REDIST.EXE - Dangerous

What you should do about REDIST.EXE:

You should urgently check your PC and remove any malicious software including REDIST.EXE as soon as possible.

The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't take the risk, check your PC now.

Download Prevx CSI Now

What we know about REDIST.EXE:

REDIST.EXE

AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:

DEFINITION OF: REDIST.EXE

Safety Rating: Known Malware, do not run
Malware Family: Part of Malware group - Email-Worm Win32 generic
Malware Form: WORM
Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from REDIST.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
First seen: Jul 7 2005 (GMT)
Last seen: Jul 7 2005 (GMT)
File Size: 57,344 bytes

MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY

1. COVERT ANALYSIS OF: REDIST.EXE

File Names Used: 734
Paths Used: 653
Common File Name: REDIST.EXE
Common Path: ?:\
Vendor Information: gy
Version Information: 1.00
REDIST.EXE may use 734 or more path and file names, these are the most common:
1 :%localappdata%\microsoft\...urning\lan driver 8139\LAN DRIVER 8139.EXE
2 :%STARTMENU%\STARTUP.EXE
3 :%WINDIR%\FONTS\020AB.COM
4 :%WINDIR%\FONTS\0537E.COM
5 :%WINDIR%\FONTS\0537E11111 .COM
6 :%WINDIR%\FONTS\08AD9.COM
7 :%WINDIR%\FONTS\407CF.COM
8 :%WINDIR%\FONTS\49C03.COM
9 :%WINDIR%\FONTS\5327F.COM
10:%WINDIR%\FONTS\7F5C1.COM
11:%WINDIR%\FONTS\84880.COM
12:%WINDIR%\FONTS\8A881.COM
13:%WINDIR%\FONTS\EF48C.COM
14:%WINDIR%\FONTS\F37DB.COM
15:?:\โครงการภาษีอากร\โครงการภา�.....EXE
File Name Structure: Normal
File and Path Structure: Suspicious, unusually high number of file and path combinations

2. RELATIONSHIP ANALYSIS OF: REDIST.EXE

Malicious Objects Created: 1 objects
Malicious Creators: 5
Malware Run Keys: None
Self Persists:
Antivirus Detection: Yes, detected by one or more 3rd party Antivirus product
Anti-Spyware Detection: Yes, detected by one or more 3rd party Anti-Spyware product

3. ACTIVITY ANALYSIS OF: REDIST.EXE

The following behaviors have been observed for this object:
Installs programs.
Deletes programs.
Invokes dll components.
Creates Run Keys.
Runs other programs.
Scans active processes.
Creates known malware.
Creates copies of itself.

4. PROPAGATION ANALYSIS OF: REDIST.EXE

Malware Group Propagation Rate: Moderate (spreading)
Malware Group: Email-Worm Win32 generic

Other versions of REDIST.EXE