File Investigation Report
7Z458.EXE
Currently being reviewedThe filename 7Z458.EXE is used by objects that are classified as safe. It has not yet been seen to be associated with malicious software.
If you are concerned that your PC might be infected why not try our Free Prevx Scanner. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
File Behavior
7Z458.EXE has been seen to perform the following behavior:
- Adds products to the system registry
- This process creates other processes on disk
- Enables an In Process Object/Server - Common with DLL Injections
- This Process Deletes Other Processes From Disk
- Creates system tray popups, messages, errors and security warnings
- Changes the Internet Explorer Search Page
- Creation and Registration of a Browser Helper Object in Internet Explorer
- Uses rootkit techniques to conceal its presence, interrogation or removal
- Uses low level functions to hide itself from the user and from system/security processes
- Found on infected systems and resists interrogation by security products
7Z458.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Executed as a Process
- Executed by Internet Explorer
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
- Executed from Temporary Folders
Country Of Origin
The filename 7Z458.EXE was first seen on May 5 2008 in the following geographical regions of the Prevx community:
- The UNITED KINGDOM on May 5 2008
- ITALY on May 5 2008
- INDIA on Nov 15 2009
Filesizes
The following file size has been seen:
- 877,094 bytes
- 69,120 bytes
Vendor, Product and Version Information
These files have no vendor, product or version information specified in the file header.
File Type
The filename 7Z458.EXE refers to many versions of an executable program.
File Activity
One or more files with the name 7Z458.EXE creates, deletes, copies or moves the following files and folders:
- Deletes c:\docume~1\user\locals~1\temp\nsl6.tmp
- Creates c:\docume~1\user\locals~1\temp\nsb8.tmp
- Deletes c:\docume~1\user\locals~1\temp\nsgA.tmp
- Creates c:\docume~1\user\locals~1\temp\nsga.tmp\ioSpecial.ini
- Creates c:\docume~1\user\locals~1\temp\nsga.tmp\modern-wizard.bmp