What is MsMpEng.exe?

MsMpEng.exe is a legitimate file process commonly known as Service Executable. It belongs to Windows Defender, developed by Microsoft Corporation. Msmpemg.exe is used for security purpose in Windows computers. It is typically located in c:\program files. The working of MsMpeng.exe is to scan the files which are downloaded, if any suspicious thing is found it will terminate them preventing spyware infections from affecting the system.

Malware programmers write malicious programs and name the virus files after msmpeng.exe to spread malwares on the internet.

Affected Platform: Windows OS

How to check if your computer is infected with MsMpEng.exe malware?

If you notice your PC suffering in speed and performance, or if you notice msiexec.exe taking too much CPU usage, take the following steps to check against a possible virus attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If the file is located outside its designated path in c:\program, you should run an antivirus scan to get ride of the malware.

How to remove the MsMpEng.exe malware from system using Comodo Antivirus?

Step l: Download our award-winning Comodo Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC

Step 5: It will take some time for the Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the virus scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus will remove the MsMpEng.exe malware from your computer including all other malwares!

Malware Entries

Safe Entries

First Seen: 29 February 2012 at 1:24 pm

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	N/A	Executable	8c32eb59c33337eb 2de7b0bb7fee3519 f73e4a6d	6e39151462e2809f 348cf4573ad8dc39	Win32.Neshta .A	No	N/A	N/A	Taiwan	N/A
2	N/A	Executable	427da76f4f860c91 4f2f4e1286c345e2 5974f29b	07fc28e5da935eac ccae28e6f51150bc	Win32.Neshta .A	No	N/A	N/A	Philippines	N/A
3	N/A	Executable	d5e0aded17fb2c60 0368e0aadba8ad2a 35ca38d1	8e93e4268c76276b 4b20bd9c5f74bde2	Win32.Neshta .A	No	N/A	N/A	Germany	N/A
4	N/A	Executable	0e66daff5dd9ce69 5739d9cbc80d30ab cf47b7a8	f253640dc6ec5b6a c0075e3fa4a55579	Win32.Neshta .A	No	N/A	N/A	177.177.24.177/32	N/A
5	NULL	Executable	d08a83d07b8a813c b6d5c945ca3ae0b9 5383b7ab	4a1beea9719e96a1 b61d1f1a04749edc	Unclassified Malware	No	0.0.0.0	0.0.0.0	Internal Submission	N/A
6	Microsoft Corporation	Executable	58638f8d917ee4e0 f29e3405dda8999d 4dde924a	1e44fc33afc1366d 3489b4fdcfbf3ae1	Unclassified Malware	No	1.0.0.0	1.0.0.0	United States	N/A
7	N/A	Executable	064237c8e239110a a8122d8878161738 cee22068	1b0f4bbf848b0448 f349210370691592	Win32.Neshta .A	No	N/A	N/A	Ukraine	N/A
8	N/A	Executable	d0f0cd159aa8576d c46af40aa34b3cb9 f908bb96	5f175086cbd90f28 6066ed2328460b2b	Win32.Neshta .A	No	N/A	N/A	Internal Submission	N/A
9	N/A	Executable	73247aeaccea8145 10adb6cbe9a93ea4 deab8d06	8eee8c2cfc452187 759cb4fe604f822f	Win32.Neshta .A	No	N/A	N/A	Romania	N/A
10	N/A	Executable	dc1744637d838a42 41338245d79a3109 ecd9f8e1	a661a993572df9e9 5786f77fde7f98e1	Unclassified Malware	No	N/A	N/A	Ireland	N/A

Prev 1 2 3 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 21 December 2010 at 1:23 am

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	Microsoft Corporation	Executable	85536ad6afee43b7 28ed12ee8cffca41 f74f6446	ca2de21d04a42228 b707abce64ebbc8b	Yes	4.18.1909. 6 (WinBuild. 160101.080 0)	4.18.1909. 6	United States
2	N/A	Non-executable	12f5c381e54677f7 10d9d8f51a14b818 be2014e9	5a82d61ffe1c2508 8e8f3e0474fb396c	No	N/A	N/A	United States
3	Microsoft Corporation	Executable	4f40e568e2c63c6a af4d28157bafa5c0 c1694ab9	f6b04d08ecc4b9ff 446cab52ec622618	Yes	4.18.2001. 10 (WinBuild. 160101.080 0)	4.18.2001. 10	United States
4	Microsoft Corporation	Executable	85536ad6afee43b7 28ed12ee8cffca41 f74f6446	ca2de21d04a42228 b707abce64ebbc8b	Yes	4.18.1909. 6 (WinBuild. 160101.080 0)	4.18.1909. 6	United States
5	Microsoft Corporation	Executable	dd4ceb342f1d164c d829f912c2a021cd c34ec902	431e67d51e3bb3d3 9cb1000c7ab57482	Yes	4.1.0522.0	4.1.0522.0	Indonesia
6	Microsoft Corporation	Executable	eca00355fba016c7 1facb4f053f251ca b373c85d	30c1813c5b22c50b 90c58372a114ac01	Yes	4.18.23100 .2009 (8fcbd1c22 d82af16ba3 4560e1a705 91413e88d1 7)	4.18.23100 .2009	United States
7	Microsoft Corporation	Executable	8e7d5a249d0c94b1 96eb5905a6a0cc6b 5ed2b939	b69fde3e8a7c533a b24093b4bc9fd895	Yes	4.0.1540.0	4.0.1540.0	Internal Submission
8	Microsoft Corporation	Executable	c43fdf2f9f7c52b7 e2acc1f8fe6f8b5e a9279adc	342a0eed126646e3 fec58d1bdc3b5b3d	Yes	4.18.2010. 7 (WinBuild. 160101.080 0)	4.18.2010. 7	10.108.22.231/32
9	Microsoft Corporation	Executable	9ea579c17ee637b4 bd1b896a14959e48 b270b310	0102b6c269c124be 8366e1217e5774ef	Yes	4.7.0214.0	4.7.0214.0	United States
10	Microsoft Corporation	Executable	e67bd06e8e333846 f8bf83b8795ae1aa 0cce87e7	d8c0693dd3f86692 f4c151a476f82939	Yes	1.1.1593.0	1.1.1593.0	10.224.1.59/32
11	N/A	Non-executable	4b58b69ea7aa84d6 f4afd7632236c138 ef39c76b	c4fa39c9a0815e7b ab36f91576060968	No	N/A	N/A	United States
12	Microsoft Corporation	Executable	9dce35f5fc329f3a 55d004c53d83f74b 8b9a2055	2fc92d50283b4644 4489ef072a658ddc	Yes	4.13.17134 .619 (WinBuild. 160101.080 0)	4.13.17134 .619	United States
13	Microsoft Corporation	Executable	222deb7967c889bd 544a90b5a2b97a54 ca56a76f	1c68e2c011a0dd1b c9436358dfe81594	Yes	4.7.0214.0	4.7.0214.0	United States
14	Microsoft Corporation	Executable	4aee6a79517ed56d f397115bb8bbfa74 baa12638	3ea6a1a744d79328 ae7e2c6fae4c4420	Yes	4.3.0216.0	4.3.0216.0	Internal Submission
15	Microsoft Corporation	Executable	fb350df576841443 fb3dbfac047957c7 5c261e60	cfce43b70ca0cc4d cc8adb62b792b173	Yes	3.0.8402.0	3.0.8402.0	10.224.1.59/32

Prev 1 2 3 4 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “MsMpEng.exe”

What is MsMpEng.exe?

How to remove the MsMpEng.exe malware from system using Comodo Antivirus?