File Investigation Report
IG.EXE
WormYour PC may be infected. The presence of a file called IG.EXE is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including IG.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Worm
File Behavior
IG.EXE has been seen to perform the following behavior:
- The Process is polymorphic and can change its structure
- Executes a Process
- Registers a Dynamic Link Library File
- The Process is packed and/or encrypted using a software packing process
IG.EXE has been the subject of the following behavior:
- Executed as a Process
- Created as a process on disk
- Terminated as a Process
- Deleted as a process from disk
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename IG.EXE was first seen on Aug 2 2007 in the following geographical regions of the Prevx community:
- The UNITED STATES on Aug 2 2007
- SPAIN on Aug 2 2007
- The EUROPEAN UNION on Dec 14 2007
- POLAND on Mar 14 2008
File Name Aliases
IG.EXE can also use the following file names:
- 62820284.EXE
- 29101411.EXE
- 04707951.EXE
- 32156364.EX_
- TI.EXE
Filesizes
The following file size has been seen:
- 2,280,448 bytes
- 46,624 bytes
- 46,656 bytes
- 175,616 bytes
- 1,915,136 bytes
Vendor, Product and Version Information
Files with the name IG.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- PKO BP SA; IntraGraf III NET; 3.0.0.0
- ; popupslider MFC Application; 1, 0, 0, 1
- Loyalty Ventures, Inc.; VeriSign Class 3 Code Signing 2004 CA;
- ; neptune MFC Application; 1, 0, 0, 1
File Type
The filename IG.EXE refers to many versions of an executable program.