File Investigation Report
ALAMODE.XSITESDESKTOP.EXE
Currently being reviewedThe most common objects with the name of ALAMODE.XSITESDESKTOP.EXE have yet to be classified as safe by our research department.
If you are concerned that your PC might be infected why not try our Free Prevx Scanner. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
File Behavior
ALAMODE.XSITESDESKTOP.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Process
- Registers a Dynamic Link Library File
- Can communicate with other computer systems using HTTP protocols
- This Process Deletes Other Processes From Disk
- Checks for the use of debuggers
ALAMODE.XSITESDESKTOP.EXE has been the subject of the following behavior:
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Created by processes which appear to be checking for interception by security products
Country Of Origin
The filename ALAMODE.XSITESDESKTOP.EXE was first seen on Mar 23 2008 in the following geographical region of the Prevx community:
- The United States on Mar 23 2008
Filesizes
The following file size has been seen:
- 374,088 bytes
- 419,064 bytes
- 464,120 bytes
File Type
The filename ALAMODE.XSITESDESKTOP.EXE refers to many versions of an executable program.
File Activity
One or more files with the name ALAMODE.XSITESDESKTOP.EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\documents and settings\user\application data\microsoft\cryptneturlcache\metadata\A8FABA189DB7D25FBA7CAC806625FD30
- Creates c:\documents and settings\user\application data\microsoft\cryptneturlcache\content\A8FABA189DB7D25FBA7CAC806625FD30
- Creates c:\docume~1\user\locals~1\temp\1A95A.dmp
Website Activity
One or more files with the name ALAMODE.XSITESDESKTOP.EXE interacts with the following web sites and pages. Web addresses have been deliberately modified to prevent unintentional use.
- Port 80 IP:199.7.48.190
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.