76520092.SVD - Dangerous

What you should do about 76520092.SVD:

Your PC may be infected. The presence of a file called 76520092.SVD is a possible sign of infection.

You should urgently check your PC to make sure it is not infected. The free version of Prevx CSI will scan your PC in less than two minutes and check for millions of spyware and malware infections including 76520092.SVD. Don't take the risk, check your PC now.

Download Prevx CSI Now

What we know about 76520092.SVD:

The filename 76520092.SVD was first seen on Apr 13 2008 in SPAIN. It has also been seen in the following geographical regions of the Prevx community:

  • The EUROPEAN UNION on Jul 6 2008
  • URUGUAY on Apr 24 2008
  • PAKISTAN on Apr 24 2008
  • INDIA on May 19 2008
  • GREECE on May 4 2008
  • KENYA on May 4 2008
The filename 76520092.SVD is used by multiple object types including executable programs,objects.

The most common file size is 116,932 bytes. But the following file sizes have also been seen:

  • 102,822 bytes
  • 102,316 bytes
  • 1,886,759,389 bytes
  • 105,379 bytes
  • 127,601 bytes

The unsafe files using this name are associated with the malware group KAVKOP:Trojan-A.Some files using the name 76520092.SVD are also associated with the malware group:
  • PSW.OnlineGames.AO

These files may have the following Vendor, Product, Version Information in the file header

76520092.SVD has been seen to perform the following behavior(s):

  • The Process is packed and/or encrypted using a software packing process
  • Creates a new Background Service on the machine
  • This Process Creates Other Processes On Disk
  • This Process Deletes Other Processes From Disk
  • Loads and Executes a System Driver File
  • Registers a Dynamic Link Library File
  • Copies files
  • Executes a Process
  • Injects code into other processes
  • The Process is polymorphic and can change its structure
  • Adds a Registry Key (RUN) to auto start Programs on system start up
  • Writes to another Process's Virtual Memory (Process Hijacking)

76520092.SVD has been the subject of the following behavior(s):

  • Created as a process on disk
  • Executed as a Process
  • Has code inserted into its Virtual Memory space by other programs
  • Deleted as a process from disk
  • Copied to multiple locations on the system
  • Registered as a Dynamic Link Library File
  • Added as a Registry auto start to load Program on Boot up
  • Terminated as a Process

76520092.SVD can also use the following file names:

  • QXBX9BLB.COM
  • AMVO.EXE
  • DPTRAS~1.COM
  • 49107139.SVD
  • 10386687.EXE
  • LKXCQDB.BAT
  • 60010611.EXE
  • 51404054.BAT
  • 97662946.BAT
  • 45998443.DAT
  • 8DE.BAT
  • 8DE.BAT
  • 32478865.BAT
  • D.CMD
  • SMSS.EXE
  • XLU8A8SY.EXE
  • 19686228.EXE

Virus, Spyware & Malware Center