How to Remove the rasphone.exe virus from PC

rasphone.exe is a legitimate file process developed by Microsoft Corporation. This process is known as Remote Access Phonebook and it belongs to software Microsoft Windows Operating System. You can locate the file in C:\Windows\System32. The virus is created by malware authors and are named them after rasphone.exe file.

Affected Platform: Windows OS

How to check if your computer is infected with rasphone.exe malware?

Keep an eye for the following symptoms to check if your PC is infected with rasphone.exe malware:

Unstable internet connection
Browser redirects to unwanted websites
PC performance slows down
Browser is bombarded with hordes of popup ads
System screen freezes repeatedly

If you find any of the above mentioned symptoms, take the following steps to be sure about the malware infection:

Press CTRL+ALT+DEL keys to open Task Manager.
Go to the process tab and right-click on the rasphone.exe file and open its location.

If the file is located outside C:\Windows\System32, then you should take measures to get rid of the malware.

How to remove rasphone.exe malware from system with Comodo Cleaning Essentials?

Comodo Cleaning Essentials (CCE) incorporates antivirus software with unique features like auto-sandboxing to identify and obstruct every suspicious process running on an endpoint with a single click. To remove malwares using rasphone.exe, follow the steps mentioned below:

Step 1: Download the CCE suite.

Step 2: To start the application, double-click on the CCE.exe file.

Step 3: It then probes the antivirus to initiate a full system scan to identify and remove any existing malicious files.

Step 4: If threats are found during the scanning, you will be prompted with an alert screen.

Step 5: Comodo Cleaning Essentials will remove rasphone.exe malware from your computer including all other malwares!

Malware Entries

Safe Entries

First Seen: 20 October 2011 at 9:43 pm

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	N/A	Executable	b769391872c4fa1c a8fc3627a433201c 7ea11fa6	f59f5df52a452d30 86d3ef67e923e8fb	Win32.Neshta .A	No	N/A	N/A	Russian Federation	N/A
2	N/A	Executable	2eed3ced771bca96 2820e2c355be1fd5 1ef54842	117e9b075f644b8c a3e78aa5ca55a78d	Virus.Win32. Virut.CE	No	N/A	N/A	197.156.80.220/32	N/A
3	Корпорация Майкрософт	Executable	676180e2b728c848 6b8fc24d98c785fd 067d7deb	3495d044fb43bd48 81ad420f759336e8	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Russian Federation	N/A
4	Microsoft Corporation	Executable	486cd09dc938cc75 c05acd23eb85cc3e 57663190	5d9e9a35b9d248ec e6fc4097a457e8e5	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	102.41.88.6/32	N/A
5	Microsoft Corporation	Executable	0d4cd27a40c13c8d f83f4decd57881d5 7fc2fa93	0303be08708e010f df4b570cc696a8ef	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Ghana	N/A
6	Microsoft Corporation	Executable	9a28ad4190126948 d727a7a57a24c06c f2857c60	55472cecf551a590 5ad05bdbf203e3d7	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Russian Federation	N/A
7	N/A	Executable	a53f79ac9a982305 d963385076816d7f 2388f61b	22a96b5674e256af 1cbad46e9dfb2953	Virus.Win32. Virut.CE	No	N/A	N/A	156.209.155.163/32	N/A
8	N/A	Executable	0066bb38b819b318 1bfedb9565cd72a4 0d78acb7	2082925e37071db6 7341a91d5e1a0943	Virus.Win32. Virut.Ce	No	N/A	N/A	United States	N/A
9	Microsoft Corporation	Executable	a150899cc37bcedb dc50134331ba8c59 6b5b4c1f	e92416bd715614cc 1237cb93d6321b99	Virus.Win32. Parite.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Spain	N/A
10	Microsoft Corporation	Executable	6a9af6ea7f92173b 7e8a18596de2ddfb 21d2816b	a7587f6ef15c6e88 18ac2c7dbcabbec2	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Iran, Islamic Republic of	N/A
11	Microsoft Corporation	Executable	91fa9f356accb2f0 30195e1fc74f2251 e88d9c4f	91a39553386f9544 84ae8eaf97573a21	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Russian Federation	N/A
12	Microsoft Corporation	Executable	bb50aabbd32810b7 893e220d2a93978b e0f7db9a	e5939c096fad348f e5e8a38bd19d9f72	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Europe	N/A
13	Microsoft Corporation	Executable	66d8917a5c163521 db3de78f73c14dbb 2cdfd514	311736c646fa8d37 bfb76daed316caae	Virus.Win32. Expiro.ew	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	United States	N/A
14	Microsoft Corporation	Executable	fab34e86279eb29a 935af3b6c80a4df3 6a30feca	6d32ca7b1889bf6b 846d90ffba2c6980	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Pakistan	N/A
15	Microsoft Corporation	Executable	b5950b1b670540ba 5a3b8ea41a363d31 d3bc63a8	b3e6f3c9548ce3be 54c6357e91eb40b4	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	154.177.82.152/32	N/A
16	Microsoft Corporation	Executable	2538ee9d9b1a1b2b 07f73b14aa55e73d 1d9ed901	e0af384093e60c86 a0420f53ce382c55	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	154.160.21.150/32	N/A
17	Microsoft Corporation	Executable	4108c70c55a72771 603bc610d1f4e384 f9e71897	7f5ffc8de137a457 682cecab7acd75d1	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Vietnam	N/A
18	Microsoft Corporation	Executable	e05f85a57e5ae30e 4d04a2a6971e2632 94e278c1	74bfa4b07470348b 8ddf196c680363e1	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Morocco	N/A
19	Корпорация Майкрософт	Executable	49007354c95db909 e287756e7c1c8d68 9345c63f	f3c39121f83993d5 2ac2c16a38458086	Virus.Win32. Expiro.R0	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Ukraine	N/A
20	Microsoft Corporation	Executable	4461469c7353e3d7 88b6dc28554a887f 4bb7e01c	0f6e9d23ad1f9fce eae596006f7e41a6	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Europe	N/A
21	Microsoft Corporation	Executable	e6f7ed067ebd5f1e c63277bebf02b01d 7dd1561b	de176e9189feed28 29af5756b55158c8	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Vietnam	N/A
22	Microsoft Corporation	Executable	a203dab5b6b80a2b 18fe102b1f56b46b b636615d	0ef58aaeb76aeb54 3695171a76c6a8b2	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Turkey	N/A
23	Microsoft Corporation	Executable	dba677b867f7c466 e4c7aea1d302562a 523bc9ef	bc6692a413634971 b797e6d28ffe9e38	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	India	N/A
24	Microsoft Corporation	Executable	273851eba845f9b1 dc72138ce48bd45e 06a4b5fe	053837906c528c41 d807287ebc429bb8	Virus.Win32. Sality.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Russian Federation	N/A
25	Microsoft Corporation	Executable	032775add9f99208 020cfbbb8c4054c4 3f4b3dfe	297b399b72cef123 103ffb2ff644ca5d	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Iran, Islamic Republic of	N/A
26	Microsoft Corporation	Executable	14dc6b528aff8161 a364974c3dfb8301 337d5d01	2639d5ada4362c39 8f03aa970249e59d	Unclassified Malware	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	129.205.113.157/32	N/A
27	Microsoft Corporation	Executable	07d6053fe3188ede e3b6bd8dc3ee8a7a 48d1272a	afe447ab88f96f65 5c57348c7a1ed7a6	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Indonesia	N/A
28	Microsoft Corporation	Executable	1c151f8fd7f9a4cf 52ac0245f3314e0f 2e0b58db	3c3392a90c1de8e5 ea64e277f2753ad4	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Italy	N/A
29	Microsoft Corporation	Executable	42cdcce28a25ae85 d37fdce337645d05 2b2d3258	b7f854052f3d5ae1 27cddbf249a49e0a	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Egypt	N/A
30	Microsoft Corporation	Executable	408700c7f0a1ed2b 942a38437d95267c 1a6e62ee	fbf79d1cdf1485a7 c33e1ba850279c33	Unclassified Malware	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	197.39.113.130/32	N/A
31	Microsoft Corporation	Executable	49b54e9c852a3109 f13c5f264496d415 d119517e	8d267c7f2d0ba0a2 f6669245833d3791	MalCrypt.Ind us!	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	United States	N/A
32	Microsoft Corporation	Executable	3c01bbece09659bc 91bdf07bc242e1a5 cdf2f845	2d9e5b3c18ec4cf0 bede4b308ffcebcf	P2PWorm.Win3 2.Polip.A	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Brazil	N/A
33	Корпорация Майкрософт	Executable	9896644afaea5d24 55d39fdd88f4a989 4be4c963	c28ad28c0f98b748 4a21d2650836970d	Virus.Win32. Sality.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Ukraine	N/A
34	Microsoft Corporation	Executable	a34a984f0b55119d 15efc254108cdf17 4b79b2aa	f6d20328707b9bf5 4ca022a4af155c8c	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Australia	N/A
35	Microsoft Corporation	Executable	354057633c385c2f 4e4d4d28a1982c67 22ab63b0	129725bf794a53b2 c9c85115a5d49b4a	MalCrypt.Ind us!	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	United States	N/A
36	Microsoft Corporation	Executable	a793854c5a979562 96329b4c4c3d8186 37975bac	36cf832f6d0a1833 132113917fa5ee2f	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	197.33.232.31/32	N/A
37	Microsoft Corporation	Executable	24689867cc5ba7ad 02d01f4598c86005 a8c58b2e	958019dfdff7472c 8f6fede6150e2250	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	102.41.88.6/32	N/A
38	N/A	Executable	ef8b76d66b082dee 700b6240c347aa90 61785b0f	f3ca4348ff0fedeb aac9dabcba464297	Win32.Neshta .A	No	N/A	N/A	Turkey	N/A

Prev 1 2 3...10 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 19 October 2009 at 11:37 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	Microsoft Corporation	Executable	028755d8fbf3f516 d75cdda67a9580a8 7bb8fe6e	e351a550e1cfec64 eca806afdab20be2	No	4.00	4.00	United States
2	N/A	Executable	0f98050c320feac0 fd01c1e0fb5e19f2 4f012fbd	24f28e282bb77280 a0371f42eaaf9bec	No	N/A	N/A	Mexico
3	Microsoft Corporation	Executable	60e12cf08677ea31 d71ad0a9573f9a88 bbce67fd	7e594dc34969a657 477dffd2010d024e	No	5.1.2600.5 512 (xpsp.0804 13-0852)	5.1.2600.5 512	Internal Submission
4	Microsoft Corporation	Executable	77ff050f02dc3b66 830bff9921a4e1c2 2e48f36a	4ccf6c2d12ecc06a e8ac9c67cca71c80	No	4.00	4.00	Internal Submission
5	Microsoft Corporation	Executable	55fcaba806e5ca12 a806435fcaea7048 29b66189	254f724bf5f9dd47 dff36be935c7dce7	No	10.0.22593 .1 (WinBuild. 160101.080 0)	10.0.22593 .1	India
6	Microsoft Corporation	Executable	2102314357bf5f31 4659a6fbd90334f0 bbf4c464	e98229d95689d890 f756b8d5502f5cf9	No	4.00	4.00	United States
7	Microsoft Corporation	Executable	376ffe747dc603fd 08524cc270d88a05 57502f0d	4ce8a145b6d2acc2 450dffbd392b187e	No	10.0.21387 .1 (WinBuild. 160101.080 0)	10.0.21387 .1	United States
8	Microsoft Corporation	Executable	b1d877340c4dd4b4 fa03f87f13b9d2ee f976f34d	95356a41f7c4372f 45fcbe4d32bb2003	No	10.0.19041 .1 (WinBuild. 160101.080 0)	10.0.19041 .1	United States

Prev 1 2 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “rasphone.exe”