File Investigation Report
TIBIA MULTI-IP CHANGER.EXE
Cloaked MalwareIt is possible that your PC could be infected. The file name TIBIA MULTI-IP CHANGER.EXE is used by both safe and unsafe programs.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including TIBIA MULTI-IP CHANGER.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Cloaked Malware
File Behavior
TIBIA MULTI-IP CHANGER.EXE has been seen to perform the following behavior:
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Creates system tray popups, messages, errors and security warnings
- Includes file creation code which could be used to test for interception by security products
TIBIA MULTI-IP CHANGER.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Executed as a Process
- Terminated as a Process
- Registered as a Dynamic Link Library File
- Created by processes which appear to be checking for interception by security products
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename TIBIA MULTI-IP CHANGER.EXE was first seen on Mar 22 2008 in the following geographical regions of the Prevx community:
- EGYPT on Mar 22 2008
- SPAIN on Jul 2 2008
- The EUROPEAN UNION on Jul 11 2008
- POLAND on Dec 10 2008
File Name Aliases
TIBIA MULTI-IP CHANGER.EXE can also use the following file names:
- 54670702.DAT
- 19318656.EXE
- 85204611.EXE
- 73751034.EXE
- TIBIA MULTI IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- 1.DA_
- TIBIA%20MULTI-IP%20CHANGER[1].EXE
- 85196868.SVD
- TIBIAM~1.EXE
- 20095276.EXE
- IPCHANGER/1.DA_
- 08820218.EXE
- TIBIA%20MULTI-IP%20CHANGER[n].EXE
- IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- CHANGEIP_831/TIBIA MULTI-IP CHANGER.EXE
- CHANGEIP_840/TIBIA MULTI-IP CHANGER.EXE
- TIBIAM~2.EXE
- TIBIA MULTI-IP CHANGER_1.EXE
- NOVA/TIBIA MULTI-IP CHANGER.EXE
- ASPRATE/TIBIA MULTI IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- CHANGEIP_840_WWW.RADBR.COM/TIBIA MULTI-IP CHANGER.EXE
- TIBIA MULTI-IP CHANGER/TIBIA MULTI-IP CHANGER.EXE
- TIBIAA]M~1.EXE
- 03501679.DAT
- 15349239.EXE
- IPCHANGER-MULTI/TIBIA MULTI-IP CHANGER.EXE
- USRDATA32.EXE
- 93211339.EXE
Filesizes
The following file size has been seen:
- 327,680 bytes
- 286,720 bytes
- 303,104 bytes
- 312,561 bytes
- 294,912 bytes
- 319,488 bytes
- 307,202 bytes
File Type
The filename TIBIA MULTI-IP CHANGER.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.