How to Remove “defwatch.exe”

What is defwatch.exe?

defwatch.exe is a legitimate process file popularly known as Norton Antivirus Definition Watcher. It belongs to Norton Antivirus, developed by Symantec Corporation. It is located in C:\Program files by default. Malware programmers write virus files with malicious scripts and save them as defwatch.exe with an intention to spread virus on the internet.

Affected Platforms: Windows OS

How to determine if your computer is infected with defwatch.exe malware?

  • Look out for these symptoms to check if your PC is infected with defwatch.exe malware:
  • Unstable internet connection
  • defwatch.exe occupies extra CPU space
  • PC processing speed slows down
  • Browser often redirects to irrelevant websites
  • Browser is bombarded with hordes of popup ads
  • Computer screen freezes repeatedly

Take the following steps to diagnose your PC for possible defwatch.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Program files, perform an antivirus scan to get rid of the malware.

How to remove defwatch.exe malware from system using Comodo Antivirus?

Step 1: Download our award-winning Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC after the installation gets over

Step 5: Wait for Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be notified through an alert screen.

Step 8: Comodo Antivirus will remove defwatch.exe malware from your computer including all other malwares!

1

Malware Entries

First Seen: 04 March 2013 at 7:43 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Symantec Corporation Executable 535edb3c6515c07d
0515bba588325a17
71cfa458
6f12ccad67539fe8
0d1499a03f503d59
Worm.Win32.M
abezat.b0
Yes 10.1.6.601
0
10.1.6.601
0
Lebanon N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
31

Safe Entries

First Seen: 03 June 2008 at 9:20 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Symantec Corporation Executable 3a9cd68b3dcbaf72
80bda516d373775d
32ed943c
b14973b68e59c573
0b86996c0a69818a
No 10.2.2.200
0
10.2.2.200
0
China
2 Symantec Corporation Executable 9d73e2b3c32f7fe0
a48a0eda53654db6
0a624458
N/A Yes 10.0.1.100
0
10.0.1.100
0
198.20.167.84/32
3 Symantec Corporation Executable 6871adc182daace3
00526704074a2f27
c5c7ca93
2a946f625d7be6ee
1600c0de8d7cd0c6
Yes 10.1.6.601
0
10.1.6.601
0
Internal Submission
4 N/A Executable 1c6fdb1a1706c497
ad28fd8853f971c7
4f870744
74f7562e3897008f
1c7c3e43540a2a41
No N/A N/A United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security