BEJQE.EXE

What you should do about BEJQE.EXE:

The most common objects with the name of BEJQE.EXE have yet to be classified as safe by our research department.

If you are concerned that your PC might be infected why not try our Free version of Prevx 3.0. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't take the risk, check your PC now.

Download Prevx 3.0

What we know about BEJQE.EXE:

BEJQE.EXE

AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:

DEFINITION OF: BEJQE.EXE

Safety Rating: Known Malware, do not run
Malware Family: Part of Malware group - Malware:SysCovert
Determination: Automatically determined using Prevx centralized heuristics
Malware Form: EXPLOIT
Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from BEJQE.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
First seen: Mar 18 2006 (GMT)
Last seen: Mar 18 2006 (GMT)
File Size: 28,672 bytes

MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY

1. COVERT ANALYSIS OF: BEJQE.EXE

File Names Used: 4424
Paths Used: 113
Common File Name: BEJQE.EXE
Common Path: %WINDIR%\SYSTEM32\
Vendor Information: No Vendor details specified
BEJQE.EXE may use 4,424 or more path and file names, these are the most common:
1 :%WINDIR%\SYSTEM32\AFFGN.EXE
2 :%WINDIR%\SYSTEM32\AHEBX.EXE
3 :%WINDIR%\SYSTEM32\BELAF.EXE
4 :%WINDIR%\SYSTEM32\BMLGM.EXE
5 :%WINDIR%\SYSTEM32\BWJDS.EXE
6 :%WINDIR%\SYSTEM32\BXVOA.EXE
7 :%WINDIR%\SYSTEM32\CFWXX.EXE
8 :%WINDIR%\SYSTEM32\DIKNC.EXE
9 :%WINDIR%\SYSTEM32\FBAGO.EXE
10:%WINDIR%\SYSTEM32\JHGYS.EXE
11:%WINDIR%\SYSTEM32\JJEDX.EXE
12:%WINDIR%\SYSTEM32\KPLMB.EXE
13:%WINDIR%\SYSTEM32\KQNIN.EXE
14:%WINDIR%\SYSTEM32\KXAQJ.EXE
15:%WINDIR%\SYSTEM32\LLHNN.EXE
File Name Structure: Normal
File and Path Structure: Suspicious, unusually high number of file and path combinations

2. RELATIONSHIP ANALYSIS OF: BEJQE.EXE

Malicious Objects Created: 20 objects
Malicious Creators: 69
Malware Run Keys: Creates registry run keys for known malware objects
Self Persists:
Antivirus Detection: Yes, detected by one or more 3rd party Antivirus product
Anti-Spyware Detection: Yes, detected by one or more 3rd party Anti-Spyware product

3. ACTIVITY ANALYSIS OF: BEJQE.EXE

The following behaviors have been observed for this object:
Installs programs.
Deletes programs.
Invokes dll components.
Registers Browser Help Objects.
Creates Run Keys.
Modifies the hostsfile.
Runs temporary programs.
Runs other programs.
Communicates with web sites using httpout protocols.
Has mass mail capabilities.
Scans active processes.
Modifies Browser Search Settings.
Terminates processes.
Hijacks running processes.
Has outbound communications.
Inspects email address books.
Could log keystrokes.
Creates registry entries.
Creates run keys for known malware.
Creates known malware.

4. PROPAGATION ANALYSIS OF: BEJQE.EXE

Malware Group Propagation Rate: Moderate (spreading)
Malware Group: Malware:SysCovert