9999.EXE - Dangerous
What you should do about 9999.EXE:
Your PC may be infected. The presence of a file called 9999.EXE is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx CSI will scan your PC in less than two minutes and check for millions of spyware and malware infections including 9999.EXE. Don't take the risk, check your PC now.
What we know about 9999.EXE:
The filename 9999.EXE was first seen on Sep 4 2007 in VIET NAM. It has also been seen in the following geographical regions of the Prevx community:
- SPAIN on Sep 4 2007
The most common file size is 12,740 bytes. But the following file sizes have also been seen:
- 641,024 bytes
- 98,356 bytes
These files may have the following Vendor, Product, Version Information in the file header
- 1111111; 111111; 111111
9999.EXE has been seen to perform the following behavior(s):
- The Process is packed and/or encrypted using a software packing process
- Registers a Windows APPINIT DLL To be loaded in all processes
- Enables an In Process Object/Server - Common with DLL Injections
- Modifies Windows Initialization And System Settings Used On Start up
- This Process Creates Other Processes On Disk
- Executes a Process
- This Process Deletes Other Processes From Disk
- The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Adds a Registry Key (EXPLORER) to auto start Programs on system start Boot up
9999.EXE has been the subject of the following behavior(s):
- Created as a process on disk
- Deleted as a process from disk
- Executed as a Process
9999.EXE can also use the following file names:
- 24397052.DAT
- KVMXBIS.EXE