How to Remove “subst.exe”

What is subst.exe?

subst.exe is a legitimate file process developed by Microsoft Corporation. This process is known as Subst Utility and it belongs to Windows Operating System. You can locate the file in C:\Program Files. The virus is created by malware authors and is named after subst.exe file.

Affected Platform: Windows OS

How to check if your computer is infected with subst.exe malware?

Keep an eye for the following symptoms to check if your PC is infected with subst.exe malware:

  • Unstable internet connection
  • Browser redirects to unwanted websites
  • PC performance slows down
  • Browser is bombarded with hordes of popup ads
  • System screen freezes repeatedly

If you find any of  the above mentioned symptoms, take the following steps to be sure about the malware infection:

1) Press CTRL+ALT+DEL keys to open Task Manager.

2) Go to the process tab and right-click on the subst.exe file and open its location.

If the file is located outside C:\Program Files, then you should take measures to get rid of the malware.

How to remove subst.exe malware from system with Comodo Cleaning Essentials?

Comodo Cleaning Essentials (CCE) incorporates antivirus software with unique features like auto-sandboxing to identify and obstruct every suspicious process running on an endpoint with a single click. To remove subst.exe malware using CCE, follow the steps mentioned below:

Step 1: Download the CCE suite.

Step 2: To start the application, double-click on the CCE.exe file.

Step 3: It then probes the antivirus to initiate a full system scan to identify and remove any existing malicious files.

Step 4: If threats are found during the scanning, you will be prompted with an alert screen.

Step 5: Comodo Cleaning Essentials will remove subst.exe  malware from your computer including all other malwares!

36

Malware Entries

First Seen: 14 February 2018 at 6:43 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable fef1b123777774ae
d6798ed8dc8afb9c
7f7a5bc8
43abf912c0d846c9
5cc43d8dbe964da7
Virus.Win32.
Sality.gen
No 5.1.2600.0
(xpclient.
010817-114
8)
5.1.2600.0 Ukraine N/A
2 Microsoft Corporation Executable eedee5624798a62a
9d570dd57086ac48
a8f3c5ce
36372dab86a4899b
6dca046a9a905f4e
Virus.Win32.
Virut.CE
No 5.1.2600.0
(xpclient.
010817-114
8)
5.1.2600.0 5.227.233.194/32 N/A
3 Microsoft Corporation Executable 609b49ab85373c31
e83a6853e142018e
cc9772f6
18c5f6f0abe132d2
dd59b61dc29b0160
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Morocco N/A
4 Microsoft Corporation Executable de1d6161962919c9
6589fe3bad837a8a
7898c2c4
f6278ba9d59bcd12
251a10efe3551ccb
Virus.Win32.
Virut.CE
No 6.1.7600.1
6385
(win7_rtm.
090713-125
5)
6.1.7600.1
6385
Nigeria N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
10

Safe Entries

First Seen: 11 July 2009 at 11:34 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 ReactOS Development Team Executable d5f63e1766082566
f3b67541f543f7a7
92af33f4
d7ae53e74ef0788f
5bf696cee0b82cf3
No 0.4.8 0.4.8 10.108.51.194/32
2 Microsoft Corporation Executable a5e643eed375039c
7ea2def780bc2179
44419a55
e7ac5d30019b96ad
ee5172e77da72dc7
No 10.0.16299
.15
(WinBuild.
160101.080
0)
10.0.16299
.15
United States
3 ReactOS Development Team Executable e01de7d8e6efd42d
c9f1500081723bb9
aa3ad813
e086416a4961450a
7924a8d769a85949
No 0.4.9 0.4.9 10.108.51.116/32
4 Microsoft Corporation Executable 8d6580b6685db6ae
0d9ca0acf3a62a8f
61597f7f
e4f352be823590b5
8d6d494ccb14402b
No 6.3.9600.1
6384
(winblue_r
tm.130821-
1623)
6.3.9600.1
6384
United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security