File Investigation Report
PEV.EXE
Cloaked MalwareIt is possible that your PC could be infected. The file name PEV.EXE is used by both safe and unsafe programs.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including PEV.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Cloaked Malware
File Behavior
PEV.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- This process creates other processes on disk
- Terminates Processes
- Uses rootkit techniques to conceal its presence, interrogation or removal
- Can communicate with other computer systems using HTTP protocols
- This Process Deletes Other Processes From Disk
PEV.EXE has been the subject of the following behavior:
- Created as a new Background Service on the machine
- Executed as a Process
- Created as a process on disk
- Terminated as a Process
- Has code inserted into its Virtual Memory space by other programs
- Deleted as a process from disk
Country Of Origin
The filename PEV.EXE was first seen on Mar 6 2009 in the following geographical regions of the Prevx community:
- Italy on Mar 6 2009
- Argentina on Mar 6 2009
- Netherlands on Apr 30 2009
- Turkey on Apr 30 2009
- The United States on Dec 8 2009
- India on Feb 8 2010
File Name Aliases
PEV.EXE can also use the following file names:
- PEVOLD.EXE
- VFIND.EXE
- VFINDX.EXE
- DD1.EXE
- DD6.EXE
- DC2.EXE
- DC5.EXE
- PEV.CFEXE
- DC1.EXE
- PEV.CFXXE
Filesizes
The following file size has been seen:
- 260,096 bytes
- 154,624 bytes
- 229,376 bytes
- 418,159 bytes
- 163,840 bytes
- 117,248 bytes
File Type
The filename PEV.EXE is used by multiple object types including objects,executable programs.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.