How to Remove the Netsh.exe virus from PC

What is Netsh.exe?

Netsh.exe is a legitimate file. It is a process known as network command shell, and belongs to software Microsoft Windows operating system. It is commonly stored in c:\windows\system32. The malware programmers or cyber criminals write the malicious programs and name it as netsh.exe and spread infection via internet to damage the software and hardware.

Affected OS/Platform: Windows

How to find if the system is affected by netsh.exe malware?

When the system performance is very low or if the Internet connection is getting highly fluctuated or if you find some annoying popup ads or if you are redirected to some strange websites, then the system might be affected with netsh.exe. To confirm that go to the task manager by pressing the combination keys ctrl+ALT+DEL and go to the process and right click on netsh.exe and open the location, if the location is

C:\windows\system32. Then the system is not affected by netsh.exe malware, if the file is located somewhere else, then the system is affected by netsh.exe malware.

How to remove the netsh.exe file from system using Comodo Virus Protection?

Step 1: Download and install the award-winning Internet Security.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC.

Step 5: It takes some time for Comodo Internet Security to update the software for virus protection.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus will remove the netsh.exe virus from your computer including all other malwares!

Windows OS PC Security Softwares:

Related Resources:

Website Malware Directory Resources:

Malware Entries

Safe Entries

First Seen: 23 October 2011 at 11:23 am

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	Microsoft Corporation	Executable	5f76321559fb7641 e2a25a33adc86bbd e6666e7d	951020f6b0b4bbff 33081bd43e2d8340	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	154.120.89.179/32	N/A
2	Microsoft Corporation	Executable	c168c8ea2b69b78e ce77d8201eee80c2 22ce7f24	faa0df1d73c22c44 4e48a170f66b62f9	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Italy	N/A
3	N/A	Executable	96538b786ce4e0f2 f0323baaf74ef154 100d5d7f	94fdfd829279ab67 04a101c1ed76ec1c	Virus.Win32. Virut.Ce	No	N/A	N/A	United States	N/A
4	N/A	Executable	93ece9f661806c0a 38531ef6f62d6af5 a3dab0c2	530981655937763b 69d43874c8256e80	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
5	Microsoft Corporation	Executable	82724fe0d72aaeb7 6e9bbb14a090d008 9e7b62a6	f3b1f53067a60710 b2023f6626cb80a8	Virus.Win32. Virut.Ce	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Pakistan	N/A
6	N/A	Executable	022e96a63ab79e79 2fa240fe2ad71da8 dcff269d	0c061ed966e83a09 21e6801c09be2cfb	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
7	N/A	Executable	c6f769fbe7d9e178 c4401dca5e18cca1 2c394f07	d08255eb68a8877a 83fea7ed7f97fca1	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
8	Microsoft Corporation	Executable	c5cbb9901f001890 fc0fb933a3fe1fc8 c86c3fa5	1107bf2987b59f4e aa8cae9def532078	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Europe	N/A
9	N/A	Executable	47ecedc627954fd0 6ffd76a5ae6c712e 697a980d	6b37ef1829c5dd50 5ae72ea0263b77b5	Win32.Neshta .A	No	N/A	N/A	Turkey	N/A
10	N/A	Executable	867ba85aa2a37e50 823ec672b019b933 3c6c3a7e	7f9c294db04491e4 c0e9fca459ce8611	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
11	N/A	Executable	ed5e8c202bb363c8 54539460ead6812b a17ee340	90a2a1098b3beaec 6c328c3277c81d3b	Virus.Win32. Virut.CE	No	N/A	N/A	102.186.20.3/32	N/A
12	Microsoft Corporation	Executable	dbab15a97c35f199 a5bbebb918c16432 e12a2036	60f2feea363941de 7f9fffca946daf5c	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Indonesia	N/A
13	Microsoft Corporation	Executable	234323cfaff5404e a34bd6284920b691 22677992	01b9a2da353a8550 01a10fb01e33c7b8	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Lao People's Democratic Republic	N/A
14	Microsoft Corporation	Executable	eaefb06682784b7e 989d50370218b79e 981da548	82d3051be90db56f 47cb8dfaae3aef15	Virus.Win32. Virut.Ce	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Nigeria	N/A
15	N/A	Executable	111e5d2eddd1c498 ef444c7dec8863fe 7717dd3f	ff7157b6d84aad1d 44b8ee67f2cb4a7a	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
16	Microsoft Corporation	Executable	7d82e8750875e668 431975bb81d9afba da0eeaa6	1d4fb6c882beb31c 1a2995564fe962bd	Virus.Win32. Virut.AW	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Pakistan	N/A
17	N/A	Executable	86a0b37d6496e40d b025968802dc2950 8f2feb38	edff5dae4197c235 7add0bab4b317db2	Backdoor.Win 32.Poison.as	No	N/A	N/A	Canada	N/A
18	Корпорация Майкрософт	Executable	0c985161c8245d1d adce1710e649a5ae 743f1332	31542a498bcf8c3d 0eba0b6097dbd72e	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Ukraine	N/A
19	N/A	Executable	b2b207f32e7dbe63 5a59a182fa5b7644 396e9820	86dd316fd939f5e9 2dc1cf58b2ce5a39	Win32.Neshta .A	No	N/A	N/A	181.66.169.99/32	N/A
20	N/A	Executable	0ccbdf395d207040 faf65c5cee940fcc 05962f33	b66f011161e3db80 d54c67b627649735	Virus.Win32. Virut.CE	No	N/A	N/A	156.209.206.31/32	N/A
21	Microsoft Corporation	Executable	2d722b6c63841478 ccfdab34172823e4 7a635a6e	682a170271392bff 5c3f7c6ae3130508	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Egypt	N/A
22	Microsoft Corporation	Executable	69a55f68d94a752f 6960acb4e4ee6485 f99b8bcb	6053071a123d5365 ca931b304cda97ef	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Egypt	N/A
23	Корпорация Майкрософт	Executable	ed36fe1a165df8af cccf4ca37dbe01af 291e597c	4e71e87d4a5dba3c eb23ef9d71f2225d	Virus.Win32. Expiro.R0	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Ukraine	N/A
24	N/A	Executable	750b04045280d14e 474bf65800c4dc48 b7c5fd05	5e6d1b931396b697 f389f2b5fdf87db0	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
25	Корпорация Майкрософт	Executable	ac90e63c823bfece 069d7017f25c620c c4221219	f75d02e94de09e58 77ed0e665aec8ed3	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Russian Federation	N/A
26	Корпорация Майкрософт	Executable	ff929a4e022dc624 ebd7b94e43bd19e2 1b63cdf6	feb41826d5e00c42 e79da1c8941a1c1b	MalCrypt.Ind us!	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Russian Federation	N/A
27	Microsoft Corporation	Executable	10a809633226146a 98fe0a671d22790a b1dd719c	a2bc517d4800a359 a076ac787186903f	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	102.43.29.105/32	N/A
28	Microsoft Corporation	Executable	16e15b5952e2feea 96af8b3536959759 36509fac	c5b42eeab3dd45cd 6a34dcc866275514	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Iran, Islamic Republic of	N/A
29	Microsoft Corporation	Executable	726424dad7e3abb6 c33c2b0f34ce6d11 5298dd40	1f4f65a3b3b11984 a636310fac86e598	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Romania	N/A
30	Microsoft Corporation	Executable	3de4afbcd3b3ed6a a4d45906487199c1 a694326f	e4ebafd7b4aab367 84565b4c47cac9c0	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Europe	N/A
31	N/A	Executable	d4465ca0d9e1eb77 559d53b3419a34fd a4094b05	ac2b85b0118a322a 99753ed997be1d01	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
32	N/A	Executable	20b980023337f792 32ce60a952a10875 776fe846	60c49d27b441851c 9e01b6bcf0ca74f6	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
33	Microsoft Corporation	Executable	20a35556d8cc15aa c20fbda0779c8c5d 3ce44641	369c26ebc7b0ade3 b330dfdf14444619	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	10.224.1.116/32	N/A
34	N/A	Executable	b73b2cd10055afbe 5aa2a77fcc080207 dee5b3c6	3d7724286747567f fd335752860c5d76	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
35	N/A	Executable	7a5cc1f86718ae77 5e3b83c686228a2d 029164d7	d329d28b7dd4dfdf 906a34f89e115411	Backdoor.Win 32.Poison.as	No	N/A	N/A	Isle of Man	N/A
36	N/A	Executable	443c890678335072 c1af40a1878d32a2 e89d4e16	8b77d7307d4e4087 35bd995b09bfe02a	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
37	N/A	Executable	a7c4fff3923dab76 63672476276b11c5 e07330ef	7f62655dc261b0a9 af42a8b734eb0fa8	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
38	N/A	Executable	07b3f819a0cad83d c34118440c880323 5e861a2d	7f21e65aae960756 e3836714426f2530	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
39	N/A	Executable	ddc0efecb740c63f 5d169ca7a13fc65d 35265f40	f3df3f8e0f46d339 dea78952e95210cc	Win32.Neshta .A	No	N/A	N/A	181.66.169.99/32	N/A
40	Microsoft Corporation	Executable	40776d7a7e049a94 d8139ee4a0ac904f 8f8cccd8	61dc42ccabfa2c21 099e98c083f29d32	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Egypt	N/A
41	Корпорация Майкрософт	Executable	5038e4939b57d741 35d08e816ca6b6a8 8fb874e2	8563f84b44b84f96 6ff9c1b82ab47e5f	Virus.Win32. Sality.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Ukraine	N/A
42	N/A	Executable	e1cee1688f15f83f 71a6ce4726540035 d132e596	bcf2d66de446940f 569a67654507d6a6	Backdoor.Win 32.Poison.as	No	N/A	N/A	United States	N/A
43	Microsoft Corporation	Executable	d5c538ce8aedfaa4 ec190cb3c962b653 e98c0aa8	cfe6ce6b46f0a508 5a943374c22af539	Virus.Win32. Expiro.SR	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	169.159.76.221/32	N/A
44	Корпорация Майкрософт	Executable	6d8026d562f2948c 9c1a76ec74ece8dc 7ac37f82	a5dc701ba867b303 a7192ce0d8f5c5ec	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Kazakhstan	N/A
45	Microsoft Corporation	Executable	dad1f4be5269e44e df940078a6798a80 3f737508	5cd59d178fb3ea2e 9ae3766f80231a4b	Virus.Win32. Parite.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Turkey	N/A
46	N/A	Executable	f778b65325c38f9f fd6db400ceeece5f 20281979	4a279e2653d097f7 aa0f2f2583dfce94	Backdoor.Win 32.Poison.as	No	N/A	N/A	Russian Federation	N/A
47	Microsoft Corporation	Executable	2ad332fb3f59413c cd0485b7a54d72d2 90885724	fb5594d1869fcc45 1f9cdf454459463e	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Indonesia	N/A

Prev 1 2 3...12 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 29 April 2009 at 10:34 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	Microsoft Corporation	Executable	092e4fac4f217fe8 4e793de453351ef7 274705dc	2e2a9f0cb26fddc2 a7e4f24154eb4cb7	No	6.3.9600.1 6384 (winblue_r tm.130821- 1623)	6.3.9600.1 6384	United States
2	N/A	Executable	2c2bb51e53241cdd 20933f99696d7a46 3de62589	bb19a05c6101dec7 c71d88de20d2ef28	No	N/A	N/A	United States
3	Microsoft Corporation	Executable	2f385ea20bcb972c a06e7d16e75dd891 55da844d	f2cec61504271832 3c6aabf76e751708	No	5.1.2600.0 (xpclient. 010817-114 8)	5.1.2600.0	Canada
4	Microsoft Corporation	Executable	204363b839673eed 9d675e667da29a32 f102750c	ca3b29f0b94e2802 eaf96dd4c219e74a	No	10.0.22468 .1000 (WinBuild. 160101.080 0)	10.0.22468 .1000	United States
5	Microsoft Corporation	Executable	4d3084c425fb56eb f64330591f04ce9b b8894965	f80b0bb7a0d15c8d 3698eb22eca25800	No	5.2.3790.0 (srv03_rtm .030324-20 48)	5.2.3790.0	Internal Submission
6	Microsoft Corporation	Executable	b9c17c94621bc201 d19f5e882be71df7 c8b11165	ec2a48495aaa91af 5965b1cd0ff6bba1	No	10.0.17127 .1 (WinBuild. 160101.080 0)	10.0.17127 .1	Colombia
7	N/A	Executable	087af1a928a387b1 b8437c9090b0b71b ed7125aa	9c0a94ae56fc7321 937d414436dd16fb	No	N/A	N/A	10.224.25.40/32
8	N/A	Non-executable	0d73029ec073c1a2 07a60109403ac8f2 0a9bf68b	cdd5bae7043e6435 01ea8a133802396a	No	N/A	N/A	10.224.1.59/32
9	N/A	Executable	aef69ea88bb0d204 990837b939d3e115 783fa588	68e9eb5e30a3e4ae f748e733d71e6aad	No	N/A	N/A	10.108.51.116/32
10	Microsoft Corporation	Executable	42a2098cf80ef917 b6374715914ffaa3 6f6b65df	4e89a1a088be715d 6c946e55ab07c7df	No	10.0.19041 .1 (WinBuild. 160101.080 0)	10.0.19041 .1	United States
11	N/A	Executable	c7c42a4a1e7864d2 83112a0407737231 2b0b1d3a	a16ddbb902ab20f9 67370504ac9bb64b	No	N/A	N/A	United States
12	Microsoft Corporation	Executable	9184e64c36629a1d cef084e19cc3e3be f78f2d7b	6f1e6dd688818bc3 d1391d0cc7d597eb	No	10.0.19041 .1 (WinBuild. 160101.080 0)	10.0.19041 .1	United States

Prev 1 2 3 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “NETSH.EXE”

What is Netsh.exe?

How to find if the system is affected by netsh.exe malware?