LEXPLORER.EXE - Dangerous
What you should do about LEXPLORER.EXE:
You should urgently check your PC and remove any malicious software including LEXPLORER.EXE as soon as possible.
The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't take the risk, check your PC now.
What we know about LEXPLORER.EXE:
LEXPLORER.EXE
AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:
DEFINITION OF: LEXPLORER.EXE
- Safety Rating: Known Malware, do not run
- Malware Family: Part of Malware group - Backdoor Win32 DarkMoon az
- Malware Form: EXPLOIT
- Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from LEXPLORER.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
- Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
- First seen: Jul 11 2005 (GMT)
- Last seen: Jul 11 2005 (GMT)
- File Size: 87,501 bytes
MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY
Other versions of LEXPLORER.EXE1. COVERT ANALYSIS OF: LEXPLORER.EXE
- File Names Used: 5
- Paths Used: 10
- Common File Name: LEXPLORER.EXE
- Common Path: %WINDIR%\SYSTEM32\
- Vendor Information: No Vendor details specified
- LEXPLORER.EXE may use 5 or more path and file names, these are the most common:
- 1 :%temp%\rar$dr02.800\KEYGEN.EXE
- 2 :%temp%\rar$ex00.564\KEYGEN.EXE
- 3 :%TEMP%\RAR$EX00.578\KEYGEN.EXE
- 4 :%TEMP%\RAR$EX00.947\KEYGEN.EXE
- 5 :?:\INCOMING\KEYGEN.EXE
- File Name Structure: Normal
- File and Path Structure: Normal
2. RELATIONSHIP ANALYSIS OF: LEXPLORER.EXE
- Malicious Objects Created: 1 objects
- Malicious Creators: 1
- Malware Run Keys: Creates registry run keys for known malware objects
- Self Persists: Yes, creates copies of itself
- Antivirus Detection: No third party antivirus detection observed
- Anti-Spyware Detection: No third party anti-spyware detection observed
3. ACTIVITY ANALYSIS OF: LEXPLORER.EXE
- The following behaviors have been observed for this object:
- Installs programs.
- Deletes programs.
- Creates Run Keys.
- Runs other programs.
- Has mass mail capabilities.
- Communicates with other computers across the web.
- Terminates processes.
- Has outbound communications.
- Could log keystrokes.
- Creates registry entries.
- Creates run keys for known malware.
- Creates known malware.
- Creates copies of itself.
4. PROPAGATION ANALYSIS OF: LEXPLORER.EXE
- Malware Group Propagation Rate: Moderate (spreading)
- Malware Group: Backdoor Win32 DarkMoon az
- Copyright Prevx Limited 2005, 2006