Prevx Research Division
MUSICA.EXE
Cloaked MalwareFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove MUSICA.EXE.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- Cloaked Malware
- Malicious Software
- Worm
File Behavior
MUSICA.EXE has been seen to perform the following behavior:
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Writes to another Process's Virtual Memory (Process Hijacking)
- This process creates other processes on disk
- Executes a Process
- Hooks the WININET.DLL function allowing it to read or copy Http and Https web page content and session information
- Injects code into other processes
- Performs DNS look ups to resolve URL IP addresses
- Adds a Link in the Start Menu
- Registers a Dynamic Link Library File
- Modifies Windows Security Policies to restrict/expand User Privileges on the machine
- Disables Access to the Windows Registry Editior
- Adds an ActiveX component changing or modifying the function of your browser
MUSICA.EXE has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Added as a Link in the Start Menu
- Deleted as a process from disk
- Added as an ActiveX component
- Terminated as a Process
Country Of Origin
The filename MUSICA.EXE was first seen on Nov 30 2008 in the following geographical regions of the Webroot community:
- Spain on Nov 30 2008
- Mexico on Nov 16 2009
- The United Kingdom on Nov 16 2009
- Switzerland on Jul 19 2010
- South Africa on Jul 19 2010
- The United States on May 7 2012
File Name Aliases
MUSICA.EXE can also use the following file names:
- SUSOFT.EXE
- SERVICES.EXE
- ESCRITORIO.EXE
- ARCHIVOS DE PROGRAMA.EXE
- WINDOWS.EXE
- EXTENDSCRIPT TOOLKIT.EXE
- SYSTEM32.EXE
- TEMP.EXE
- DRIVERS.EXE
- PRODIGY ANTIVIRUS.EXE
- MENú INICIO.EXE
- WBEM.EXE
- AGL.EXE
- PROGRAMAS.EXE
- USUARIO FINAL.EXE
- ARCHIVOS COMUNES.EXE
- ADMINISTRADOR.EXE
- INICIO.EXE
- CONTACTS.EXE
- FAVORITOS.EXE
- INCOMPLETE.EXE
- LOCAL SETTINGS.EXE
- MIS DOCUMENTOS.EXE
- SITIOS WEB DE MICROSOFT.EXE
- VíNCULOS.EXE
- MIS ARCHIVOS RECIBIDOS.EXE
- MI MúSICA.EXE
- MIS IMáGENES.EXE
- MIS VíDEOS.EXE
- ULEAD VIDEOSTUDIO.EXE
- SYSTEM.EXE
- ACCESORIOS.EXE
- ACCESSORIOS.EXE
- HERRAMIENTAS ADMINISTRATIVAS.EXE
- WINRAR.EXE
- WALLPAPERS DELL.EXE
- ITUNES.EXE
- PANDA ANTIVIRUS 2008.EXE
- DELL.EXE
- FLOR.EXE
- PICASA2.EXE
- PUTTY.EXE
- TASKSWITCHXP.EXE
- UTORRENT.EXE
- WINAMP.EXE
- WINSNAP.EXE
- CCLEANER.EXE
- EMULE.EXE
- PROFILE.EXE
- COOKIES.EXE
- USERDATA.EXE
- FKTF44SE.EXE
- I4CHH0FL.EXE
- XRG7BSDO.EXE
- ALL USERS.WINDOWS.EXE
- KARINA.EXE
- PLUGINS.EXE
- ADDINS.EXE
- APPPATCH.EXE
- CONFIG.EXE
- CONNECTION WIZARD.EXE
- CURSORES.EXE
- CURSORS.EXE
- DEBUG.EXE
- DOWNLOADED PROGRAM FILES.EXE
- DRIVER CACHE.EXE
- EHOME.EXE
- FONTS.EXE
- HELP.EXE
- IME.EXE
- JAVA.EXE
- L2SCHEMAS.EXE
- MEDIA.EXE
- MSAGENT.EXE
- MSAPPS.EXE
- MUI.EXE
- NETWORK DIAGNOSTIC.EXE
- OFFLINE WEB PAGES.EXE
- PCHEALTH.EXE
- PEERNET.EXE
- PREFETCH.EXE
- PROVISIONING.EXE
- REGISTRATION.EXE
- REPAIR.EXE
- RESOURCES.EXE
- SECURITY.EXE
- SHELLNEW.EXE
- SOFTWAREDISTRIBUTION.EXE
- SRCHASST.EXE
- TASKS.EXE
- TWAIN_32.EXE
- WEB.EXE
- WINSXS.EXE
- ASSEMBLY.EXE
- LASTGOOD.EXE
- MICROSOFT.NET.EXE
- K-LITE CODEC PACK.EXE
- LAVALYS.EXE
- MESSENGER.EXE
- MICROSOFT FRONTPAGE.EXE
- MICROSOFT OFFICE.EXE
- MICROSOFT VISUAL STUDIO.EXE
- MICROSOFT WORKS.EXE
- MOVIE MAKER.EXE
- MOZILLA FIREFOX.EXE
- DOCUMENTS AND SETTINGS.EXE
- ALL USERS.EXE
- ZETA.EXE
- FOTOS.EXE
- DCIM.EXE
- CONSULTORIO.EXE
- MARISA.EXE
- DR MURRIETA.EXE
- DR GUTIERREZ.EXE
- TODO LO ANTERIOR.EXE
- ALEJANDRO.EXE
- NUEVA CARPETA.EXE
- MIS ESCANEOS.EXE
- MARCE 6.EXE
- XOCHIMILCO.EXE
- POSADA 2007.EXE
- POSADA 2006.EXE
- CUMPLE DE ABUE.EXE
- CUMPLE.EXE
- AMIGOS.EXE
- MAMI.EXE
- FAM MAMI.EXE
- MARCELA CARPETA (n).EXE
- ANGEL.EXE
- FACUNDO CARPETA (n).EXE
- IXTAPAN DEL IXTAPA DEL ORO PAPA.EXE
- FOTOS 4.EXE
- MY PICTURES.EXE
- USB ARCHIVOS.EXE
- NARRACIóN.EXE
- MY VIDEOS.EXE
- TRIPTICO.EXE
- NUEVA CARPETA (n).EXE
- REYES.EXE
- USB FINAL.EXE
- CLIENTES.EXE
- JAZZ.EXE
- SUSOFTL.EXE
- USER.EXE
- APPLICATION DATA.EXE
- ANTONIO AGUILAR.EXE
- MIS ARCHIVOS DE ORIGEN DE DATOS.EXE
- FIFA 07.EXE
- CALL OF DUTY.EXE
- REGSEEKER.EXE
- EFCHU32B.EXE
- MICROSOFT.EXE
- BACKUP-20090418-110946-760-MUSICA.EXE
- PINBALL.EXE
- MY ISO FILES.EXE
- DIVX PLAYER.EXE
- NERO.EXE
- FIFA 09.EXE
- ULTRAISO.EXE
- RB2XSMEB.EXE
- AVICONVERTER.EXE
- WINISO.EXE
- WWE.EXE
- ARCHIVOSGERENCIALES.EXE
- ATI.EXE
- CONTENEDOR.EXE
- DRIVER DOWNLOAD.EXE
- EPSON ADVANCED PRINTER DRIVER.EXE
- NVIDIA.EXE
- RES_DOS.EXE
- RES_UNO.EXE
- RESPALDO_ALEJANDRUS_UNO.EXE
- VENTAS.EXE
- ALEJANDRUS.EXE
- AMBIENT DESIGN.EXE
- ATI TECHNOLOGIES.EXE
- AVIRA.EXE
- COMPLUS APPLICATIONS.EXE
- CYBERLINK.EXE
- DIFX.EXE
- DRIVER-SOFT.EXE
Filesizes
The following file size has been seen:
- 126,976 bytes
- 73,730 bytes
- 421,888 bytes
- 118,784 bytes
- 260,096 bytes
File Type
The filename MUSICA.EXE refers to many versions of an executable program.
File Activity
One or more files with the name MUSICA.EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\Musica.ex
- Creates d:\Musica.ex
- Creates e:\Musica.ex
- Creates c:\documents and settings\user\start menu\programs\startup\Musica.ex
- Creates c:\documents and settings\user\my documents\Musica.ex
- Creates c:\documents and settings\user\escritorio\SuSoft.exe
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.