Associated Malware Groups
The filename is associated with the malware group:
- Fraudulent Security Program
File Behavior
XLDAKSVY.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Dynamic Link Library File as a process
- Enables an In Process Object/Server - Common with DLL Injections
- Modifies Windows Initialization And System Settings Used On Start up
- Creation and Registration of a Browser Helper Object in Internet Explorer
- Found on infected systems and resists interrogation by security products
XLDAKSVY.DLL has been the subject of the following behavior:
- Created as a process on disk
- Registered as a Dynamic Link Library File
- Executed as a process
- Enabled as an In Process Object/Server - Common with DLL Injections
- Creation and Registered as a Browser Helper Object in Internet Explorer
- Executed as a Process
- Deleted as a process from disk
Country Of Origin
The filename XLDAKSVY.DLL was first seen on Dec 6 2008 in the following geographical regions of the Prevx community:
- Thailand on Dec 6 2008
- Vietnam on Dec 6 2008
File Name Aliases
XLDAKSVY.DLL can also use the following file names:
- FPGBPCHG.DLL
- RYELWD.DLL
- EMBXXBXU.DLL
- QDCEPH.DLL
- KOASUTLL.DLL
- PQZOSZ.DLL
- FAVFQXTS.DLL
- VLAWES.DLL
- SQDMMAAJ.DLL
- DWTGPLCY.DLL
- RMSVPEJH.DLL
- PENKGKUS.DLL
- SKIBQF.DLL
- SRQYAGYU.DLL
- AVTCHV.DLL
- VTUGLQYA.DLL
- MRGFMC.DLL
- RFRGWSGA.DLL
- BBZHVU.DLL
- ONOOFRDK.DLL
- VALAJT.DLL
- BFSJLN.DLL
- CYNVUIYV.DLL
- OOBHUV.DLL
- RLELVHLH.DLL
- DDETII.DLL
- RGBAMXMA.DLL
- CHKQVUHV.DLL
- KRXTUMJL.DLL
- QYVEBAYU.DLL
- EEUOCG.DLL
- PMOCWSTM.DLL
- ULJPIKUK.DLL
- ZPJFDL.DLL
- EKHNHFGV.DLL
- VZWEIA.DLL
- PWBXJMJL.DLL
- POYYPEDT.DLL
- AKSBSUYL.DLL
- SOTARAKF.DLL
- UWBFNYVC.DLL
- AUBITWAL.DLL
- JDRDMVXB.DLL
- FKCOUOER.DLL
- KPNJSK.DLL
- 01C957708D1AA8C0_FPGBPCHG_DLL.PE
- 01C957708D1AA8C0_INDEX[1].PE
- 01C957708D94E7C0_RYELWD_DLL.PE
Filesizes
This file has been seen with the following file size:
File Type
The filename XLDAKSVY.DLL refers to a dynamic link library.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.