File Investigation Report
NOTES.EXE
Suspicious SoftwareIt is possible that your PC could be infected. The file name NOTES.EXE is used by both safe and unsafe programs.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including NOTES.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
File Behavior
NOTES.EXE has been seen to perform the following behavior:
- Adds a Registry Key (RUN) to auto start Programs on system start up
- The Process is packed and/or encrypted using a software packing process
- Adds products to the system registry
- Executes a Process
- Registers a Dynamic Link Library File
- Writes to another Process's Virtual Memory (Process Hijacking)
- Reads your outlook address book
- The Process is polymorphic and can change its structure
NOTES.EXE has been the subject of the following behavior:
- Created as a process on disk
- Added as a Registry auto start to load Program on Boot up
- Deleted as a process from disk
- Executed as a Process
- Enabled as a COM Object/Server on the Local Machine
- Executed by Internet Explorer
- Changes to the file command map within the registry
- Has code inserted into its Virtual Memory space by other programs
- Registered as a Dynamic Link Library File
Country Of Origin
The filename NOTES.EXE was first seen on Oct 12 2007 in the following geographical regions of the Prevx community:
- LIBYAN ARAB JAMAHIRIYA on Oct 12 2007
- NORWAY on Oct 12 2007
- NETHERLANDS on Oct 18 2007
- INDIA on Oct 18 2007
- ITALY on Oct 24 2007
- The UNITED KINGDOM on Mar 2 2008
- SPAIN on Mar 2 2008
- The UNITED STATES on Jun 23 2008
- AUSTRALIA on Jun 24 2008
- AUSTRIA on Jun 29 2008
File Name Aliases
NOTES.EXE can also use the following file names:
- NOTES.EXE.BAK
- Рабочий стол
- 84120125.EXE
Filesizes
The following file size has been seen:
- 71,168 bytes
- 4,176,384 bytes
- 1,120,256 bytes
- 1,304,576 bytes
- 1,102,336 bytes
- 442,368 bytes
- 1,324,424 bytes
- 1,292,800 bytes
File Type
The filename NOTES.EXE is used by multiple object types including objects,executable programs.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.