How to Remove “ehRec.exe”

What is ehRec.exe?


ehRec.exe is a legitimate executable file developed by Microsoft. This process is known as Media Center Host Module and it belongs to the software Microsoft Windows Operating System. It is commonly stored in C:\Program Files. Cybercriminals find a way out to mimic malicious programs in the name of ehRec.exe to spread malware infection.

Affected Platform: Windows OS


How to detect whether your system is affected by ehRec.exe?


Viruses can easily affect and corrupt “.exe” files causing several system malfunctions. Below are the symptoms to check if your system is infected with the malware:

  • Problem during computer startup.
  • Problem during program startup.
  • Errors while running specific functions.
  • Damaged and missing link files.
  • Conflict in the process.
  • Missing or corrupted driver files.
  • Invalid Windows registry.
  • Hardware malfunction.

To further establish the infection of malware, take the following steps:

  • Go to Task Manager by pressing the combination of keys CTRL+ALT+DEL.
  • Go to the process tab and right-click on the ehRec.exe file and open its location.

If the file is located outside C:\Program Files folder, then you should perform an antivirus scan to get rid of the malware infection.

How does Comodo Antivirus help you to protect your system from ehRec.exe malware?

Comodo Antivirus protects your system from malware attacks and also removes any existing infections. Following are the steps to effectively purge out the ehRec.exe malware from your system.

Step 1: Download and install Comodo Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC.

Step 5: Wait until the Comodo Internet Security updates the antivirus.

Step 6: Initiate a quick scan that instantly begins after the update.

Step 7: If the system is infected with ehRec.exe malware or any other threats, you will be prompted with an alert screen upon scanning.

Step 8: Comodo Antivirus will remove ehRec.exe malware from your computer including all other malwares!

64

Malware Entries

First Seen: 12 June 2009 at 4:21 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable c40880fc404fe54e
4e9f92ea12c11a7d
313e9bf5
f9351a48a0b19f4f
4deaf443390fc955
Virus.Win32.
Virut.CE
No 6.1.7601.1
7514
(win7sp1_r
tm.101119-
1850)
6.1.7601.1
7514
Morocco N/A
2 Microsoft Corporation Executable b152fcd2430c4a1b
bad85cf77c0ef4a9
4f0ebf9b
7bc5a5bd2d848992
6e0770dfe9393f6c
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Nepal N/A
3 Microsoft Corporation Executable 900ef96424fd4e7d
ea50d0268105fe75
cd640a2e
d750378336d27df9
24d8359ab75f495d
Virus.Win32.
Virut.Ce
No 6.1.7601.1
7514
(win7sp1_r
tm.101119-
1850)
6.1.7601.1
7514
103.52.14.106/32 N/A
4 Microsoft Corporation Executable 0f61e56e7ed61316
55c10d62ef80397f
9e7a868b
5addc2045acfe798
03a903d072a7c664
Virus.Win32.
Virut.CE
No 6.1.7601.1
7514
(win7sp1_r
tm.101119-
1850)
6.1.7601.1
7514
154.118.56.243/32 N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
25

Safe Entries

First Seen: 04 June 2008 at 8:15 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Microsoft Corporation Executable 69d3f391487a68ca
6a103cc55c699bd6
744bec2c
e18fe2168c8712ef
4ff2191059158fab
No 6.0.6001.1
8000
(longhorn_
rtm.080118
-1840)
6.0.6001.1
8000
Internal Submission
2 N/A Non-executable 0feac56fc1190842
dc91c5c49db90570
679bf49d
65b0d40d73e02ba6
002c5a47b1aaba55
No N/A N/A 10.100.130.247/32
3 Microsoft Corporation Executable d8f5e4a4df40efc5
db5d27ebe43823a0
82034ce6
N/A No 5.1.2600.2
180
(xpsp_sp2_
rtm.040803
-2158)
5.1.2600.2
180
United States
4 Microsoft Corporation Executable eac5916951c2cfee
0c92eee762c460d1
cc799d3d
N/A No 5.1.2710.2
732
(xpsp(wmbl
a).050805-
1239)
5.1.2710.2
732
Sweden
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security