, and no tool repairs every crash.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

DISMMalware TroubleshootingMicrosoft Defenderper.exeStartup RepairSystem File CheckerWindows Security

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.