AVANT.EXE

File Behavior

AVANT.EXE has been seen to perform the following behavior:

• The Process is packed and/or encrypted using a software packing process
• Adds new menu items in the Internet Explorer Right Click menu
• Can communicate with other computer systems using HTTP protocols
• Can communicate with other computers using TCP protocols
• Executes a Process
• This process creates other processes on disk
• This Process Deletes Other Processes From Disk
• Terminates Processes
• Registers a Dynamic Link Library File
• Enables a COM Object/Server on the Local Machine
• Changes to the file command map within the registry
• Creates system tray popups, messages, errors and security warnings
• This Process sends MIME Email
• The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents

AVANT.EXE has been the subject of the following behavior:

• Executed as a Process
• Terminated as a Process
• Enabled as a COM Object/Server on the Local Machine
• Changes to the file command map within the registry
• Created as a process on disk
• Has code inserted into its Virtual Memory space by other programs
• Deleted as a process from disk