Associated Malware Groups
The unsafe files using this name are associated with the malware group:
File Behavior
AVWLAST.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Executes a Process
- Adds a Registry Key (EXPLORER) to auto start Programs on system start Boot up
- Enables an In Process Object/Server - Common with DLL Injections
- Modifies Windows Initialization And System Settings Used On Start up
- Registers a Windows APPINIT DLL To be loaded in all processes
- Registers a Dynamic Link Library File
- Disables the Windows Built in Firewall enabling rogue processes to access the internet without your knowledge or permission
AVWLAST.EXE has been the subject of the following behavior:
- Executed from Temporary Folders
- Created as a process on disk
- Executed as a Process
- Deleted as a process from disk
- Executed by Internet Explorer
Country Of Origin
The filename AVWLAST.EXE was first seen on Sep 4 2007 in the following geographical regions of the Prevx community:
- INDIA on Sep 4 2007
- SPAIN on Sep 4 2007
- SOUTH AFRICA on Sep 20 2007
- AUSTRALIA on Sep 25 2007
File Name Aliases
AVWLAST.EXE can also use the following file names:
- 112.EXE
- 57451911.DAT
- DOCUMENTS AND SETTIN
- 22526799.EXE
- WL0618[1].EXE
- K118941862113.EXE
- 59975861.DAT
- 96157098.DAT
- 40256355.EXE
- 11.EXE
- 8.EXE
- 8[1].EXE
- 40827278.DAT
- 93361916.EXE
Filesizes
The following file size has been seen:
- 12,798 bytes
- 13,061 bytes
- 12,970 bytes
- 12,895 bytes
File Type
The filename AVWLAST.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.