How to Remove the Powercfg.exe virus from PC

What is Powercfg.exe?

Powercfg.exe is a legitimate file. It is also called Power Settings Command-Line Tool. It is used to control all configurable power system settings and it is associated with Mircorosft Windows Operating Systems and it is developed by Microsoft Corporation. It is commonly stored in C:\Windows\System32. The malware programmers or cyber criminals write the different types of malicious program and name it as powercfg.exe to damage the software and hardware.

Affected Platform: Windows OS

How to check if your computer is infected with powercfg.exe malware?

The type of malware programs varies and the mode of infection also varies. Any of the following can alert you if the system is infected.

If the internet connection fluctuation is high
If the powercfg.exe file is taking more of your CPU memory
If the system performance is very low
If the system is redirected to some strange websites
If the system is getting some annoying popup ads

To confirm that go to task manager by pressing the combination of keys ctrl+alt+del and go to the process tab and right click on the Open.exe to check the location, if the location is C:\Windows\System32, then the system is not affected by powercfg.exe, if the location is somewhere else then the system is affected by powercfg.exe malware.

How to remove the Powercfg.exe file from system using Comodo Antivirus?

Step 1: Download the award-winning Free Internet Security.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the antivirus.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus will remove the Powercfg.exe virus from your computer including all other malwares!

Malware Entries

Safe Entries

First Seen: 25 October 2011 at 1:17 am

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	N/A	Executable	fa3b14f9c327b042 1abae1140e4fd0e4 4c348618	a5f668d99c70b720 0cea1b32caa1da95	Virus.Win32. Virut.CE	No	N/A	N/A	Pakistan	N/A
2	Microsoft Corporation	Executable	2b39d580d7a18cbf 588598ffbdc4936a 2182b505	bb0056270670b33e e5c484fabde3029a	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Indonesia	N/A
3	N/A	Executable	cf12bee758465291 cad639b9f58f2cc3 d88f1ae9	4781479231fe04a6 6317683dc73000cc	Virus.Win32. Virut.CE	No	N/A	N/A	197.211.57.71/32	N/A
4	Microsoft Corporation	Executable	30698bdf756b6979 d6cfbc14668d4ede a0f24a6a	b3745031f37f6a1d d3742e7947ec689d	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	105.107.60.22/32	N/A
5	Microsoft Corporation	Executable	0139b50eb933a15b 8ccac6dd87a95a00 380dccc7	2194454f2255ca81 1c7597a46f56ec36	Virus.Win32. Virut.Ce	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Nigeria	N/A
6	N/A	Executable	bc5c097571316195 c4505e689db8501a f9a494ea	5d5b0514815ce7f4 e3b05c4fcb799e77	TrojWare.Win 32.Banbra.rh	No	N/A	N/A	Russian Federation	N/A
7	Microsoft Corporation	Executable	6b393803045a06df 3f2818b59b53d161 4405144b	8768ea44b44d4f74 885fc35bfc88c894	Virus.Win32. Parite.gen	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Bulgaria	N/A
8	Microsoft Corporation	Executable	e4712499899b0a1a eacca801da1db4dc da8a2014	ff581ac79f0353f1 358027553d37a596	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	103.108.21.119/32	N/A
9	N/A	Executable	4932f0781295b627 bce5baffdabb2b3c 6ece3822	38a0c01eda85a828 14b74f52eebba955	Virus.Win32. Virut.CE	No	N/A	N/A	Egypt	N/A
10	Microsoft Corporation	Executable	50f0c0d95afcc9d7 1ec1da8784fe5743 5329d5ae	0d8e2957e7bd088b 2209edde884218cf	Virus.Win32. Parite.gen	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Turkey	N/A
11	Microsoft Corporation	Executable	6095f13a90ff136b f96f4372b9394131 717a10a1	a8ddcc89b295cf61 98f70ef287516f61	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Egypt	N/A
12	Microsoft Corporation	Executable	68c71f85967dd52a 078c3983e524935a bfbeb505	4257fee1ac4109c2 3acf2fd83dac7443	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Morocco	N/A
13	Microsoft Corporation	Executable	d579685a517937e2 f106adbd75c77b57 5d0d6a3a	bab715c169733d13 9e66ebea493588b4	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Algeria	N/A
14	N/A	Executable	beb6c99e1cb38925 a2bbc2b955fec77e ef992929	e590aa8b17ff5b04 cd969a15f1c83049	Virus.Win32. Virut.CE	No	N/A	N/A	Australia	N/A
15	Microsoft Corporation	Executable	4c9443f9217b6083 2b750c8d67b80c37 1029e641	c2741b8d9141f4a3 3e46d5bfb19c7ee3	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	197.210.47.180/32	N/A
16	Microsoft Corporation	Executable	0cf649a37f03af56 0b40ae7c7585cc11 20b32545	36bfa194ae97a8c1 16db9ac7d7af6b6a	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	India	N/A
17	Microsoft Corporation	Executable	7b4c3bcfc933a8dd 66cdec59fe953f1d f11ddd5f	39eed09fac0db7ac 9ab929b741c29b79	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Europe	N/A
18	Microsoft Corporation	Executable	fa82e7b0b4729865 efcff3d7541b7e02 19d2a1f0	33a472615cf3f7da 2db758e8dcffcacb	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	102.41.88.6/32	N/A
19	Microsoft Corporation	Executable	db420a5fd49f6fd5 9ab20f06aaf5f7c4 c79d7852	fb2c297c53f582a5 ac8e7dccb581c561	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	151.236.168.34/32	N/A
20	Microsoft Corporation	Executable	eddcf35181304c53 b44185e930b7ff16 50cd2fa4	19698d675bf84b72 00e4d2ae795f3c02	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	United States	N/A
21	Microsoft Corporation	Executable	021aa6ca518dfbf6 7da6d4048971af41 4926c415	818660ca6da1e6e1 e1f132503f931bcd	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	197.210.44.78/32	N/A
22	N/A	Executable	cdf81d139baeb93c 26c86f337c2c097c a2f5d928	027dda4c48ef0b32 ee03a98b53d707c2	Win32.Neshta .A	No	N/A	N/A	Turkey	N/A
23	N/A	Executable	604c2e462147dbea 97de135b17f324dd 9415908c	b6a598255d687ba9 5d67ec2f3deb4867	Virus.Win32. Virut.CE	No	N/A	N/A	United States	N/A
24	N/A	Executable	1fa49736634d6aa3 bc0761020c6f8929 7f03cc74	4c2cb95252349c54 a2563473bd8777f8	Virus.Win32. Virut.CE	No	N/A	N/A	Iran, Islamic Republic of	N/A
25	Microsoft Corporation	Executable	aa854f29bfaac298 b2784849b37feb4a df9bc0b0	2f0e54496108eb36 4c21599a1861f9a5	Virus.Win32. Expiro.SR	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	169.159.118.228/32	N/A
26	Microsoft Corporation	Executable	0f7ae70ef54a4bfa 17d73a1d8fd82d9a 67dbcbbb	56faa7042aae6dd7 d7e25ab6a62087dc	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	United States	N/A
27	N/A	Executable	c622f8f7356872ec 36f3e1640b46941f 32664665	5e52eb2ca51e16fe 72733edd6f247fbb	Virus.Win32. Virut.Ce	No	N/A	N/A	Belarus	N/A
28	Microsoft Corporation	Executable	4f106a4781d2f03f eb1e14586c108970 2fe1e08e	99ea3bf7e042fca8 8d571cf8236fd720	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	129.205.124.245/32	N/A
29	Microsoft Corporation	Executable	a625a2f9f8ceca01 edb48cb047ed8e22 433b896c	9db73e398524eab3 c2665b8acd79c5ab	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	India	N/A
30	Microsoft Corporation	Executable	bde4a455fccece3c 28c59296aa08f360 89e9bc37	78a0b2b544d60c43 e3a527b94d3a6aae	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	197.32.15.247/32	N/A
31	Microsoft Corporation	Executable	7058d9e3834b81de 08d782177cc4db4c 251aee68	d43f8c1af203e376 08545e2198995a9f	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Russian Federation	N/A
32	Microsoft Corporation	Executable	f3a24c52d5e81d58 8b14c016a931b5e6 0c4553b2	f059d08662fb0915 0058ba47f8433449	Virus.Win32. Virut.Ce	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Nigeria	N/A
33	Microsoft Corporation	Executable	e92409a47e39f230 4c26771d8084a20d 0ef9f9f4	b486f529a2f53565 3b261480c121a8d5	Virus.Win32. Expiro.CG	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Turkey	N/A
34	N/A	Executable	6e4eff28cfa89fd8 051cb58038117005 3596384b	c114e6b961ced182 b57ee6af8409b7b6	Virus.Win32. Virut.Ce	No	N/A	N/A	United States	N/A
35	Microsoft Corporation	Executable	4fe30d381b817715 642ce5ab4ff48fa5 08f11ed5	f94e3f9d6fb932dc 264f73996e89377f	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	India	N/A
36	Microsoft Corporation	Executable	e45cdc10da190ff0 ce30920fa1e77a9e 927d2ed5	dc34337e90e8fc88 406bb597b8ceac8f	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Mexico	N/A
37	Microsoft Corporation	Executable	d032548704f93612 cd5ebcaa2f317907 76373163	66ebe434749300fe 5b214f0beac40da8	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Russian Federation	N/A
38	Microsoft Corporation	Executable	6e55c6093613dff1 756874dbc15cfef7 01ce8a5d	cf32788d21f0c570 d41b95441d7d2f00	Virus.Win32. Sality.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Russian Federation	N/A
39	Microsoft Corporation	Executable	209b610f4506bcbf aff4a3b0441acd89 4e43a4d7	1e1894c6e83ec87e edee4cdbc2cab800	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	105.230.114.139/32	N/A
40	Microsoft Corporation	Executable	5879fde6470103b6 2aca28dc9e49f199 a45f3fef	2a372ca8b9ef9358 a40cf5dca7b5f0a1	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Turkey	N/A
41	N/A	Executable	c96b5035e7a8a39f 99c8fd3d5b772852 46a7073f	4f83cb27b1b360a5 dfc6002ff626770a	Virus.Win32. Virut.CE	No	N/A	N/A	176.88.226.192/32	N/A
42	Microsoft Corporation	Executable	24c1edfaebdd057e a5c3358d6d6eaacf 3d6ba9a6	9a1b509405ec28b0 8b59fbebcaf820f7	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	102.43.29.105/32	N/A
43	Microsoft Corporation	Executable	a59c9d237b2c2254 c62412aab553999a f5619f0a	3aaf3ad9e41304a7 b23c6e7d6de65632	Virus.Win32. Expiro.naf	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Russian Federation	N/A
44	Microsoft Corporation	Executable	3a0fe14521719882 e2656052951e762a fdb62ae4	2a494cd9020849e0 05fa2ab42b1c68f0	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Pakistan	N/A
45	Microsoft Corporation	Executable	fa9c5cc550f88e2f 8b91bbbd000a19e0 29d52d92	5cae56fd4c9e0b39 42abbb9fc733d315	Virus.Win32. Expiro.ew	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	United States	N/A
46	N/A	Executable	a6e7ee3cad39493d 75fd35f6af0778bc b90bf785	4b5c575626e6eb38 5886615cf045af5a	Virus.Win32. Virut.CE	No	N/A	N/A	Nigeria	N/A
47	Microsoft Corporation	Executable	65e001519f6a7021 cfcde87f5e571247 959d21cd	7c10f573c55a70f7 8884f32c73622fe8	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	United States	N/A
48	N/A	Executable	703efe9bd7cd9e71 2fd0f13bcf75d022 de0b87bd	472b645220361d9c 7d508bd018cd863f	Virus.Win32. Virut.CE	No	N/A	N/A	Indonesia	N/A
49	Microsoft Corporation	Executable	363319b092e61e1f 22cc0ae9a39f3607 39a480f0	e2cc6fc308147d7e 21294c9d1b200b43	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Canada	N/A
50	Microsoft Corporation	Executable	81e81cdc3419265f b177718b21472cf1 a93a6297	fec3b209ac3cf473 c09249b8093da08e	Virus.Win32. Virut.Ce	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	197.214.249.165/32	N/A
51	Microsoft Corporation	Executable	2b89456a832bee6d b4c2df4710ddb776 188ba7fd	b00f137d12b04261 3a9d34f23272bacb	Virus.Win32. Expiro.R0	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Ukraine	N/A
52	Microsoft Corporation	Executable	a720da2f39d4eca9 ad767acbe4ad0c12 bbb74b02	e4ddd997ffe37b24 b9313c81a1cb659e	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Italy	N/A
53	Microsoft Corporation	Executable	fb990328e6ad500a e8c755d91187943f 639912a6	5bdb49b7c743bc94 252e97c81120f4f0	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Italy	N/A
54	Microsoft Corporation	Executable	e54bb62c39ca4204 ef4db88736205e73 98e56d89	59211cb1f19d4246 bfb8014d79611a6b	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Algeria	N/A
55	Microsoft Corporation	Executable	e5086bb772097173 6baf02fc5fd339c6 dbc7e613	5265332d0a6acd01 3b16b5b3310264d0	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Egypt	N/A
56	Microsoft Corporation	Executable	d634c32a33ae87a8 62cd6ef4a8c68758 aec83cd3	c22d3aca48947df1 6ff8b8778e51c8dc	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Pakistan	N/A

Prev 1 2 3...14 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 10 March 2018 at 2:55 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	Microsoft Corporation	Executable	cb50353909cd4d30 985e6684b155c941 e0131890	f2b57888627ea4c3 c8e902079a7194d2	No	10.0.21387 .1 (WinBuild. 160101.080 0)	10.0.21387 .1	United States
2	Microsoft Corporation	Executable	5cc1f9d40a7611ca a092dd77a51eecc6 2c1d9b9c	47a6c275be719f55 00a4ff67357ccfb1	No	10.0.20215 .1000 (WinBuild. 160101.080 0)	10.0.20215 .1000	Romania
3	Microsoft Corporation	Executable	4cf6e83239505fcf 1056f293a25fa6c0 adc644e0	f385f369d87be5db 7ad15b33a5678399	No	10.0.22593 .1 (WinBuild. 160101.080 0)	10.0.22593 .1	India
4	Microsoft Corporation	Executable	34a092e7cedb8388 0d943422b156f817 3b5903fe	ac895e0d345aa127 1276a3fa3bba3eac	No	10.0.20215 .1000 (WinBuild. 160101.080 0)	10.0.20215 .1000	Romania
5	Microsoft Corporation	Executable	9adb16a18ed1650f 5f5a7e6bd83dbd3d fd1963e1	9ca38be255fff57a 92bd6fbf8052b705	No	10.0.19041 .1 (WinBuild. 160101.080 0)	10.0.19041 .1	104.238.128.144/32
6	Microsoft Corporation	Executable	b2e02ff6a78ef9f0 a309fcc86971f3ad fcd2d538	cdb207f785d9f2a2 c3480b0f0b9d7f7c	No	10.0.17074 .1002 (WinBuild. 160101.080 0)	10.0.17074 .1002	United Kingdom

Prev 1 2 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “Powercfg.exe”

What is Powercfg.exe?

How to check if your computer is infected with powercfg.exe malware?