Associated Malware Groups
The unsafe files using this name are associated with the malware group:
File Behavior
SMARTUP.EXE has been seen to perform the following behavior:
- Can communicate with other computer systems using HTTP protocols
- Executes a Process
- This Process Deletes Other Processes From Disk
- This process creates other processes on disk
- Registers a Dynamic Link Library File
- The Process is polymorphic and can change its structure
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Adds a Registry Key (RUNONCE) to auto start Programs on system start up
- Writes to another Process's Virtual Memory (Process Hijacking)
- Found on infected systems and resists interrogation by security products
SMARTUP.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename SMARTUP.EXE was first seen on Jan 25 2008 in the following geographical regions of the Prevx community:
- CHINA on Jan 25 2008
- SINGAPORE on Jan 25 2008
- The UNITED KINGDOM on Apr 16 2008
- VIET NAM on Apr 16 2008
- KOREA, REPUBLIC OF on Apr 25 2009
File Name Aliases
SMARTUP.EXE can also use the following file names:
- SMARTUP_EXE.ZIP.RSTMP.EXE
- ·ÉÌÌ·À·Â°Æ/SMARTUP.EXE
- 50600129.DAT
- 42443072.EXE
- 27639031.DAT
Filesizes
The following file size has been seen:
- 256,624 bytes
- 801,432 bytes
- 86,016 bytes
- 248,432 bytes
File Type
The filename SMARTUP.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.