Related
General Threat
DiskO.exe detected as PUP.MailRu
Review indicators and cleanup context for this General Threat report.
Overview
config.exe threat analysis
config.exe is obviously a potentially unwanted application that may be presently running in your device. By the way, config.exe will certainly be evident in Task Manager of your system.
config.exe does not enter running computers legitimately. As long as config.exe is active in your system you may as well experience all kinds of essential computer downturn troubles. There can be high CPU usage caused by config.exe and also its activity in the system.
config.exe might be associated with some third-party utilities that can be integrated with some cost-free programs. If you recognize some suspicious third-party utilities then you require to quickly change to the sophisticated (a.k.a. customized) setup method to prevent config.exe invasion into your COMPUTER.
config.exe can be deleted immediately just through a full scanning of your device with the proven anti-malware tool. This method will certainly additionally defend your computer system from all other possible infections that may be spread out on the internet today. Please follow this adware uninstall tutorial provided below for more comprehensive realities on just how to repair your COMPUTER today.
Key indicators
File name
config.exe
Threat type
General Threat
Detection name
Trojan.Win64.CoinMiner
MD5
106D16B4F96B4B60652C374D6AE8E17D
File size
4702720 bytes
Scan date
2021-09-15 04:19
Product name
Microsoft? Windows? Operating System
Company name
Microsoft Corporation
Technical details
| Full path | C:\windows\fonts\config.exe |
|---|---|
| Registry path | |
| Product version | 6.1.7601.18798 |
| File version | 6.1.7601.18798 (win7sp1_gdr.150316-1654) |
| Certificates | |
| Sections | .text:60000020:6D25C45F446B10A505BEDB7D6042D320:3237376 .rdata:40000040:5ADE8ADD6EE8D442952DD6891430E6C7:1209344 .data:C0000040:A8CCB993F151F2200DCA439444271425:70656 .pdata:40000040:49C6C32BFFFE792E3D907FED39FC432E:130560 _RANDOMX:60000040:2D064068EFAF1CCE84DFD050AC9137D1:3072 _SHA3_25:60000040:C14F9AAD5E95192CD7523BA6675549FD:2560 _TEXT_CN:60000040:6A7F77E47F77F65BEF85036AE5A71106:6656 _TEXT_CN:60000040:409BF3F918F2402291CB56C2E9354B47:4608 _RDATA:40000040:C72D440227216BB36F7444E6CD925F13:512 .rsrc:40000040:17B70A46769415E86F0CEFD4327526C3:1536 .reloc:42000040:706A8B5E6ABEE658214C01493F11D7D2:34816 |
Removal workflow
Use the indicators above to confirm that the suspicious file matches this report, then clean the system and verify that the process does not return after reboot.
1
Scan
Run a trusted anti-malware scan and include startup entries, scheduled tasks, browser extensions, and recently downloaded files.
2
Remove
Quarantine detected items, remove associated unwanted applications, and reset affected browser settings when needed.
3
Verify
Restart the computer, check Task Manager and startup locations, then rescan to confirm the threat is gone.