How to Remove “dfrgntfs.exe”

What is dfrgntfs.exe?

dfrgntfs.exe is a legitimate process file popularly known as Disk Defragmenter NTFS Module. It is associated with Windows Disk Defragmenter application, developed by Microsoft Corporation. It is typically located in C:\Windows\System32 by default. Malware programmers create files with virus scripts and name them after dfrgntfs.exe  with an intention to spread virus on the internet.

Affected Platform: Windows OS

How to check if your computer is infected with dfrgntfs.exe malware?

Keep an eye for the following symptoms to see if your PC is infected with dfrgntfs.exe  malware:

  • Internet connection fluctuates
  • dfrgntfs.exe  takes too much CPU space
  • PC slows down significantly
  • Browser automatically redirects to some irrelevant websites
  • Unsolicited ads and popups starts appearing
  • Screen freezes constantly

Take the following steps to diagnose your PC for possible dfrgntfs.exe  malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, then you should run an antivirus scan to get rid of the malware.

How to remove dfrgntfs.exe malware from system using Comodo Free Antivirus?

Step 1: Download the award-winning Comodo Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: After network detection is complete, press “Close” button for a scan window.

Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the antivirus.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus will remove dfrgntfs.exe  malware from your computer including all other malwares!

59

Malware Entries

First Seen: 20 October 2011 at 2:42 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation und Executive Software International, Inc. Executable 5ce18d0417f0cfde
eab0d15f8b91de2c
594b79ab
36f1a27e6ac64a7a
401d2b264901275a
Virus.Win32.
Virut.Ce
No 5.1.2600.5
512
(xpsp.0804
13-2111)
5.1.2600.5
512
Germany N/A
2 Microsoft Corp. i Executive Software International, Inc. Executable 574ae0ab5f1481a4
9e52589618c5cdc1
f0411e21
7f8ec65ee458f12f
eafbeadd0c8effbf
Virus.Win32.
Sality.L
No 5.1.2600.2
180
(xpsp_sp2_
rtm.040803
-2158)
5.1.2600.2
180
Poland N/A
3 Microsoft Corp. and Executive Software International, Inc. Executable e6aa016349dc64e0
a972ef94871d0552
2151b500
aa8ca76ca0c35d1d
1b0d134cb00efaaf
Virus.Win32.
Virut.CE
No 5.1.2600.5
512
(xpsp.0804
13-2111)
5.1.2600.5
512
Egypt N/A
4 Microsoft Corp. and Executive Software International, Inc. Executable 56a8fd32188553a0
173bdba550f615d4
9629d916
f6b2a1a31bdcef23
c04d18604a61a866
Virus.Win32.
Virut.CE
No 5.1.2600.5
512
(xpsp.0804
13-2111)
5.1.2600.5
512
Egypt N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
19

Safe Entries

First Seen: 04 June 2008 at 3:50 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Корпорация Майкрософт и Executive Software International, Inc. Executable 1aec2d4c6779b647
58a0534dd1730b0e
13a5916b
3db6b5e706fa8157
b5ccdea4e289a624
No 5.1.2600.2
180
(xpsp_sp2_
rtm.040803
-2158)
5.1.2600.2
180
Russian Federation
2 Microsoft Corp. and Executive Software International, Inc. Executable 72ab69a4d28eaf82
3ba67ddf901fb609
a4d5bb3e
b173824927888ba6
192220c88a254ab9
No 5.1.2600.5
840
(xpsp_sp3_
qfe.090703
-1444)
5.1.2600.5
840
10.224.1.55/32
3 Microsoft Corp. and Executive Software International, Inc. Executable 6d8e65824b76d8df
53b3d338883069a8
462c8d9b
cfda264090b3b154
545e335d10ac6cdb
No 5.1.2600.1
106
(xpsp1.020
828-1920)
5.1.2600.1
106
10.100.130.247/32
4 Microsoft Corp. és Executive Software International, Inc. Executable 6bd9451d090ce0ee
f0da54c6ff9dbd67
d11dad12
63dee5388aa078c7
440bd45b2407431d
No 5.1.2600.1
106
(xpsp1.020
828-1920)
5.1.2600.1
106
10.100.130.247/32
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security