How to Remove “runonce.exe”

What is runonce.exe?


runonce.exe is a legitimate process file known as Run Once Wapper; it is associated with Windows Operating System and developed by Microsoft Corporation. It is typically located in C:\Windows\System32.
Malware programmers create files with malicious content and name them after runonce.exe witn an intention to spread virus on the internet.
 
Affected Platform: Windows OS
 

How to check if your computer is infected with runonce.exe  malware?

    
Keep an eye for the following symptoms to see if your PC is infected with runonce.exe malware:
  • Internet connection fluctuates
  • runonce.exe takes too much CPU space
  • PC slows down significantly
  • Browser automatically redirects to some irrelevant websites
  • Unsolicited ads and popups starts appearing
  • Screen freezes constantly
If your PC is infected with runonce.exe malware, it will invite other malwares to cause more damage to your computer. Take the following steps to diagnose your PC for possible runonce.exe malware attack:
 
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
 
Step 2: If you notice the file located outside the file path C:\Windows\System32, then you should run an antivirus scan to get rid of the malware.
 
How to remove the runonce.exe file from system using Comodo Antivirus?
 
Step 1: Download the award-winning Free Internet Security.
 
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
 
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
 
Step 4: Restart your PC.
 
Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
 
Step 6: Proceed with a quick scan that automatically begins after the update.
 
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
 
Step 8: Comodo Antivirus will remove the runonce.exe virus from your computer including all other malwares!
9

Malware Entries

First Seen: 25 November 2010 at 3:18 am
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Корпорация Майкрософт Executable 136802b9fb2b435e
a9d19bab600af305
ac35b286
53ecef4d9bdbc618
ff93dd5a0433f886
Virus.Win32.
Virut.Ce
No 6.00.2900.
5512
(xpsp.0804
13-2105)
6.00.2900.
5512
Russian Federation N/A
2 Microsoft Corporation Executable 99e84c15e36e0756
2940f90789bb27ef
45332931
fcfabefecf4af072
d84ed3807bc75cfb
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Pakistan N/A
3 Cra0kalo Executable bd41e02388bc5332
ea05cc6d09b0da75
0d71696b
a1c951476d41be86
37322583e6a842e3
Worm.Win32.A
utorun.dy02
No 0. 0. 0. 0 1. 0. 0. 0 United Kingdom N/A
4 Microsoft Corporation Executable 3de0d133350172f6
5fa79de6a55ec078
84fa704c
6e124bdae13cde67
f4b09121dd3f55c5
Virus.Win32.
Expiro.ew
No 6.00.2900.
2180
(xpsp_sp2_
rtm.040803
-2158)
6.00.2900.
2180
United States N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
48

Safe Entries

First Seen: 05 June 2008 at 11:05 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Microsoft Corporation Executable 2a5efe67af496ab5
ba146b1284531bde
52ff9853
53005a01c37ab3ca
5a5443066408c703
No 6.00.2900.
5512
(xpsp.0804
13-2105)
6.00.2900.
5512
10.224.1.116/32
2 Microsoft Corporation Executable e92e20e3219b23a7
edf0d222f2dbf6bd
c0648953
N/A No 6.00.2900.
5512
(xpsp.0804
13-2105)
6.00.2900.
5512
Taiwan
3 N/A Executable afbabafd0612d914
b870ead4717da0a8
c111baad
b4d96ace7dbff1a1
6c7e79251ecf332a
No N/A N/A United States
4 Microsoft Corporation Executable a640d09ccc855a49
b17f3006c826ce5a
77ec9cf9
2f3bcd52c6dc0670
af0707440a1e2a53
No 6.00.2900.
2180
(xpsp_sp2_
rtm.040803
-2158)
6.00.2900.
2180
Portugal
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks