File Investigation Report
MOVIE.232[n].EXEMalware Downloader
Your PC is infected. The file called MOVIE.232[n].EXE is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including MOVIE.232[n].EXE as soon as possible. The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx CSI.
Associated Malware Groups
The filename is associated with the malware groups:
- Malware Downloader
- Cloaked Malware
- Malware Dropper
File Behavior
MOVIE.232[n].EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Can communicate with other computer systems using HTTP protocols
- Executes Processes stored in Temporary Folders
- Executes a Process
- This Process Creates Other Processes On Disk
- Writes to another Process's Virtual Memory (Process Hijacking)
- The Process is polymorphic and can change its structure
MOVIE.232[n].EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Executed by Internet Explorer
Country Of Origin
The filename MOVIE.232[n].EXE was first seen on Sep 19 2008 in the following geographical regions of the Prevx community:
- SPAIN on Sep 19 2008
- The UNITED STATES on Sep 28 2008
- The EUROPEAN UNION on Oct 3 2008
File Name Aliases
MOVIE.232[n].EXE can also use the following file names:
- 43584681.SVD
- MOVIE.232.EXE
- 6IUIQ8UC.EXE
- MOVIE.234[n].EXE
- MOVIE.233[n].EXE
- MOVIE.95.EXE
- MOVIE.233.EXE
- XCODEC.56[n].EXE
- 75009963.EXE
- 29870287.EXE
- XCODEC.86[n].EXE
- MOVIE.232[1].EXE
- MOVIE.234[1].EXE
- 12159844.DAT
- DOWNLOADMANAGER.207[1].EXE
- MOVIE.233[1].EXE
- B6VV21IB.EXE
- XCODEC.230.EXE
- 82NVRK2Q.EXE
- 4FNXULV7.EXE
- MOVIE.95[1].EXE
- XCODEC.119.EXE
- XCODEC.127.EXE
Filesizes
The following file size has been seen:
- 48,180 bytes
- 4,254 bytes
- 51,200 bytes
- 62,976 bytes
- 84,480 bytes
- 56,832 bytes
Vendor, Product and Version Information
These files have no vendor, product or version information specified in the file header.
File Type
The filename MOVIE.232[n].EXE refers to many versions of an executable program.