How to Remove “ShFolder.Exe”

What is ShFolder.Exe?

ShFolder.Exe is a legitimate file process developed by Microsoft Corporation. This process is known as Win32 Cabinet Self-Extractor and it belongs to Windows Operating System. You can locate the file in C:\Program Files. The virus is created by malware authors and is named after ShFolder.Exe file.

Affected Platform: Windows OS

How to check if your computer is infected with ShFolder.Exe malware?

Keep an eye for the following symptoms to check if your PC is infected with ShFolder.Exe malware:

  • Unstable internet connection
  • Browser redirects to unwanted websites
  • PC performance slows down
  • Browser is bombarded with hordes of popup ads
  • System screen freezes repeatedly

If you find any of  the above mentioned symptoms, take the following steps to be sure about the malware infection:
1) Press CTRL+ALT+DEL keys to open Task Manager.
2) Go to the process tab and right-click on the ShFolder.Exe file and open its location.

If the file is located outside C:\Program Files, then you should take measures to get rid of the malware.

How to remove ShFolder.Exe  malware from system with Comodo Cleaning Essentials?

Comodo Cleaning Essentials (CCE) incorporates antivirus software with unique features like auto-sandboxing to identify and obstruct every suspicious process running on an endpoint with a single click. To remove ShFolder.Exe malware using CCE, follow the steps mentioned below:

Step 1: Download the CCE suite.

Step 2: To start the application, double-click on the CCE.exe file.

Step 3: It then probes the antivirus to initiate a full system scan to identify and remove any existing malicious files.

Step 4: If threats are found during the scanning, you will be prompted with an alert screen.

Step 5: Comodo Cleaning Essentials will remove ShFolder.Exe  malware from your computer including all other malwares!

8

Malware Entries

First Seen: 27 October 2011 at 8:02 am
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable 0dd833574e154695
ebec318121101eb2
338f3b2e
58b168d9fa74e950
b826767148f2be15
Virus.Win32.
Sality.gen
No 5.50.4027.
300
5.50.4027.
300
Indonesia N/A
2 Microsoft Corporation Executable 93a20fbd067afb38
03dc64d26d15a839
7c6fd662
c568e88214a46d4c
33a802140d7de267
Virus.Win32.
Sality.gen
No 5.50.4027.
300
5.50.4027.
300
Ukraine N/A
3 Microsoft Corporation Executable 4d1c307439aa55ea
cb6b5407cb11deae
42bbe451
d2ab3c923c87b4fa
e1d125907069f432
Virus.Win32.
Sality.gen
No 5.50.4027.
300
5.50.4027.
300
Brazil N/A
4 Microsoft Corporation Executable 1da080b75a825716
4222b55895a20127
64a76524
9a20b615cf857c9a
9681e204b3d165a4
Virus.Win32.
Sality.gen
No 5.50.4027.
300
5.50.4027.
300
Ukraine N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
18

Safe Entries

First Seen: 04 July 2008 at 3:20 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Microsoft Corporation Executable cda4bdbd0fc32433
927829685cbfe167
3de96556
ed7f78288f3781e9
fc5090dc1a50a267
Yes 5.50.4027.
300
5.50.4027.
300
Internal Submission
2 N/A Non-executable 4052ef92ce349f24
4b7f7d76b7e7c09c
c53713e1
c457424c77e09774
3cd27cbecd1a8aeb
No N/A N/A 198.20.167.84/32
3 Microsoft Corporation Executable cda4bdbd0fc32433
927829685cbfe167
3de96556
ed7f78288f3781e9
fc5090dc1a50a267
Yes 5.50.4027.
300
5.50.4027.
300
United States
4 Microsoft Corporation Executable cda4bdbd0fc32433
927829685cbfe167
3de96556
ed7f78288f3781e9
fc5090dc1a50a267
Yes 5.50.4027.
300
5.50.4027.
300
United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security