File Investigation Report
ADOBER.EXE
WormYour PC may be infected. The presence of a file called ADOBER.EXE is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including ADOBER.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Worm
File Behavior
ADOBER.EXE has been seen to perform the following behavior:
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Changes to the file command map within the registry
- Executes a Process
- Registers a Dynamic Link Library File
- This process creates other processes on disk
- Creates a TCP port which listens and is available for communication initiated by other computers
- Enables a COM Object/Server on the Local Machine
- This Process Deletes Other Processes From Disk
- Can communicate with other computer systems using HTTP protocols
- Uses rootkit techniques to conceal its presence, interrogation or removal
- The Process is polymorphic and can change its structure
ADOBER.EXE has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Executed as a Process
- Terminated as a Process
- Created as a process on disk
- Deleted as a process from disk
Country Of Origin
The filename ADOBER.EXE was first seen on May 8 2007 in the following geographical regions of the Prevx community:
- on May 8 2007
- Ecuador on May 8 2007
- Uruguay on Jun 9 2007
- Venezuela on Jun 9 2007
- Italy on Dec 4 2007
- Thailand on Feb 28 2010
File Name Aliases
ADOBER.EXE can also use the following file names:
- TRZ7.TMP
- ADOBER.EXE.DEL
- UNP1634569.TMP
- TRZ177.TMP
- ADOBER.EXE.XXX.AOSS
- 13808265.EXE
- 60336926.EXE
Filesizes
Files using the name ADOBER.EXE have been seen with the following file size:
- 3,514,318 bytes
Vendor, Product and Version Information
Files with the name ADOBER.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- Google Inc.; Google Toolbar for Internet Explorer; 6, 1, 1518, 856
- Google Inc.; VeriSign Class 3 Code Signing 2004 CA;
File Type
The filename ADOBER.EXE is used by multiple object types including executable programs,objects,Dynamic Link LIbraries.