What is runas.exe?
runas.exe is a legitimate file. This process is known as Run As Utility. It belongs to Windows operating system and was developed by Microsoft, Inc. It is commonly stored in C:\WINDOWS\winsxs\x86_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_5fbe9f67bec0f818\. Malware programmers or cybercriminals write different types of malicious programs and name it as runas.exe to spread virus.
Affected Platform: Windows OS
How to check if your computer is infected with runas.exe malware?
Each malware is different and causes unique problems to the system. You will notice one or several of the following symptoms if your system is infected with runas.exe malware:
- Internet connection fluctuates
- runas.exe file is taking more of your CPU memory
- System performance is very low
- Browser is redirected to some strange websites
- Interference of annoying popup ads
- Other malwares infiltrate into the system
To further establish the malware infection, take the following steps:
- Go to Task Manager by pressing the combination of keys ctrl+alt+del
- Go to the process tab and right-click on the runas.exe and open the file location
If the file is located outside C:\WINDOWS\winsxs\x86_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_5fbe9f67bec0f818\, then it is likely that the system is affected with runas.exe malware.
How to remove runas.exe malware from system using Comodo Antivirus?
Ideally, replacing the existing runas.exe file on your computer with a different version procured from the internet is advisable. To remove the file using Comodo's trusted and effective antivirus software, follow the steps below:
Step 1: Download the award-winning Comodo Free Antivirus.
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
Step 4: Once the Installation is Finished, restart your PC.
Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
Step 6: Proceed with a quick scan that automatically begins after the update.
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
Step 8: Comodo Antivirus will remove runas.exe malware from your computer including all other malwares!
No. | Company | File Type | SHA1 | MD5 | Malware Name |
Digitally Signed |
File Version |
Product Version |
Submitted From |
Malware Behavior |
---|---|---|---|---|---|---|---|---|---|---|
1 | Microsoft Corporation | Executable | 6de2ef1fcba4fbe6 a6e29d4112852b4e d341bf85 |
d92c60de4f171602 c03a3031d9eae4d2 |
Virus.Win32. Virut.CE |
No | 6.1.7600.1 6385 (win7_rtm. 090713-125 5) |
6.1.7600.1 6385 |
![]() |
N/A |
2 | Корпорация Майкрософт | Executable | c74a6a01837cdafc ac4e604bd58cab44 189edeb0 |
f2b3afd5aac950de 331db64193ea4f2d |
Virus.Win32. Sality.gen |
No | 5.1.2600.0 (xpclient. 010817-114 8) |
5.1.2600.0 | ![]() |
N/A |
3 | N/A | Executable | ae26896200879870 3258d4ffcb2c2d82 f94fe660 |
2467fcfe7fb384ec 15bd2e9bdb1bb130 |
Virus.Win32. Virut.CE |
No | N/A | N/A | ![]() |
N/A |
4 | Корпорация Майкрософт | Executable | 3ce0c2c8151c2ddb 394c04ef54e52e87 d2d1e45a |
b1adcbb853abb9d5 c25db247351f4802 |
Virus.Win32. Golem.a0 |
No | 5.1.2600.0 (xpclient. 010817-114 8) |
5.1.2600.0 | ![]() |
N/A |
No. | Company | File Type | SHA1 | MD5 | Digitally Signed |
File Version |
Product Version |
Submitted From |
---|---|---|---|---|---|---|---|---|
1 | N/A | Executable | 787a6c5482e9fe6a 2b8cb73229400c87 a5e101ee |
f2a8fb28dc4b83e4 f181289ab277d06b |
No | 1, 0, 0, 1 | 1, 0, 0, 1 | ![]() |
2 | Microsoft Corporation | Executable | 9645690a9f0f22e6 6259c36dccecb170 ef8b4887 |
3c9ad13d268d1dfb 106dd8c2017478c2 |
No | 10.0.19041 .1 (WinBuild. 160101.080 0) |
10.0.19041 .1 |
![]() |
3 | Microsoft Corporation | Executable | 29796aca36a723d6 25595214e7fda273 5bae26b2 |
b37e31c5beb6d9eb 20b4db8df4d82960 |
No | 10.0.19041 .1 (WinBuild. 160101.080 0) |
10.0.19041 .1 |
![]() |
4 | Microsoft Corporation | Executable | 65d657d2b679d8cd ce83afa927fc0476 cd9a8c80 |
e7ffd8119142e345 ed1972a1866ab6f5 |
No | 10.0.17666 .1000 (WinBuild. 160101.080 0) |
10.0.17666 .1000 |
![]() |