Associated Malware Groups
The unsafe files using this name are associated with the malware group:
File Behavior
ALORM.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- This Process Deletes Other Processes From Disk
- Executes a Process
- The Process is polymorphic and can change its structure
- Found on infected systems and resists interrogation by security products
- Creates system tray popups, messages, errors and security warnings
ALORM.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Victim of a Heap Based Buffer Overflow Exploit
- Deleted as a process from disk
- Created as a new Background Service on the machine
Country Of Origin
The filename ALORM.EXE was first seen on Jun 18 2007 in the following geographical regions of the Prevx community:
- Romania on Jun 18 2007
- Germany on Oct 22 2007
- Saudi Arabia on Nov 9 2007
- The United Arab Emirates on Nov 9 2007
- Turkey on Jun 13 2008
- Ethiopia on Mar 23 2009
- Egypt on Jan 18 2010
File Name Aliases
ALORM.EXE can also use the following file names:
- IS-FVVUG.TMP
- NMINDEXINGSERVICE.EXE
- $R5F6KEO.EXE
- 71854192.EXE
Filesizes
The following file size has been seen:
- 700,416 bytes
- 704,512 bytes
- 2,220,032 bytes
- 2,891,776 bytes
- 9,132,313 bytes
- 210,432 bytes
File Type
The filename ALORM.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.