Prevx Research Division
PROSHOW.PRODUCER.2.6.1775-PATCH.EXE
Malicious SoftwareFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove PROSHOW.PRODUCER.2.6.1775-PATCH.EXE.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Malicious Software
File Behavior
PROSHOW.PRODUCER.2.6.1775-PATCH.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes Processes stored in Temporary Folders
- This process creates other processes on disk
- Executes a Process
- This Process Deletes Other Processes From Disk
- Adds products to the system registry
- Writes to another Process's Virtual Memory (Process Hijacking)
- Uses hidden browser windows to connect to web sites without telling you
- Creates system tray popups, messages, errors and security warnings
- Opens browser pop ups
PROSHOW.PRODUCER.2.6.1775-PATCH.EXE has been the subject of the following behavior:
- Executed as a Process
- Added as a Registry auto start to load Program on Boot up
- Created as a process on disk
- Executed from Temporary Folders
- Deleted as a process from disk
- Registered as a Dynamic Link Library File
- Executed by Internet Explorer
- Terminated as a Process
- Created by processes which appear to be checking for interception by security products
Country Of Origin
The filename PROSHOW.PRODUCER.2.6.1775-PATCH.EXE was first seen on Jun 6 2007 in the following geographical regions of the Webroot community:
- Italy on Jun 6 2007
- Spain on Jul 9 2007
- Brazil on Mar 17 2008
- South Africa on May 25 2012
File Name Aliases
PROSHOW.PRODUCER.2.6.1775-PATCH.EXE can also use the following file names:
- ACTIVATION.EXE
- PHOTODEX PROSHOW PRODUCER 2.6.1775 - PATCH.EXE
- WINDOWS VISTA ACTIVATOR 2007 W00TAGEMAN.EXE
- KX0QX156.EXE
- BASEL.KANAAN.ACTIVATION.VISTA.SP1.EXE
- SAMPLE.EXE
- DJTWISTTER.ACTIVATION.VISTA.SP1.EXE
- ACTIVATIONALL_2007FINAL 2AAA/ACTIVATION.EXE
- CRACK WINDOWS VISTAT SP1.EXE
- ACTIVATION.VISTA.SP1.EXE
- WINDOWS VISTA SP1 ACTIVATION.EXE
- ACTIVATION VISTA SP1 SEWDALI.EXE
- ACTIVATION_VI_SP1.EXE
- ACTIVA~1.EXE
- $RNJHXY1.EXE
- 6001ACTIVATORX86X64-BOOTLDR2121F.EXE
Filesizes
The following file size has been seen:
- 165,376 bytes
- 241,714 bytes
- 420,322 bytes
- 362,887 bytes
- 2,484,736 bytes
- 258,098 bytes
File Type
The filename PROSHOW.PRODUCER.2.6.1775-PATCH.EXE is used by multiple object types including executable programs,self extracting compressed files.
File Activity
One or more files with the name PROSHOW.PRODUCER.2.6.1775-PATCH.EXE creates, deletes, copies or moves the following files and folders:
- Opens/modifes c:\autoexec.bat
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.