Associated Malware Groups
The filename is associated with the malware groups:
File Behavior
UBCQAQI.EXE has been seen to perform the following behavior:
- Writes to another Process's Virtual Memory (Process Hijacking)
- Executes a Process
- The Process is packed and/or encrypted using a software packing process
- This Process Deletes Other Processes From Disk
- This process creates other processes on disk
- Adds products to the system registry
- Automatically changes your firewall settings to allow itself or other programs to communicate over the internet
- Can communicate with other computer systems using HTTP protocols
- Injects code into other processes
- Registers a Dynamic Link Library File
- Copies files
- Modifies firewall settings, without user permission so it is not blocked from accessing the Internet
UBCQAQI.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
- Registered as a Dynamic Link Library File
- Copied to multiple locations on the system
Country Of Origin
The filename UBCQAQI.EXE was first seen on Feb 5 2010 in the following geographical regions of the Prevx community:
- South Africa on Feb 5 2010
- Italy on Feb 11 2010
- India on Feb 11 2010
File Name Aliases
UBCQAQI.EXE can also use the following file names:
- VDKLJGR.EXE
- JNNPKN.EXE
- SVCHOST.EXE
- BRHPXF.EXE
- 65847353.EXE
Filesizes
The following file size has been seen:
- 114,688 bytes
- 26,624 bytes
- 191,374 bytes
File Type
The filename UBCQAQI.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.