What is compose.exe?
compose.exe is a legitimate file process developed by Spencer Kimball, Peter Mattis and the GIMP Development Team. It is known as GNU Image Manipulation Program Plug-In and it belongs to GNU Image Manipulation Program. You can locate the file in C:\Program Files.
The virus is created by malware authors and is named after compose.exe file.
Affected Platforms: Windows OS
How to determine if your computer is infected with compose.exe malware?
Look out for these symptoms to check if your PC is infected with compose.exe malware:
- Unstable internet connection
- compose.exe occupies extra CPU space
- PC processing speed slows down
- Browser often redirects to irrelevant websites
- Browser is bombarded with hordes of popup ads
- Computer screen freezes repeatedly
Take the following steps to diagnose your PC for possible compose.exe malware attack:
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
Step 2: If you notice the file located outside C:\Program Files, perform an antivirus scan to get rid of the malware.
How to remove compose.exe malware from system using Comodo Antivirus?
Step 1: Download our award-winning Free Antivirus. 
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
Step 4: Restart your PC after the installation gets over
Step 5: Wait for Comodo Internet Security to update the antivirus.
Step 6: Proceed with the quick scan that automatically begins after the update.
Step 7: If threats are found during the scanning, you will be notified through an alert screen.
Step 8: Comodo Antivirus will remove compose.exe malware from your computer including all other malwares!
| No. | Company | File Type | SHA1 | MD5 | Malware Name | Digitally Signed | File Version | Product Version | Submitted From | Malware Behavior | 
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Spencer Kimball, Peter Mattis and the GIMP Development Team | Executable | 00a9ab7d255a212e 63ee616c6f08672e 14e1b513 | df653fad4be30b64 6bdebd717fd08da6 | Virus.Win32. Sality.gen | No | 2.8.4.0 | 2.8.4 |  176.106.35.116/32 | N/A | 
| 2 | N/A | Executable | eac2bc5e620a8350 e32322d2c80c3470 adfeb170 | f9e52b8c23248c8b 4156f742d40a88ad | Packed.Win32 .MUPX.Gen | No | N/A | N/A |  Russian Federation | N/A | 
| 3 | Spencer Kimball, Peter Mattis and the GIMP Development Team | Executable | 9c58a197fe9ccc48 3e2cf3c85559026d dae52568 | b678786bd8081dde 47f2391f6b3c4319 | Virus.Win32. Sality.gen | No | 2.8.10.0 | 2.8.10 |  Poland | N/A | 
| 4 | Spencer Kimball, Peter Mattis and the GIMP Development Team | Executable | 9a29ae8b3f6187b9 d7cf8fa7d2463c13 1bf9cedc | e88942fe20801220 a05f405f9f328670 | Virus.Win32. Sality.gen | No | 2.8.14.0 | 2.8.14 |  Germany | N/A | 
- 4 items per page
- 8 items per page
- 16 items per page
- 32 items per page
| No. | Company | File Type | SHA1 | MD5 | Digitally Signed | File Version | Product Version | Submitted From | 
|---|---|---|---|---|---|---|---|---|
| 1 | N/A | Executable | bacc456c16463d79 790780c8cc484f1b 4b7d3195 | 27b3b06bcd452e3a 7b7265fdb324b126 | Yes | N/A | N/A |  Internal Submission | 
| 2 | N/A | Executable | 4ed91dc0cfa42512 9b931e3387e9b214 a3a6e234 | f7f91d550855ba69 52ee7b5990ba6f69 | Yes | N/A | N/A |  Internal Submission | 
| 3 | N/A | Executable | b0ba7db65ab28df0 e81d1e5a7da8629f 5decf0de | 967e6bbf7f7720fc e1131cdf49dc035c | No | N/A | N/A |  Finland | 
| 4 | N/A | Executable | 15718876b0abcf5d aa6de5d000b1c431 1dbca181 | 74351e0a942eab88 b9cdbfe4afe0ed67 | No | N/A | N/A |  Internal Submission | 
 
		 
	 
	
 United States
 United States Brazil
 Brazil Israel
 Israel Greece
 Greece Sweden
 Sweden Belgium
 Belgium 
		
 
		 
	