Prevx Research Division
FACEBOOK.EXE
System Back DoorIt is possible that your PC could be infected. The file name FACEBOOK.EXE is used by both safe and unsafe programs.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including FACEBOOK.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- System Back Door
- Cloaked Malware
- Malware Dropper
File Behavior
FACEBOOK.EXE has been seen to perform the following behavior:
- Executes a Process
- Creates new folders on the system
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- Injects code into other processes
- The Process is packed and/or encrypted using a software packing process
FACEBOOK.EXE has been the subject of the following behavior:
- Executed as a Process
- Added as a Registry auto start to load Program on Boot up
- Added as a Registry Key (DXCOM) to auto start Programs on system start up
- Created as a process on disk
- Deleted as a process from disk
Country Of Origin
The filename FACEBOOK.EXE was first seen on Apr 6 2008 in the following geographical regions of the Prevx community:
- Spain on Apr 6 2008
- Canada on Jul 25 2008
- Portugal on Nov 10 2009
- Venezuela on Feb 9 2010
- The United Kingdom on Jun 10 2010
- Bulgaria on Jun 10 2010
- Vietnam on Dec 18 2010
- Turkey on Jan 16 2013
File Name Aliases
FACEBOOK.EXE can also use the following file name:
- REALUPGRADE.EXE
- PROSHOW.EXE
- UNWISE.EXE
- FACEBOOK[1].COM
- GHECNB.EXE
- EUTTB.EXE
- PIC675799074533-JPG-WWW.FACEBOOK.COM.EXE
- BRTJTU.EXE
- YFKBH.EXE
- RVIPCF.EXE
- PJYHP.EXE
- FACEBOOK[1].EXE
Filesizes
The following file size has been seen:
- 17,408 bytes
- 103,424 bytes
- 111,616 bytes
- 48,128 bytes
- 12,288 bytes
- 219,387 bytes
- 105,800 bytes
- 65,536 bytes
Vendor, Product and Version Information
Files with the name FACEBOOK.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- Microsoft Corporation; Win32 Cabinet Self-Extractor ; 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
- ; system.dll; 2012
- Microsoft Corporation; Microsoft® Resource File To COFF Object Conversion Utility; 8.00.50727.4940 (Win7SP1.050727-5400)
- Paul Inc; ; 1.00
File Type
The filename FACEBOOK.EXE is used by multiple object types including executable programs,objects.