How to Remove “attrib.exe”

What is attrib.exe?

attrib.exe is a legitimate file process. It is developed by Microsoft Corporation. This process is known as Attribute Utility and it belongs to Windows Operating System. You can locate the file in C:\Windows\Sytem32. The virus is created by malware authors and is named after attrib.exe file.

Affected Platform: Windows OS

How to check if your computer is infected with attrib.exe malware?

Keep an eye for the following symptoms to check if your PC is infected with attrib.exe malware:

  • Unstable internet connection
  • Browser redirects to unwanted websites
  • PC performance slows down
  • Browser is bombarded with hordes of popup ads
  • System screen freezes repeatedly

If you find any of the above mentioned symptoms, take the following steps to be sure about the malware infection:

  1. Press CTRL+ALT+DEL keys to open Task Manager.
  2. Go to the process tab and right-click on the attrib.exe file and open its location.

If the file is located outside C:\Windows\Sytem32, then you should take measures to get rid of the malware.

How to remove attrib.exe malware from system with Comodo Cleaning Essentials?

Comodo Cleaning Essentials (CCE) incorporates antivirus software with unique features like auto-sandboxing to identify and obstruct every suspicious process running on an endpoint with a single click. To remove attrib.exe malware using CCE, follow the steps mentioned below:

Step 1: Download the CCE suite.

Step 2: To start the application, double-click on the CCE.exe file.

Step 3: It then probes the antivirus to initiate a full system scan to identify and remove any existing malicious files.

Step 4: If threats are found during the scanning, you will be prompted with an alert screen.

Step 5: Comodo Cleaning Essentials will remove attrib.exe malware from your computer including all other malwares!

12

Malware Entries

First Seen: 05 February 2018 at 12:39 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable 77c26e51f21673f1
25964c1e3c03c593
1286c2bf
d7cdeee6e342c256
20f594a4765dba29
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
196.75.253.1/32 N/A
2 Microsoft Corporation Executable 27e18fdf2be59585
9400a91a6d1d8716
8a1e3e9a
596a496aede95f48
fdecacb99f5c6a5c
Virus.Win32.
Expiro.naf
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Russian Federation N/A
3 Microsoft Corporation Executable 65d8a5840c775148
94b826eea0a4a487
d88bc984
d970ba875552d532
3c356433067f2936
Virus.Win32.
Virut.CE
No 5.1.2600.5
512
(xpsp.0804
13-2111)
5.1.2600.5
512
Egypt N/A
4 Microsoft Corporation Executable 21df62bd7e9392c7
7a644aa338af4d77
79ba0fd5
0efcb4909778e620
ffcb041e589b72bd
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Vietnam N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
14

Safe Entries

First Seen: 04 June 2008 at 1:27 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Microsoft Corporation Executable 14918cd3450c2f85
6790277c5791ecb0
51c978ba
cad43a7452b6a15c
2f49f955e51d0f49
No 6.3.9600.1
6384
(winblue_r
tm.130821-
1623)
6.3.9600.1
6384
United States
2 Microsoft Corporation Executable 14918cd3450c2f85
6790277c5791ecb0
51c978ba
cad43a7452b6a15c
2f49f955e51d0f49
No 6.3.9600.1
6384
(winblue_r
tm.130821-
1623)
6.3.9600.1
6384
10.100.19.19/32
3 N/A Executable 273584aeea05372a
5de80e4f0d8fbce4
d1f68202
7b6902fd628bba08
44722e61b58bb179
No N/A N/A 10.0.17.146/32
4 Microsoft Corporation Executable 14918cd3450c2f85
6790277c5791ecb0
51c978ba
cad43a7452b6a15c
2f49f955e51d0f49
No 6.3.9600.1
6384
(winblue_r
tm.130821-
1623)
6.3.9600.1
6384
10.100.19.136/32
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security