Prevx Research Division
مجلد جديد.EXE
Cloaked MalwareYour PC is infected. The file called مجلد جديد.EXE is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including مجلد جديد.EXE as soon as possible. The free version of Prevx will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Malicious Software
File Behavior
مجلد جديد.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Executes a Process
- Registers a Dynamic Link Library File
- This process creates other processes on disk
مجلد جديد.EXE has been the subject of the following behavior:
- Created as a process on disk
- Added as a Registry auto start to load Program on Boot up
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
- Registered as a Dynamic Link Library File
Country Of Origin
The filename مجلد جديد.EXE was first seen on Nov 20 2009 in the following geographical regions of the Prevx community:
- Yemen on Nov 20 2009
- The United Kingdom on Nov 20 2009
- Oman on Dec 21 2009
- South Africa on Dec 21 2009
- Syrian Arab Republic on Aug 27 2012
File Name Aliases
مجلد جديد.EXE can also use the following file names:
- RECYCLER.EXE
- CSRSS.EXE
- CTFMON.EXE
- DAT.EXE
- NEW FOLDER.EXE
- SECTORS.EXE
- SYSTEMVOLUMEINFORMATION.EXE
- NEW_FOLDER.EXE
- MUSIC.EXE
- OTHER.EXE
- AVDATA.EXE
- PODCAST.EXE
- VIDEO.EXE
- WAYFINDER.EXE
- RINGTONES.EXE
- PICTURE.EXE
- SERC IM.EXE
- CONVERSATIONS.EXE
- DCIM.EXE
- CONTACTS.EXE
- JPG.EXE
- مجلد جديد (1).EXE
- سالمو.EXE
- اوراق عمل.EXE
- طيور الجنه.EXE
- المختبر.EXE
- DR .FAWWAZ.EXE
- مهم عبدالله.EXE
- موسوعة قسم المختبر - منتديات سعوديات النسائية_FILES.EXE
- MP3.EXE
- _PALBTN.EXE
Filesizes
The following file size has been seen:
- 287,164 bytes
- 591,872 bytes
- 381,836 bytes
- 518,144 bytes
Vendor, Product and Version Information
Files with the name مجلد جديد.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- ; Nhatquanglan;
- ; ; 2.00
- ; ; 3, 2, 4, 9
- ; ; 2.00
File Type
The filename مجلد جديد.EXE refers to many versions of an executable program.