5TH JULY.EXE

What you should do about 5TH JULY.EXE:

The most common objects with the name of 5TH JULY.EXE have yet to be classified as safe by our research department.

If you are concerned that your PC might be infected why not try our Free version of Prevx 3.0. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't take the risk, check your PC now.

Download Prevx 3.0

What we know about 5TH JULY.EXE:

5TH JULY.EXE

AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:

DEFINITION OF: 5TH JULY.EXE

Safety Rating: Known Malware, do not run
Malware Family: Part of Malware group - Trojan SystemPoser
Determination: Automatically determined using Prevx centralized heuristics
Malware Form: EXPLOIT
Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from 5TH JULY.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
First seen: Sep 16 2008 (GMT)
Last seen: Sep 16 2008 (GMT)
File Size: 566,084 bytes

MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY

1. COVERT ANALYSIS OF: 5TH JULY.EXE

File Names Used: 24
Paths Used: 24
Common File Name: 5TH JULY.EXE
Common Path: %WINDIR%\SYSTEM32\
Vendor Information: No Vendor details specified
5TH JULY.EXE may use 24 or more path and file names, these are the most common:
1 :%DOCUMENTS%\NEW FOLDER.EXE
2 :%WINDIR%\SYSTEM32\BLASTCLNNN.EXE
3 :?:\5th july\5TH JULY.EXE
4 :?:\broodwar\broodwar\BROODWAR.EXE
5 :?:\broodwar\broodwar\characters\CHARACTERS.EXE
6 :?:\broodwar\broodwar\errors\ERRORS.EXE
7 :?:\broodwar\broodwar\maps\broodwar\webmaps\WEBMAPS.EXE
8 :?:\broodwar\broodwar\maps\campaign\CAMPAIGN.EXE
9 :?:\broodwar\broodwar\maps\download\DOWNLOAD.EXE
10:?:\broodwar\broodwar\maps\ladder\LADDER.EXE
11:?:\broodwar\broodwar\maps\MAPS.EXE
12:?:\broodwar\broodwar\maps\oldladder\OLDLADDER.EXE
13:?:\broodwar\broodwar\maps\replays\REPLAYS.EXE
14:?:\broodwar\broodwar\maps\save\SAVE.EXE
15:?:\jetaudio 7.0.2.3010 plus vx\JETAUDIO 7.0.2.3010 PLUS VX.EXE
File Name Structure: Normal
File and Path Structure: Suspicious, unusually high number of file and path combinations

2. RELATIONSHIP ANALYSIS OF: 5TH JULY.EXE

Malicious Objects Created: 1 objects
Malicious Creators: 1
Malware Run Keys: None
Self Persists:
Antivirus Detection: No third party antivirus detection observed
Anti-Spyware Detection: No third party anti-spyware detection observed

3. ACTIVITY ANALYSIS OF: 5TH JULY.EXE

The following behaviors have been observed for this object:
Installs programs.
Deletes programs.
Runs other programs.
Communicates with web sites using httpout protocols.
Creates known malware.
Creates copies of itself.

4. PROPAGATION ANALYSIS OF: 5TH JULY.EXE

Malware Group Propagation Rate: Moderate (spreading)
Malware Group: Trojan SystemPoser