A0000159.EXE
What you should do about A0000159.EXE:
The most common objects with the name of A0000159.EXE have yet to be classified as safe by our research department.
If you are concerned that your PC might be infected why not try our Free Prevx CSI Scanner. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't take the risk, check your PC now.
What we know about A0000159.EXE:
A0000159.EXE
AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:
DEFINITION OF: A0000159.EXE
- Safety Rating: Known Adware, do not run
- Adware Family: Part of Adware group - Adware Maxfiles
- Malware Form: EXPLOIT
- Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from A0000159.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
- Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
- First seen: Nov 3 2005 (GMT)
- Last seen: Nov 3 2005 (GMT)
- File Size: 171,520 bytes
MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY
1. COVERT ANALYSIS OF: A0000159.EXE
- File Names Used: 73
- Paths Used: 61
- Common File Name: A0000159.EXE
- Common Path: %COMMONFILES%\WINDOWS\
- Vendor Information: No Vendor details specified
- Product Information: AutoIt v3 Script
- A0000159.EXE may use 73 or more path and file names, these are the most common:
- 1 :%profiles%\omar pichardo\...figuracić³n local\temp\TEMP.FR37F4
- 2 :%TEMP%\AUT108D.TMP
- 3 :%TEMP%\AUT3.TMP
- 4 :%TEMP%\AUT6.TMP
- 5 :%TEMP%\AUT7.TMP
- 6 :%TEMP%\AUTA.TMP
- 7 :%TEMP%\AUTBA5.TMP
- 8 :%TEMP%\AUTD.TMP
- 9 :?:\A00000000
- 10:?:\documents and settings...ia\local settings\temp\AUT3.TMP
- File Name Structure: Normal
- File and Path Structure: Suspicious, unusually high number of file and path combinations
2. RELATIONSHIP ANALYSIS OF: A0000159.EXE
- Malicious Objects Created: 57 objects
- Malicious Creators: 3
- Malware Run Keys: Creates registry run keys for known malware objects
- Self Persists:
- Antivirus Detection: No third party antivirus detection observed
- Anti-Spyware Detection: No third party anti-spyware detection observed
3. ACTIVITY ANALYSIS OF: A0000159.EXE
- The following behaviors have been observed for this object:
- Installs programs.
- Deletes programs.
- Invokes dll components.
- Creates Run Keys.
- Runs other programs.
- Communicates with web sites using httpout protocols.
- Hijacks running processes.
- Has outbound communications.
- Creates registry entries.
- Creates run keys for known malware.
- Creates known malware.
4. PROPAGATION ANALYSIS OF: A0000159.EXE
- Malware Group Propagation Rate: Moderate (spreading)
- Malware Group: Adware Maxfiles
- Copyright Prevx Limited 2005, 2006