BURITOS.EXE

File Behavior

BURITOS.EXE has been seen to perform the following behavior:

• The Process is packed and/or encrypted using a software packing process
• Disables the Notification Balloon for the Windows Security Center
• Changes the Internet Explorer Search Page
• Changes the Internet Explorer Home Page Settings
• Writes to another Process's Virtual Memory (Process Hijacking)
• Can communicate with other computer systems using HTTP protocols
• This process creates other processes on disk
• Disables the Windows Built in Firewall enabling rogue processes to access the internet without your knowledge or permission
• Registers a Dynamic Link Library File
• Executes a Process
• This Process Deletes Other Processes From Disk
• Creates a new Background Service on the machine
• Looks at the contents of the autoexec.bat file
• Reads email address and phone book details
• Visits web sites on your PC without you knowing
• Modifies Windows Initialization And System Settings Used On Start up
• The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents

BURITOS.EXE has been the subject of the following behavior:

• Created as a process on disk
• Added as a Registry auto start to load Program on Boot up
• Has code inserted into its Virtual Memory space by other programs
• Executed as a Process
• Terminated as a Process
• Deleted as a process from disk