Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Malicious Software
File Behavior
XKSBJACQ.EXE has been seen to perform the following behavior:
- Writes to another Process's Virtual Memory (Process Hijacking)
- Adds a Registry Key (RUN) to auto start Programs on system start up
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- Executes Processes stored in Temporary Folders
- Executes a Process
- Registers a Dynamic Link Library File
- Creates new folders on the system
- Creates, modifies or schedules batch jobs
- Injects code into other processes
- Found on infected systems and resists interrogation by security products
- Uses low level functions to hide itself from the user and from system/security processes
XKSBJACQ.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
Country Of Origin
The filename XKSBJACQ.EXE was first seen on Feb 6 2010 in the following geographical regions of the Prevx community:
- Morocco on Feb 6 2010
- India on Feb 6 2010
- France on Feb 25 2010
File Name Aliases
XKSBJACQ.EXE can also use the following file names:
- USVUK.EXE
- YNWJAIEI.EXE
- OIXHEROBY[1].HTM
- MNPFDMOX.EXE
- BDXCPHIF.EXE
- MQVALSFO.EXE
- QXMQ.EXE
- BYMMDRVIZN[1].HTM
- LEOXYIISSG[1].HTM
- BAIF.EXE
- MBKUMQDR.EXE
- PLUTD.EXE
- KHLO.EXE
- VQADPJ.EXE
- LYXOR.EXE
- JSBF.EXE
- NFQKX.EXE
- FPECXCMH.EXE
- UEGBNKRD.EXE
- MKWEOGA.EXE
- UOBRA.EXE
- VRHDWA.EXE
- 11455935.EXE
- 16849213.EXE
Filesizes
Files using the name XKSBJACQ.EXE have been seen with the following file size:
File Type
The filename XKSBJACQ.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.