File Behavior
PIVIMMINIINSTALL[n].EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- This process creates other processes on disk
- Drops known malicious software during execution
- Opens browser pop ups
- Runs Javascript code
PIVIMMINIINSTALL[n].EXE has been the subject of the following behavior:
Country Of Origin
The filename PIVIMMINIINSTALL[n].EXE was first seen on Mar 19 2009 in the following geographical regions of the Prevx community:
- Spain on Mar 19 2009
- Russian Federation on Mar 19 2009
Filesizes
The following file size has been seen:
- 9,344 bytes
- 285,696 bytes
- 76,598 bytes
File Type
The filename PIVIMMINIINSTALL[n].EXE refers to many versions of an executable program.
File Activity
One or more files with the name PIVIMMINIINSTALL[n].EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\docume~1\user\locals~1\temp\installpivim\Language.htm
- Creates c:\docume~1\user\locals~1\temp\installpivim\splash_en.htm
- Creates c:\docume~1\user\locals~1\temp\installpivim\splash_ru.htm
- Creates c:\docume~1\user\locals~1\temp\installpivim\iepngfix_tilebg.js
- Creates c:\docume~1\user\locals~1\temp\installpivim\jquery-1.3.m
- Creates c:\docume~1\user\locals~1\temp\installpivim\iepngfix.htc
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\border.png
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\flag_russia.gif
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\flag_usa.gif
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\fon.png
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\lang_fon.gif
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\logo.png
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\progress_blick.png
- Creates c:\docume~1\user\locals~1\temp\installpivim\img\shkala.gif
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.