How to Remove “ehRec.exe”

What is ehRec.exe?


ehRec.exe is a legitimate executable file developed by Microsoft. This process is known as Media Center Host Module and it belongs to the software Microsoft Windows Operating System. It is commonly stored in C:\Program Files. Cybercriminals find a way out to mimic malicious programs in the name of ehRec.exe to spread malware infection.

Affected Platform: Windows OS


How to detect whether your system is affected by ehRec.exe?


Viruses can easily affect and corrupt “.exe” files causing several system malfunctions. Below are the symptoms to check if your system is infected with the malware:

  • Problem during computer startup.
  • Problem during program startup.
  • Errors while running specific functions.
  • Damaged and missing link files.
  • Conflict in the process.
  • Missing or corrupted driver files.
  • Invalid Windows registry.
  • Hardware malfunction.

To further establish the infection of malware, take the following steps:

  • Go to Task Manager by pressing the combination of keys CTRL+ALT+DEL.
  • Go to the process tab and right-click on the ehRec.exe file and open its location.

If the file is located outside C:\Program Files folder, then you should perform an antivirus scan to get rid of the malware infection.

How does Comodo Antivirus help you to protect your system from ehRec.exe malware?

Comodo Antivirus protects your system from malware attacks and also removes any existing infections. Following are the steps to effectively purge out the ehRec.exe malware from your system.

Step 1: Download and install Comodo Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC.

Step 5: Wait until the Comodo Internet Security updates the antivirus.

Step 6: Initiate a quick scan that instantly begins after the update.

Step 7: If the system is infected with ehRec.exe malware or any other threats, you will be prompted with an alert screen upon scanning.

Step 8: Comodo Antivirus will remove ehRec.exe malware from your computer including all other malwares!

75

Malware Entries

First Seen: 20 February 2012 at 5:47 am
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable c40880fc404fe54e
4e9f92ea12c11a7d
313e9bf5
f9351a48a0b19f4f
4deaf443390fc955
Virus.Win32.
Virut.CE
No 6.1.7601.1
7514
(win7sp1_r
tm.101119-
1850)
6.1.7601.1
7514
Morocco N/A
2 Microsoft Corporation Executable d9a00ff0a245aa0d
40b1b4449fa83ef9
f25acf82
d45fd814b13f8752
89324564bf0fe487
Virus.Win32.
Virut.CE
No 6.1.7601.1
7514
(win7sp1_r
tm.101119-
1850)
6.1.7601.1
7514
Lao People's Democratic Republic N/A
3 Microsoft Corporation Executable b152fcd2430c4a1b
bad85cf77c0ef4a9
4f0ebf9b
7bc5a5bd2d848992
6e0770dfe9393f6c
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Nepal N/A
4 Microsoft Corporation Executable 900ef96424fd4e7d
ea50d0268105fe75
cd640a2e
d750378336d27df9
24d8359ab75f495d
Virus.Win32.
Virut.Ce
No 6.1.7601.1
7514
(win7sp1_r
tm.101119-
1850)
6.1.7601.1
7514
103.52.14.106/32 N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
13

Safe Entries

First Seen: 18 April 2009 at 2:16 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 N/A Non-executable 0feac56fc1190842
dc91c5c49db90570
679bf49d
65b0d40d73e02ba6
002c5a47b1aaba55
No N/A N/A 10.100.130.247/32
2 Microsoft Corporation Executable 5143007154da85ab
ee363b3b840f1290
f7fdf0a5
008df0c9d81bd814
480dd9c052893e8c
No 5.1.2710.2
732
(xpsp(wmbl
a).050805-
1239)
5.1.2710.2
732
10.224.1.55/32
3 Microsoft Corporation Executable f6742f33e2b91bda
e0d22fd827abd1bb
00c41bdd
dcacbda78d8ee2d7
94cd5b6979865832
No 6.3.9600.1
6384
(winblue_r
tm.130821-
1623)
6.3.9600.1
6384
10.100.19.9/32
4 Microsoft Corporation Executable f6742f33e2b91bda
e0d22fd827abd1bb
00c41bdd
dcacbda78d8ee2d7
94cd5b6979865832
No 6.3.9600.1
6384
(winblue_r
tm.130821-
1623)
6.3.9600.1
6384
United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security