Prevx Research Division
FLASH_DISINFECTOR.EXE
SpywareFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove FLASH_DISINFECTOR.EXE.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Spyware
File Behavior
FLASH_DISINFECTOR.EXE has been seen to perform the following behavior:
- This process creates other processes on disk
- Executes Processes stored in Temporary Folders
- Executes a Process
- This Process Deletes Other Processes From Disk
- Creates system tray popups, messages, errors and security warnings
- Opens browser pop ups
- The Process is packed and/or encrypted using a software packing process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Uses rootkit techniques to conceal its presence, interrogation or removal
- Found on infected systems and resists interrogation by security products
- Uses low level functions to hide itself from the user and from system/security processes
- Creates new folders on the system
- Injects code into other processes
FLASH_DISINFECTOR.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Executed as a Process
- Created by processes which appear to be checking for interception by security products
- Executed by Internet Explorer
- Terminated as a Process
- Copied to multiple locations on the system
- Executed from Temporary Folders
Country Of Origin
The filename FLASH_DISINFECTOR.EXE was first seen on Jun 1 2007 in the following geographical regions of the Webroot community:
- Turkey on Jun 1 2007
- Spain on Aug 8 2007
- Italy on Aug 8 2007
- Brazil on Aug 10 2007
- Malaysia on Sep 29 2007
- on Apr 12 2008
- Europe on Aug 18 2008
- Pakistan on Dec 29 2009
- The United Kingdom on Dec 29 2009
- Thailand on May 8 2012
- Asia/Pacific Region on May 8 2012
File Name Aliases
FLASH_DISINFECTOR.EXE can also use the following file names:
- FLASH DISINFECTOR.EXE
- FLASH_DISINFECTOR[1].EXE
- FLASH_DISINFECTOR_3.EXE
- FLASH_DISINFECTOR(2).EXE
- FLASH_DISINFECTOR[2].EXE
- TURGUT2.EXE
- FLASH_DISINFECTOR[n].EXE
- COPY.EXE
- D0IPB3NI.EXE
- FLASH_DISINFECTOR(n).EXE
- SKANER PENDRIVE.EXE
- FLASH-DESINFECTOR.EXE
- FLASH.EXE
- FLASH_DISINFECTOR (n).EXE
- FLASH_DISINFECTOR [CREA CARTELLE AUTORUN.INF NELLE PERIFERICHE USB].EXE
- NEW_FLASH_DISINFECTOR.EXE
- FLASH[DRIVE] DISINFECTOR.EXE
- FLASHDISINFECTOR.EXE
- FLASH_DISINFECTOR_NO ABREN UNIDADES.EXE
- FLASH DISINFECTOR 1.0.EXE
- FLASH_DISINFECTOR (DISINFETTA E PROTEGGE LA CHIAVETTA).EXE
- FLASH_DISINFECTOR2.EXE
- FLASH_DISINFECTOR_2.EXE
- RIPARA PENNE.EXE
- FLASH_DESINFECTOR.EXE
- FLASH%20DISINFECTOR[n].EXE
- CRW5067G.EXE
- LYRC7XJN.EXE
- FLASH DISINFECTOR 2.EXE
- C9IHH1OK.EXE
- FLASH_DISINFECTOR-FIXC OPEN WITH.EXE
- DISINFECTOR.EXE
- FLASH-DISINFECTOR.EXE
- FLASH_DISINFECTOR-FOR AUTOSTART OF EXT DRIVES.EXE
- FLASH_DRIVE_DISINFECTOR.EXE
- FD.EXE
- WW.EXE
- DD1.EXE
- 24TEEIEH.EXE
- DL1.EXE
- DE4.EXE
- DM22.EXE
Filesizes
The following file size has been seen:
- 79,032 bytes
- 103,992 bytes
- 90,006 bytes
- 132,597 bytes
- 103,067 bytes
- 103,390 bytes
- 78,850 bytes
- 81,393 bytes
File Type
The filename FLASH_DISINFECTOR.EXE is used by multiple object types including self extracting compressed files,executable programs.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.