File Behavior
ADS.EXE has been seen to perform the following behavior:
- Executes a Process
- The Process is polymorphic and can change its structure
- The Process is packed and/or encrypted using a software packing process
- This Process Deletes Other Processes From Disk
- Found on infected systems and resists interrogation by security products
- Can communicate with other computer systems using HTTP protocols
- Registers a Dynamic Link Library File
ADS.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Added as a Registry auto start to load Program on Boot up
- Created as a new Background Service on the machine
Country Of Origin
The filename ADS.EXE was first seen on Jun 5 2007 in the following geographical regions of the Prevx community:
- SPAIN on Jun 5 2007
- POLAND on Jun 7 2007
- The EUROPEAN UNION on Jun 7 2007
- The UNITED STATES on Oct 16 2007
- MALAYSIA on Dec 12 2007
Filesizes
The following file size has been seen:
- 1,560,576 bytes
- 28,928 bytes
- 208,384 bytes
- 2,146,352 bytes
- 1,658,880 bytes
- 1,536,000 bytes
File Type
The filename ADS.EXE is used by multiple object types including executable programs,objects.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.