File Behavior
SKYPESETUP[1].EXE has been seen to perform the following behavior:
- This Process Deletes Other Processes From Disk
- Can communicate with other computer systems using HTTP protocols
- This process creates other processes on disk
- Adds products to the system registry
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Executes a Process
- Executes Processes stored in Temporary Folders
- Writes to another Process's Virtual Memory (Process Hijacking)
- Can communicate with other computers using TCP protocols
- Registers a Dynamic Link Library File
SKYPESETUP[1].EXE has been the subject of the following behavior:
- Executed from Temporary Folders
- Created as a process on disk
- Executed as a Process
- Executed by Internet Explorer
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
- Registered as a Dynamic Link Library File
- Added as a Registry Key (RUNONCE) to auto start Programs on system start up
Country Of Origin
The filename SKYPESETUP[1].EXE was first seen on Mar 5 2008 in the following geographical regions of the Webroot community:
- South Africa on Mar 5 2008
- Spain on Mar 5 2008
- Europe on Apr 9 2008
- Italy on Apr 9 2008
- Poland on Jun 4 2008
- Hong Kong on Jul 30 2008
- The United States on Jun 3 2010
File Name Aliases
SKYPESETUP[1].EXE can also use the following file names:
- SKYPESETUP.EXE
- SKYPESETUP(2).EXE
- CT4RHDXS.EXE
- X1C2FPD7.EXE
- SKYPESETUP(3).EXE
- RPRFVGTT.EXE
- F63DVD48.EXE
- SKYPESETUP144.EXE
- SKYPESETUP4.0.0.155.EXE
- SKYPESETUP(1).EXE
- SKYPESETUP (1).EXE
- SKYPESETUP_2.EXE
- SKYPESETUP_1.EXE
- SKYPE.EXE
- SKYPESETUP[n].EXE
- SKYPESETUP(n).EXE
- GBA65TGG.EXE
- X1NO0UE3.EXE
- SKYPESETUP 3.8.EXE
- SKYPE 380139-06-04-08.EXE
- SKYPESETUP-1.EXE
- SKYPESETUP SALLY T.EXE
- SKYPESETUP_V4.2.EXE
- SKYPESETUP44444.EXE
- SKYPESETUP2.EXE
- DELETE-ME.EXE
- REALPLAYER11GOLD_DE.EXE
- SKYPESETUP_139[1].EXE
- SKYPESETUP144[1].EXE
- SKYPESETUP-3.8.0.139.EXE
- DD09C6FD-8228-4998-8757-BDFE53BA4397.TMP
- SKY65F5.TMP
- DG72.EXE
- а
- DC19.EXE
- $RXVMXCS.EXE
- 1Y1739N3.EXE
- $RDGU963.EXE
- DC13.EXE
- DC3.EXE
- DC2.EXE
- 5SLW62XO.EXE
- DC5.EXE
- DC65.EXE
- DC99.EXE
- FYZ2T6RD.EXE.PART
- Q5VAX5_F.EXE.PART
- ŸŸŸŸCE
- DC30.EXE
- DC31.EXE
- DC32.EXE
- DC18.EXE
- 1Y3HI2R0.EXE
- DC61.EXE
- DC50.EXE
Filesizes
The following file size has been seen:
- 22,441,768 bytes
- 1,704,744 bytes
- 22,685,480 bytes
- 2,550,832 bytes
- 22,411,048 bytes
- 22,414,120 bytes
- 215,845 bytes
- 628,676 bytes
- 22,690,600 bytes
File Type
The filename SKYPESETUP[1].EXE refers to many versions of an executable program.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.