File Investigation Report
AVTO4[1].EXESystem Back Door
Your PC is infected. The file called AVTO4[1].EXE is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including AVTO4[1].EXE as soon as possible. The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx CSI.
Associated Malware Groups
The filename is associated with the malware groups:
- System Back Door
- Cloaked Malware
File Behavior
AVTO4[1].EXE has been seen to perform the following behavior:
- Adds a Registry Key (RUN) to auto start Programs on system start up
- This Process Deletes Other Processes From Disk
- This Process Creates Other Processes On Disk
- The Process is packed and/or encrypted using a software packing process
AVTO4[1].EXE has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Has code inserted into its Virtual Memory space by other programs
- Created as a process on disk
- Executed from Temporary Folders
- Deleted as a process from disk
- Executed as a Process
Country Of Origin
The filename AVTO4[1].EXE was first seen on Apr 20 2008 in the following geographical regions of the Prevx community:
- The EUROPEAN UNION on Apr 20 2008
- NETHERLANDS on Aug 26 2008
- DENMARK on Sep 21 2008
- SPAIN on Sep 21 2008
File Name Aliases
AVTO4[1].EXE can also use the following file names:
- VLC.EXE
- 65B7CE80-0E2C-40E5-8475-3148B33739C3_VLC.EXE
- 5A46004E-D182-4614-B600-03D3881DE95A_VLC.EXE
- FB02ECDC-220C-43C2-A9E4-EAF1BE3C9434_VLC.EXE
- B6F857B0-E38B-487C-A64F-37E81FEEF183_VLC.EXE
- 0623497B-BC3D-44FC-BAFB-31D86F4FD8DE_60325CAHP25CAN.EXE
- F02D8B9A-0CD0-46D8-ABFE-1D9F1B5C476D_VLC.EXE
- 60325CAHP25CAN.EXE
- CFZKIQB.TMP
- 45703942.DAT
- 61513298.EXE
Filesizes
The following file size has been seen:
- 233,984 bytes
- 253,440 bytes
- 180,736 bytes
Vendor, Product and Version Information
These files have no vendor, product or version information specified in the file header.
File Type
The filename AVTO4[1].EXE refers to many versions of an executable program.