What is Psinfo.exe?
Psinfo.exe is a legitimate process file popularly known as Sysinternals PsInfo. It belongs to Sysinternals PsInfo, developed by Sysinternals. It is located in C:\Windows\System32 by default.
Malware programmers write virus files with malicious scripts and save them as Psinfo.exe with an intention to spread virus on the internet.
Affected Platforms: Windows OS
How to determine if your computer is infected with Psinfo.exe malware?
Look out for these symptoms to check if your PC is infected with Psinfo.exe malware:
- Unstable internet connection
 - Psinfo.exe occupies extra CPU space
 - PC processing speed slows down
 - Browser often redirects to irrelevant websites
 - Browser is bombarded with hordes of popup ads
 - Computer screen freezes repeatedly
 
Take the following steps to diagnose your PC for possible Psinfo.exe malware attack:
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
Step 2: If you notice the file located outside C:\Window\System32, perform an antivirus scan to get rid of the malware.
How to remove Psinfo.exe malware from system using Comodo Antivirus?
Step 1: Download our award-winning Free Antivirus. 
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
Step 4: Restart your PC after the installation gets over.
Step 5: Wait for Comodo Internet Security to update the antivirus.
Step 6: Proceed with the quick scan that automatically begins after the update.
Step 7: If threats are found during the scanning, you will be notified through an alert screen.
Step 8: Comodo Antivirus will remove Psinfo.exe malware from your computer including all other malwares!
| No. | Company | File Type | SHA1 | MD5 | Malware Name  | 
											Digitally Signed  | 
											File Version  | 
											Product Version  | 
											Submitted From  | 
											Malware Behavior | 
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | N/A | Executable | 4c4f3d89f7592f29 118b0f225eed04ef 12e592ac  | 
                                                04c0b78be8b70409 31b8a5e5aa071d16  | 
                                                TrojWare.Win 32.Inject.d1 7  | 
                                                No | N/A | N/A |   India | 
                                                N/A | 
| 2 | N/A | Executable | 44f29ffcfbb24527 73fe8a1ebc280da5 bef7e129  | 
                                                b4598e81f8b457ac 6b74f7b21b99babe  | 
                                                TrojWare.Win 32.Agent.NVA  | 
                                                No | N/A | N/A |   Myanmar | 
                                                N/A | 
| 3 | Sysinternals - www.sysinternals.com | Executable | 3f83adff48b17631 387f96bed29aa4ba a95d3c37  | 
                                                2c5d969bd1e5c8fa a864fd7ee67c24d7  | 
                                                Virus.Win32. Sality.gen  | 
                                                No | 1.75 | 1.75 |   Brazil | 
                                                N/A | 
| 4 | Synaptics | Executable | 6509b50ff7568b97 4d00b9f291ab1bd3 44c56e82  | 
                                                d29da3fc9d160105 989b21015293465f  | 
                                                Virus.Win32. Agent.DE  | 
                                                No | 1.0.0.4 | 1.0.0.0 |   10.224.25.177/32 | 
                                                N/A | 
| No. | Company | File Type | SHA1 | MD5 | Digitally Signed  | 
											File Version  | 
											Product Version  | 
											Submitted From  | 
										
|---|---|---|---|---|---|---|---|---|
| 1 | Sysinternals | Executable | d8cf5250dc2043cd 722f0f2a109e4c5e f414d39f  | 
                                                715e9f1a7af55583 bbc8b51967b378d8  | 
                                                No | 1.36 | 1.36 |   Internal Submission | 
                                            
| 2 | Sysinternals - www.sysinternals.com | Executable | e839ce1e0446d8da 889935f411f0fb7a d54d4b3e  | 
                                                624adb0f45cbb9ca dad83c264df98891  | 
                                                Yes | 1.78 | 1.78 |   10.224.25.107/32 | 
                                            
| 3 | Sysinternals - www.sysinternals.com | Executable | fddf011b81da0ee6 6fad2f1cdeb67e5e eef4e142  | 
                                                53e433146f2060b0 1e80128652d63c36  | 
                                                Yes | 1.77 | 1.77 |   10.100.19.9/32 | 
                                            
| 4 | Sysinternals - www.sysinternals.com | Executable | 7f66f109db5f30e1 7bc4a6705acbcace 123c2765  | 
                                                2691d7f266050e68 49793d4b6661dddf  | 
                                                Yes | 1.79 | 1.79 |   United States | 
                                            
		
	
	
 India
 Myanmar
 Brazil
 10.224.25.177/32
 Australia
 United States
 Netherlands
 France
 China
		