Associated Malware Groups
The filename is associated with the malware group:
File Behavior
THIEN VIEN.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Disables the Notification Balloon for the Windows Security Center
- Disables Access to the Windows Registry Editior
- Disables Access to the Task Manager built into Windows
- Modifies Windows Security Policies to restrict/expand User Privileges on the machine
- Adds products to the system registry
- Automatically changes your firewall settings to allow itself or other programs to communicate over the internet
- Executes a Process
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- Can communicate with other computer systems using HTTP protocols
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Registers a Dynamic Link Library File
- Terminates Processes
THIEN VIEN.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
Country Of Origin
The filename THIEN VIEN.EXE was first seen on Nov 5 2009 in the following geographical region of the Prevx community:
File Name Aliases
THIEN VIEN.EXE can also use the following file names:
- SVCHOST.EXE
- GLOBAL.EXE
- SYSTEM.EXE
- FONTS.EXE
- HELPHOST.COM
- DRIVERS.CAB.EXE
- KEYBOARD.EXE
- DEFAULT.EXE
- REGEDIT.EXE
- TSKMGR.EXE
- RNDLL32.PIF
- MS-DOS.COM
- ĐỒ ÁN TN.HẢI.EXE
- FILE ảNH.EXE
- ẢNH EM TRANG.EXE
- 54265761.EXE
Filesizes
This file has been seen with the following file size:
File Type
The filename THIEN VIEN.EXE refers to an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.