Prevx Research Division
CPHELPER.EXE
Malware DownloaderYour PC may be infected. The presence of a file called CPHELPER.EXE is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including CPHELPER.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Malware Downloader
File Behavior
CPHELPER.EXE has been seen to perform the following behavior:
- Uses DNS to retrieve the IP address for web sites
CPHELPER.EXE has been the subject of the following behavior:
- Executed as a Process
Country Of Origin
The filename CPHELPER.EXE was first seen on Oct 11 2009 in the following geographical region of the Prevx community:
- Turkey on Oct 11 2009
Filesizes
The following file size has been seen:
- 9,728 bytes
- 497,664 bytes
Vendor, Product and Version Information
These files have no vendor, product or version information specified in the file header.
File Type
The filename CPHELPER.EXE refers to many versions of an executable program.
Network Activity
One or more files with the name CPHELPER.EXE performs the following network events:
- DNS Lookup69.64.147.216 www.accessplugin.com
Website Activity
One or more files with the name CPHELPER.EXE interacts with the following web sites and pages. Web addresses have been deliberately modified to prevent unintentional use.
- Port 80 IP:69.64.147.216