File Behavior
JOSR.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Adds products to the system registry
- Executes a Process
- Adds a Registry Key (RUN) to auto start Programs on system start up
- This process creates other processes on disk
- Found on infected systems and resists interrogation by security products
JOSR.EXE has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Executed by Internet Explorer
- Created as a process on disk
- Executed as a Process
- Executed from Temporary Folders
- Terminated as a Process
- Has code inserted into its Virtual Memory space by other programs
Country Of Origin
The filename JOSR.EXE was first seen on Feb 7 2010 in the following geographical region of the Prevx community:
- The United States on Feb 7 2010
File Name Aliases
JOSR.EXE can also use the following file names:
- PNCL.EXE
- SLJUSFTAV.EXE
- LEXESFTAV.EXE
- PHSRSFTAV.EXE
- XARXXJ.EXE
- CLJC.EXE
- PYICGK.EXE
- SNSYSFTAV.EXE
- SUBISFTAV.EXE
- IPJISFTAV.EXE
- FPSI.EXE
- BNFTSB.EXE
- CIGO.EXE
- TAYYPV.EXE
- HRDBSFTAV.EXE
- LJUA.EXE
- JILIBH.EXE
- EIXOSFTAV.EXE
- OYNOSFTAV.EXE
- RBAMPD.EXE
- SPBAKY.EXE
- LWPLSFTAV.EXE
- ENMGIH.EXE
- OVFJ.EXE
- GELAXU.EXE
- RKXJSFTAV.EXE
- HIRISFTAV.EXE
- RGLEUC.EXE
- QREJSFTAV.EXE
- WPXJ.EXE
- YVCSIP.EXE
- OQLASFTAV.EXE
- UAMACU.EXE
- RNNKSFTAV.EXE
- QWFDYQ.EXE
- ALCY.EXE
- LSOKSFTAV.EXE
- PIGQ.EXE
- GEFGSFTAV.EXE
- HYSYSX.EXE
Filesizes
This file has been seen with the following file size:
File Type
The filename JOSR.EXE refers to an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.