Associated Malware Groups
The unsafe files using this name are associated with the malware group:
File Behavior
TIBIA MULTI-IP CHANGER.EXE has been seen to perform the following behavior:
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Creates system tray popups, messages, errors and security warnings
- Includes file creation code which could be used to test for interception by security products
TIBIA MULTI-IP CHANGER.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Executed as a Process
- Terminated as a Process
- Registered as a Dynamic Link Library File
- Created by processes which appear to be checking for interception by security products
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename TIBIA MULTI-IP CHANGER.EXE was first seen on Mar 22 2008 in the following geographical regions of the Prevx community:
- EGYPT on Mar 22 2008
- SPAIN on Jul 2 2008
- The EUROPEAN UNION on Jul 11 2008
- POLAND on Dec 10 2008
File Name Aliases
TIBIA MULTI-IP CHANGER.EXE can also use the following file names:
- 54670702.DAT
- 19318656.EXE
- 85204611.EXE
- 73751034.EXE
- TIBIA MULTI IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- 1.DA_
- TIBIA%20MULTI-IP%20CHANGER[1].EXE
- 85196868.SVD
- TIBIAM~1.EXE
- 20095276.EXE
- IPCHANGER/1.DA_
- 08820218.EXE
- TIBIA%20MULTI-IP%20CHANGER[n].EXE
- IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- CHANGEIP_831/TIBIA MULTI-IP CHANGER.EXE
- CHANGEIP_840/TIBIA MULTI-IP CHANGER.EXE
- TIBIAM~2.EXE
- TIBIA MULTI-IP CHANGER_1.EXE
- NOVA/TIBIA MULTI-IP CHANGER.EXE
- ASPRATE/TIBIA MULTI IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- CHANGEIP_840_WWW.RADBR.COM/TIBIA MULTI-IP CHANGER.EXE
- TIBIA MULTI-IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- TIBIAA]M~1.EXE
- 03501679.DAT
- 15349239.EXE
- IPCHANGER-MULTI/TIBIA MULTI-IP CHANGER.EXE
- USRDATA32.EXE
- 93211339.EXE
Filesizes
The following file size has been seen:
- 327,680 bytes
- 286,720 bytes
- 303,104 bytes
- 312,561 bytes
- 294,912 bytes
- 319,488 bytes
- 307,202 bytes
File Type
The filename TIBIA MULTI-IP CHANGER.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.