Associated Malware Groups
The filename is associated with the malware groups:
- Cloaked Malware
- Malware Dropper
- Malicious Software
File Behavior
IEBTM.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Enables an In Process Object/Server - Common with DLL Injections
- Creation and Registration of a Browser Helper Object in Internet Explorer
- Modifies System Runtime Policies to limit system usability
- Creates new file extentions so that Internet Explorer will automatically open and potentially execute additional file types
- Executes a Process
- This process creates other processes on disk
- Terminates Processes
- This Process Deletes Other Processes From Disk
- Registers a Dynamic Link Library File
- Changes the Internet Explorer Search Page
- Adds products to the system registry
IEBTM.EXE has been the subject of the following behavior:
- Executed as a Process
- Created as a process on disk
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
- Registered as a Dynamic Link Library File
Country Of Origin
The filename IEBTM.EXE was first seen on Jun 17 2008 in the following geographical regions of the Prevx community:
- The UNITED KINGDOM on Jun 17 2008
- SPAIN on Jun 17 2008
- BELGIUM on Jul 7 2008
- NETHERLANDS on Aug 9 2008
File Name Aliases
IEBTM.EXE can also use the following file names:
- 73161971.SVD
- MHMGSDN.TMP
- 94431859.SVD
- 78427621.EXE
- 67823556.EXE
- 21778714.SVD
- 39652974.EXE
- 34765021.SVD
- ITWAQQV.TMP
- 40936705.SVD
- WFGQZOR.TMP
- 84066118.DAT
Filesizes
The following file size has been seen:
- 17,920 bytes
- 19,456 bytes
- 68,603 bytes
- 19,968 bytes
File Type
The filename IEBTM.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.