What is sfc.exe?
sfc.exe is a legitimate process file known as Sourcefire Connector. It is part of the Immunet 3.1 that was developed by Sourcefire Inc. It is located in C:\Program Files by default. Malware programmers create files with malicious codes and name them after sfc.exe with an aim to spread virus on the internet.
Affected Platform: Windows OS
How to check if your computer is infected with sfc.exe malware?
Keep an eye for the following symptoms to see if your PC is infected with sfc.exe malware:
- Internet connection fluctuates
- sfc.exe takes too much CPU space
- PC slows down significantly
- Browser automatically redirects to some irrelevant websites
- Unsolicited ads and popups starts appearing
- Screen freezes constantly
If your PC is infected with sfc.exe malware, it will invite other malwares to cause more damage to your computer. Take the following steps to diagnose your PC for possible sfc.exe malware attack:
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
Step 2: If you notice the file located outside the file path C:\Program Files, then you should run an antivirus scan to get rid of the malware.
How to remove the sfc.exe file from system using Comodo Antivirus?
Step 1: Download the award-winning Free Internet Security.
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
Step 4: Restart your PC.
Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
Step 6: Proceed with a quick scan that automatically begins after the update.
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
Step 8: Comodo Antivirus will remove the sfc.exe virus from your computer including all other malwares!
First Seen: 25 October 2011 at 1:17 am
| No. | Company | File Type | SHA1 | MD5 | Malware Name |
Digitally Signed |
File Version |
Product Version |
Submitted From |
Malware Behavior |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Microsoft Corporation | Executable | f1d625e70d289216 9a334c5919df91db 375c9623 |
c14052b0660412da c1d82b8fecc9ba74 |
Virus.Win32. Virut.CE |
No | 5.1.2600.0 (xpclient. 010817-114 8) |
5.1.2600.0 |  India |
N/A |
| 2 | N/A | Executable | 49bb11587d1c4b2d 4678c3b2acbca654 106eb27e |
d2aab9e440e367ec 299ca193665707e7 |
Virus.Win32. Virut.CE |
No | N/A | N/A |  Egypt |
N/A |
| 3 | Microsoft Corporation | Executable | 137d9e852fb5d53d 0fa7455735a998fe 862dbb73 |
1aeae1f40f8c5293 9a66923009a535f9 |
Virus.Win32. Virut.CE |
No | 6.1.7600.1 6385 (win7_rtm. 090713-125 5) |
6.1.7600.1 6385 |
 Indonesia |
N/A |
| 4 | Корпорация Майкрософт | Executable | a093d1c9c9ce0a56 7933436cfd40edee 6fb94dc4 |
2dccb0c748e70f65 4d81e0426567bb7b |
Virus.Win32. Virut.CE |
No | 5.1.2600.0 (xpclient. 010817-114 8) |
5.1.2600.0 |  Ukraine |
N/A |
Turkey
Russian Federation
Bulgaria
Lao People's Democratic Republic
United Kingdom
Morocco
New ZealandFirst Seen: 04 February 2012 at 8:33 am
| No. | Company | File Type | SHA1 | MD5 | Digitally Signed |
File Version |
Product Version |
Submitted From |
|---|---|---|---|---|---|---|---|---|
| 1 | Monotype Imaging Inc. | Executable | 6f60d8f7fc296d40 a918d15383475289 17bb0a31 |
5335d34f87f5aa71 7b5bdec011059a9f |
Yes | 1.0.7655.6 90 |
1.0.7655.6 90 |
 10.224.25.61/32 |
| 2 | Microsoft Corporation | Executable | d932d937d9ddeee4 9883de8e0c00cbd4 2ecdd25f |
65b85d98e228b843 6d8cde5a99f66389 |
No | 10.0.21387 .1 (WinBuild. 160101.080 0) |
10.0.21387 .1 |
 United States |
| 3 | Microsoft Corporation | Executable | c2aa38a2b4c526a3 dfa297afc5c02c13 5c485230 |
5c7e686823f7d86d 64bdff8ab2da4950 |
No | 4.10.2222 | 4.10.2222 |  Japan |
| 4 | N/A | Non-executable | a6cba5ed720750c4 19a4b5f063c90b84 2b0bdf39 |
da8a14b51f0d4a0e bc6bed02acfcb169 |
No | N/A | N/A | 10.224.25.61/32 |
Romania
Taiwan
