How to Remove the wscript.exe Virus?

What is wscript.exe?

wscript.exe is a legitimate file. This process is known as Microsoft Windows Based Script Host and belongs to software Microsoft Windows Operating System. It is developed by Microsoft. It is commonly stored in C:\Windows\System32. The malware programmers or cyber criminals write different types of malicious programs and name it as wscript.exe virus to damage the software and hardware.

Affected Platform: Windows OS

How to check if your computer is infected with wscript.exe Virus?

Malicious authors try to infect the systems with different types of malicious programs. Each form of malicious software is designed to infect the system that creates different issues and impact on the system. One can notice the following changes once the system is infected with wscript.exe Virus

If the internet connection fluctuation is high
If the wscript.exe file is taking more of your CPU memory
If the system performance is very low
If the system is redirected to some strange websites
If the system is getting some annoying popup ads
If the system freezes quiet often
If it invites other malware to infect and damage the system and exploits the same to collect the user private informaton

When one of these happens then you can be sure that your system is infected with setup.exe malware. To confirm that go to task manager by pressing the combination of keys ctrl+alt+del and go to the process tab and right click on the wscript.exe and open the location, if the location is subfolder C:\Windows\System32 files then the system is not affected by wscript.exe, if the location is somewhere else then the system is affected by wscript.exe virus.

How to remove wscript.exe malware from system using Comodo Antivirus?

Step 1: Download the award-winning Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: After network detection is complete, press “Close” button for a scan window.

Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the antivirus.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus will remove the wscript.exe virus from your computer including all other malwares!

Related Resources:

Website Malware Directory Resources:

Malware Entries

Safe Entries

First Seen: 25 October 2011 at 1:39 am

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	Microsoft Corporation	Executable	73c6cdae2e46f1d0 116cad5d37a76b07 72011181	42f1120f719857a6 6b533f463f1f7a54	Virus.Win32. Ramnit.A	No	5.8.7601.2 4288	5.8.7601.2 4288	91.226.15.74/32	N/A
2	Microsoft Corporation	Executable	1bbb8b97d49add69 82fdc9c339fc5fd0 712a3b44	3cfb9bf0acf7c634 150c64abcfb37306	Virus.Win32. Virut.Ce	No	5.812.1024 0.16384	5.812.1024 0.16384	Pakistan	N/A
3	Microsoft Corporation	Executable	a03365cec78c6603 ca7670a07c109f0f fba98cdc	edfc86d2e4816465 6596871f4d8c72b6	Virus.Win32. Virut.CE	No	5.6.0.8820	5.6.0.8820	Egypt	N/A
4	ase Corporation	Executable	5d3fa2f093eba90d bf49b3b4615b8d8e bd4562ea	4ff38257fe4a7f09 9e60fb3590242981	TrojWare.Win 32.Kazy.FOF	Yes	5.1.0.4615	5.1.0.4615	Internal Submission	N/A
5	Microsoft Corporation	Executable	6e4346a6f82593d5 c8fe7ed5a28fbdc6 61f57c1c	c8cf492650006177 69086ab0d2118917	Virus.Win32. Virut.CE	No	5.7.0.1806 6	5.7.0.1806 6	Russian Federation	N/A
6	Microsoft Corporation	Executable	930e04607e70f6c9 ad4432e64c6c48b5 64c6439a	f0744c9af9438c1b 38790b1ea89b07b7	Virus.Win32. Virut.CE	No	5.8.7600.1 6385	5.8.7600.1 6385	154.178.42.223/32	N/A
7	Microsoft Corporation	Executable	65d01b63649cf097 fe7ae38b9ec5906f 7277da3d	38a859a93a24a8a3 50cd4cd07d9e4cfc	Virus.Win32. Expiro.R0	No	5.7.0.1806 6	5.7.0.1806 6	Ukraine	N/A
8	N/A	Executable	9cc30ba1cd0caca0 9e7146482b49cb72 87d80408	241e8cde77492f78 3bd2dc24a08726df	Unclassified Malware	No	7.0.0.0	7.0.0.0	105.160.105.116/32	N/A
9	Microsoft Corporation	Executable	59a647b5404e1830 06ee2744b5ea0d35 b7cf663d	fcc80f776a9947e8 4387759367e00e3b	Virus.Win32. Virut.CE	No	5.812.1024 0.16384	5.812.1024 0.16384	Lao People's Democratic Republic	N/A
10	Microsoft Corporation	Executable	8bcfea5b24024491 5386de84778e9a6e 9dc5d654	2854691d668856ac 295ddb068c55fc35	Virus.Win32. Virut.Ce	No	5.7.0.1659 9	5.7.0.1659 9	10.224.1.116/32	N/A
11	Microsoft Corporation	Executable	fc83761ce19d9982 a8ae0e759da7b9ad a317b31b	8ea74de902d6c823 2cff67acec1011c8	Virus.Win32. Virut.Ce	No	5.812.1024 0.16384	5.812.1024 0.16384	Venezuela	N/A
12	Microsoft Corporation	Executable	ffdf7c2d3df3c00c 3fd74f398485f4c2 675d973e	248364b5cf163a0e 2e30016c096169c8	Virus.Win32. Expiro.ew	No	5.7.0.1806 6	5.7.0.1806 6	United States	N/A
13	Microsoft Corporation	Executable	33502b67db289e7e 26678b9b3e9fff6a 58d98714	a6252f0aa77d9a36 70f35cc7335d282d	Virus.Win32. Virut.Ce	No	5.8.7600.1 6385	5.8.7600.1 6385	Bulgaria	N/A
14	Microsoft Corporation	Executable	d2db3b93f03f442f e1ca95217138c743 24e0aff9	fcab1c08934f1d14 884133c720d85927	Virus.Win32. Virut.CE	No	5.7.0.1806 6	5.7.0.1806 6	Trinidad and Tobago	N/A
15	Microsoft Corporation	Executable	b9ee41359d552bdf 1379a50d436d4d32 71dadd0d	0c1c3f16e36ecf03 613116891bf37fee	Virus.Win32. Virut.CE	No	5.812.1024 0.16384	5.812.1024 0.16384	Nigeria	N/A
16	Microsoft Corporation	Executable	1a834b1df4142b0b b46c8157dec3dbfe 4bf2d240	4c372f9efbfb3e7f db097aadaa658fa3	Virus.Win32. Expiro.win	No	5.7.0.1659 9	5.7.0.1659 9	Ukraine	N/A
17	Microsoft Corporation	Executable	3090f434357bc4f5 91adb9550a2284f8 5dac3698	368e6ad0df573bea 4c36ac2b4ee24534	Virus.Win32. Virut.Ce	No	5.7.0.1806 6	5.7.0.1806 6	Italy	N/A
18	Microsoft Corporation	Executable	66758c30b8fa6d1a c907030b05c83d55 5a264fb5	529d581583d0f44d 65a1af1791694bc8	Virus.Win32. Virut.CE	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Indonesia	N/A
19	Microsoft Corporation	Executable	ad866c3b83765431 4254390680daac30 de6e4575	1d72c176cafb8792 bba0490774c7a9d7	Virus.Win32. Parite.gen	No	5.8.7601.2 4288	5.8.7601.2 4288	102.164.99.57/32	N/A
20	N/A	Executable	3c45b8a43f7b44d7 1dc8487898f27fc5 93c8ca5b	c5f28d940c87e036 f9965dc271755e90	Virus.Win32. Virut.CE	No	N/A	N/A	Egypt	N/A
21	Microsoft Corporation	Executable	90ce21289fdfda6f 8c9447387eedcbee 56154564	7b07810dbdb66927 23aa01b968320327	Virus.Win32. Virut.CE	No	5.812.1024 0.16384	5.812.1024 0.16384	168.227.32.67/32	N/A
22	Microsoft Corporation	Executable	9c6db68c5eccfff4 4cd1bb8afe1326e7 006db127	a3b471d8f7eeef92 98a271d479f5a521	Virus.Win32. Virut.CE	No	5.812.1024 0.16384	5.812.1024 0.16384	Saudi Arabia	N/A
23	Microsoft Corporation	Executable	140d2710585f4487 a909ea82cf5b3d1a 3c7f8740	d2e48f26061b9171 84169d5c8731cc60	Virus.Win32. Sality.Q	No	5.7.0.1806 6	5.7.0.1806 6	Poland	N/A
24	N/A	Executable	089bc3e6ce63b1e8 3f7272f138ed6413 99dc7920	6d6d94564570ad20 473ce785a4fdcd78	Backdoor.Win 32.Poison.as	No	N/A	N/A	Brazil	N/A
25	Microsoft Corporation	Executable	042001838787f415 e9cb7e37b1ca6686 715ee90d	5e067ff137f6db77 ac6265039a070e96	Virus.Win32. Virut.CE	No	5.6.0.8825	5.6.0.8825	Iran, Islamic Republic of	N/A
26	Microsoft Corporation	Executable	98d001b0cabc6c73 77bcc26d485dbfd5 93cd8777	9e945a4adab57057 70606959413cc4d6	Virus.Win32. Virut.CE	No	5.812.1024 0.16384	5.812.1024 0.16384	156.220.116.63/32	N/A
27	Microsoft Corporation	Executable	3d255e1bd799d291 f41d36529481755c 53e9af77	1795a525a9f7c8e4 6863f07e89bdcc94	Virus.Win32. Virut.CE	No	5.812.1024 0.16384	5.812.1024 0.16384	Indonesia	N/A

Prev 1 2 3...7 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 10 July 2008 at 1:32 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	Microsoft Corporation	Executable	0feb54c3151b018b feb244255009d71a 37df544f	a69259a7c57367d0 7930169a86006130	No	5.812.1024 0.16384	5.812.1024 0.16384	United States
2	N/A	Executable	61e46475f682d1a4 b46b503d7c4f6b00 a222105b	f1b8443b44713b78 33c87707700aa35c	No	N/A	N/A	United States
3	Microsoft Corporation	Executable	b57972fcca8cc888 eab9b960dc84fa4b 55991105	4d780d8f77047ee1 c65f747d9f63a1fe	No	5.812.1024 0.16384	5.812.1024 0.16384	United States
4	Microsoft Corporation	Executable	279737b19682a766 6f07eeea9b1a2b51 d366c0d1	e417d750cd07eea2 d7a140c21db46e33	No	5.7.0.1806 6	5.7.0.1806 6	Ukraine
5	Microsoft Corporation	Executable	5e19f1efc97e74ca 6993da5b111574b6 51339c90	f460d7a224da3214 43bb4f3c3f9dad2e	No	5.6.0.8820	5.6.0.8820	Lebanon
6	Microsoft Corporation	Executable	656b0daee6e5f97e efae78d26574f078 0b509fd3	ff1ebcb747d4771c 46dfb8c73cf4e632	No	5.6.0.6626	5.6.0.6626	Internal Submission
7	N/A	Executable	208721c11f877b7a a1def20e06e87165 68104016	228fe33ed64fbeb4 ae4ca0ec30ae1db7	No	N/A	N/A	United States
8	Microsoft Corporation	Executable	8fd83a7cabc99b10 ec0fe9b80024cd9b 57f2d594	f5aff05c4b08ef75 3084d19690cfb5f3	No	5.6.0.8825	5.6.0.8825	United States
9	Microsoft Corporation	Executable	8fe4b4bc0824ffd1 05074881aaa7f806 c72a53f6	d3b8261a0ce771b4 e434c9eacd190d17	No	5.812.1024 0.16384	5.812.1024 0.16384	Saudi Arabia
10	Microsoft Corporation	Executable	32db3281a31a2373 2c2f9ab46f221898 695c1da9	beafd6dd127e7798 928fa8c4835eed3e	No	5.812.1024 0.16384	5.812.1024 0.16384	United States
11	Microsoft Corporation	Executable	c0a68085686f7dd3 3cd662afc07b6f7b 370c37c2	ceb69539dc1ea475 36fd4874554fe630	No	5.0.531.7	5.0.531.7	Internal Submission
12	Microsoft Corporation	Executable	b57972fcca8cc888 eab9b960dc84fa4b 55991105	4d780d8f77047ee1 c65f747d9f63a1fe	No	5.812.1024 0.16384	5.812.1024 0.16384	104.238.128.144/32
13	Microsoft Corporation	Executable	3b4e9d5714e478ba f2ad91417e7f6f35 68c1abce	b81e7b35db616a29 a2f3c1db9cec90a7	No	5.812.1024 0.16384	5.812.1024 0.16384	Saudi Arabia
14	N/A	Non-executable	99d7d3fbf9d5f60f 83a870899ad353e0 6a01f0af	6a691edf9d584ea3 85c0321e28568050	No	N/A	N/A	United States
15	N/A	Executable	cce1d708a43bd5d1 431ebdda84f4fd25 d4d0c575	a9fa00b0b7b1760c 6a6d5cfae46c964f	No	N/A	N/A	United States
16	Microsoft Corporation	Executable	815d079b7d54122d 73c8bf04c29be59f 6f4803b1	288a47f42398d4cc 7dc0bb0b9c75de07	No	5.0.531.7	5.0.531.7	Internal Submission
17	N/A	Non-executable	5bb620a15182b367 abde5464648a0baa c030235b	20bc3624771eb699 f6d2b92ec2b88739	No	N/A	N/A	United States
18	Microsoft Corporation	Executable	f25fb89b39d681d5 f5205c0be8c3ad8a 5b77355e	8862ff57b273d89a 807763820c464efa	Yes	5.8.7600.1 6385	5.8.7600.1 6385	Internal Submission
19	Microsoft Corporation	Executable	656b0daee6e5f97e efae78d26574f078 0b509fd3	ff1ebcb747d4771c 46dfb8c73cf4e632	No	5.6.0.6626	5.6.0.6626	10.224.1.54/32
20	N/A	Executable	a2040edae7b371ba 66bde7742d6ab81b e88fb912	c8b1c8c971224c26 cccf09fd37c60ff9	No	N/A	N/A	United States
21	Microsoft Corporation	Executable	6cf48d7fe95a9e6c 6d3449837c113af1 12c5ac43	849d2f1d2628fb33 d6408ec906449d80	No	5.1.0.4711	5.1.0.4711	Internal Submission
22	N/A	Non-executable	0ec00eefd5400839 261f6a3ef33e5d00 abda91f2	cd9aac525b070893 d31548f2e2ca3ed1	No	N/A	N/A	United States
23	N/A	Executable	0e8f1b67522b3243 12dcca2d260b85c4 4112acdf	efc21baf068c814e d7f330226f8739a2	No	N/A	N/A	10.108.51.116/32
24	Microsoft Corporation	Executable	5221c5d7f84e7513 a37f7117b3290a58 581a55a3	f5ffbbd0d2e8d43e 46f859f8922c269c	No	5.6.0.8820	5.6.0.8820	Poland
25	Microsoft Corporation	Executable	8682bb3fdb59b561 14692adcbebf08ca 4d1354f7	92bcd5ed88f5768a 9bae04cf41ececca	No	5.6.0.8515	5.6.0.8515	United States
26	Microsoft Corporation	Executable	545ec11dee642de6 33eb2c6f6ffc90cc e4decf8d	0639b0a6f69b3265 c1e42227d650b7d1	No	5.812.1024 0.16384	5.812.1024 0.16384	104.238.128.144/32

Prev 1 2 3...7 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “wscript.exe”

What is wscript.exe?

How to check if your computer is infected with wscript.exe Virus?