Prevx Research Division
MY MUSIC.EXE
Cloaked MalwareFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove MY MUSIC.EXE.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Malicious Software
- Worm
File Behavior
MY MUSIC.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Writes to another Process's Virtual Memory (Process Hijacking)
- This process creates other processes on disk
- The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Can communicate with other computer systems using HTTP protocols
- Executes a Process
- This Process Deletes Other Processes From Disk
- Registers a Dynamic Link Library File
- Injects code into other processes
- Performs DNS look ups to resolve URL IP addresses
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Looks at the contents of the autoexec.bat file
- Reads email address and phone book details
- Uses DNS to retrieve the IP address for web sites
- Uses your PC to connect to Chat rooms
MY MUSIC.EXE has been the subject of the following behavior:
- Executed as a Process
- Created as a process on disk
- Has code inserted into its Virtual Memory space by other programs
- Registered as a Dynamic Link Library File
- Terminated as a Process
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename MY MUSIC.EXE was first seen on Jul 11 2009 in the following geographical regions of the Webroot community:
- on Jul 11 2009
- The United Kingdom on Dec 29 2009
- Bulgaria on Dec 29 2009
- Pakistan on Mar 23 2010
- India on Mar 31 2010
- Iran, Islamic Republic of on Aug 3 2010
File Name Aliases
MY MUSIC.EXE can also use the following file names:
- SYNC PLAYLISTS.EXE
- MY PICTURES.EXE
- SAMPLE PICTURES.EXE
- MY VIDEOS.EXE
- SHAREDDOCS.EXE
- PHBIMAGE.EXE
- SONICN.EXE
- RALLYPROCONTEST.EXE
- REGSVR.EXE
- بحري.EXE
- BAHRI.EXE
- DCIM.EXE
- صور.EXE
- گزارش توصیفی داوری درباره درس بنویسیم.EXE
- چک لیست.EXE
- پیشرفت دانش آموز.EXE
- واقعه نگاری.EXE
- نمون برگ شرح حال.EXE
- ملاک های ارزیابی مدیر واحد آموزشی.EXE
- فهرست محتوا.EXE
- خود ارزیابی دانش آموز.EXE
- ارزیابی والدین.EXE
- ارزيابي معلم از پوشه کاردر پایه یه یاول.EXE
- آزمون عملکردی.EXE
- عبدالحميد بلوچی.EXE
- پوشه کار پایه اول89-88.EXE
- متفرقه.EXE
- فرمهای هنر.EXE
- زیر نویس.EXE
- ریاضی اندیشه.EXE
- ریاضی.EXE
- جدید.EXE
- جدول ارزشیابی توصیفی.EXE
- تکلیف هفتگی اول.EXE
- تکلیف فارسی اول.EXE
- تکلیف فارسی 88-89.EXE
- تکلیف روزانه 88-89.EXE
- تکلیثف هفتگی.EXE
- فارسي بنويسم.EXE
- علوم اول.EXE
- رياضي اول.EXE
- املاي فارسي.EXE
- تكليف نوروزي اول.EXE
- تكليف رياضي.EXE
- تصویر ریاضی.EXE
- تصاویر کتاب فارسی اول.EXE
- اول.EXE
- ارزشیابی توصیفی نوبت دوم.EXE
- NEW FOLDER.EXE
- ارزشیابی.EXE
- ارزشیا بی پایه اول.EXE
- ارزشيابي املاي اول.EXE
- ALI_MOUSAZADEH.EXE
- AMIR FARJAM.EXE
- ARABI.EXE
- AROSI.EXE
- BANDARI.EXE
- DTY.EXE
- FARZAN - CLIMAX.EXE
- GOLCHIN.EXE
- GOLCHIN1.EXE
- GOLCHIN2.EXE
- HAMED MLEKLOO.EXE
- MAHASTI.EXE
- MOEIN - TOLOU.EXE
- SIAVASH.EXE
- TOP.EXE
- KABOOS.EXE
- SAMIA.EXE
- TERANE.EXE
- خطب.EXE
- کتاب کار فارسی اول.EXE
- میلاد.EXE
- مريم.EXE
- نمون برگ همسال سنجي.EXE
- روي جلد.EXE
- فرم پوشه كار اول.EXE
- فرم پوشه كار دوم.EXE
- NOD32 SMART SECURITY4.EXE
- المواقع لنت.EXE
- ATTACHMENTS_2011_02_06.EXE
- ATTACHMENTS_2011_02_06_4.EXE
- ATTACHMENTS_2011_02_06_2.EXE
- ATTACHMENTS_2011_02_06_3.EXE
- ATTACHMENTS_2011_02_06_6.EXE
- ATTACHMENTS_2011_02_06_5.EXE
- ATTACHMENTS_2011_02_06_7.EXE
- SOROOD.EXE
- USERINIT.EXE
- YVPOCAXRMDPYUQAHKMGFS.EXE
- JFYWJGCVPFQYTOXDFGZX.EXE
- WRJGSOJBUJTAUOWBCCU.EXE
- VNCWFYQFVHOSJAFH.EXE
- LFWSDYSJBPYEXQXBBA.EXE
- CVLGQKDTKXFKCUADC.EXE
- PNIIXWUPLDQAXUFNRUPPDA.EXE
- SAMPLE MUSIC.EXE
- SAMPLE PLAYLISTS.EXE
- 005968CB.EXE
- 000AB313.EXE
Filesizes
The following file size has been seen:
- 314,368 bytes
- 90,112 bytes
- 577,536 bytes
- 123,388 bytes
- 43,072 bytes
- 491,520 bytes
- 1,235,420 bytes
File Type
The filename MY MUSIC.EXE is used by multiple object types including executable programs,objects.
File Activity
One or more files with the name MY MUSIC.EXE creates, deletes, copies or moves the following files and folders:
- Opens/modifes c:\autoexec.bat
Network Activity
One or more files with the name MY MUSIC.EXE performs the following network events:
- DNS Lookup218.93.205.24 proxim.ircgalaxy.pl
Website Activity
One or more files with the name MY MUSIC.EXE interacts with the following web sites and pages. Web addresses have been deliberately modified to prevent unintentional use.
- TCP:218.93.205.24:65520 Port:13
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.