IW3SP.EXE

What you should do about IW3SP.EXE:

Check Your PC Now
The most common objects with the name of IW3SP.EXE have yet to be classified as safe by our research department.


If you are concerned that your PC might be infected why not try our Free Prevx CSI Scanner. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't take the risk, check your PC now by clicking the green button.

Download Prevx CSI Now

Who Uses Prevx CSI?

Prevx has been detecting the threats that others miss since 2004.

More than 2,051,199 people have scanned with Prevx CSI and between them have checked 29.2 billion files. 65% of the PCs scanned had malware present.

What we know about IW3SP.EXE:

The filename IW3SP.EXE was first seen on Nov 7 2007 in SPAIN. It has also been seen in the following geographical regions of the Prevx community:

  • The UNITED STATES on Nov 14 2007
  • SWEDEN on Nov 7 2007
The filename IW3SP.EXE is used by multiple object types including executable programs,objects.

The most common file size is 3,026,944 bytes. But the following file sizes have also been seen:

  • 3,204,572 bytes
  • 8,273,920 bytes
  • 3,017,216 bytes
  • 1,466,880 bytes

These files may have the following Vendor, Product, Version Information in the file header Microsoft Corporation; Win32 Cabinet Self-Extractor; 6.00.2900.2180

  • The following Vendor, Product, Version Information has also been reported:
 Microsoft Corporation; Win32 Cabinet Self-Extractor; 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)

IW3SP.EXE has been seen to perform the following behavior(s):

  • The Process is packed and/or encrypted using a software packing process
  • Writes to another Process's Virtual Memory (Process Hijacking)
  • This Process Creates Other Processes On Disk
  • Can communicate with other computer systems using HTTP protocols
  • Executes a Process
  • Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols
  • Registers a Dynamic Link Library File
  • Adds a Registry Key (RUNONCE) to auto start Programs on system start up
  • Executes Processes stored in Temporary Folders
  • This Process Deletes Other Processes From Disk
  • Adds a Registry Key (RUN) to auto start Programs on system start up

IW3SP.EXE has been the subject of the following behavior(s):

  • Created as a process on disk
  • Executed as a Process
  • Has code inserted into its Virtual Memory space by other programs
  • Deleted as a process from disk
  • Terminated as a Process
  • Executed from Temporary Folders

IW3SP.EXE can also use the following file names:

  • 63446419.EXE
  • 95417191.EXE
  • 20508682.EXE
  • 91903076.EXE
  • 26350678.EXE
  • 90809846.EXE
  • 61110385.EXE
  • 74094413.EXE
  • 35358121.EXE
  • 36330731.EXE
  • 13789909.EXE
  • 57139106.EXE
  • 00611047.EXE
  • 09403098.EXE
  • 33434608.EXE
  • 56052057.EXE
  • 63830121.EXE
  • 48915721.EXE
  • ŸŸŸŸŸŸŸŸ°Q ŸŸ
  • 16298547.EXE
  • 57081701.EXE
  • 88516669.EXE
  • IW3SP (2).EXE
  • 25190836.EXE
  • 02747379.EXE
  • 37165593.EXE
  • 74461124.EXE
  • 89006307.EXE
  • 07017835.EXE
  • DC177.EXE
  • 03856267.EXE
  • 54330285.EXE
  • 47677663.EXE
  • ANTY VIRSUS.EXE
  • DE5.EXE
  • 18837801.EXE
  • $RMBZYX5.EXE
  • 99728404.EXE
  • 26399264.EXE
  • 97388173.EXE
  • 22819218.EXE
  • 44693531.EXE
  • 13397422.EXE
  • 53701267.EXE
  • 44135341.EXE
  • 57982507.EXE
  • 27721324.EXE
  • 07333865.EXE
  • 22821717.EXE
  • 83436255.EXE
  • 69036845.EXE
  • 39732035.EXE
  • 30960352.EXE
  • 80456771.EXE
  • 63336785.EXE
  • 97807028.EXE
  • $R2EPQO0.EXE
  • A0493445.EXE
  • A0494490.EXE
  • 87626808.EXE