File Investigation Report
WLMAIL.EXE
Malicious SoftwareIt is possible that your PC could be infected. The file name WLMAIL.EXE is used by both safe and unsafe programs.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including WLMAIL.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Malicious Software
File Behavior
WLMAIL.EXE has been seen to perform the following behavior:
- Executes a Process
- This process creates other processes on disk
- Registers a Dynamic Link Library File
- Found on infected systems and resists interrogation by security products
- Can communicate with other computer systems using HTTP protocols
- Can examine and send Email using POP3 protocols
- Sends email using SMTP protocols
- Reads your outlook address book
- Changes to the file command map within the registry
- Makes outbound connections to other computers using NETBIOSOUT protocols
- Can communicate with other computers using TCP protocols
- Writes to another Process's Virtual Memory (Process Hijacking)
- The Process is packed and/or encrypted using a software packing process
- The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
WLMAIL.EXE has been the subject of the following behavior:
- Changes to the file command map within the registry
- Has code inserted into its Virtual Memory space by other programs
- Executed as a Process
- Created as a process on disk
- Terminated as a Process
- Executed by Internet Explorer
Country Of Origin
The filename WLMAIL.EXE was first seen on May 12 2007 in the following geographical regions of the Prevx community:
- The UNITED STATES on May 12 2007
- TURKEY on Mar 16 2008
- PORTUGAL on Nov 18 2009
Filesizes
The following file size has been seen:
- 192,024 bytes
- 58,945 bytes
- 153,488 bytes
File Type
The filename WLMAIL.EXE refers to many versions of an executable program.
File Activity
One or more files with the name WLMAIL.EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\windows\svchost.exe
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.