Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Exploit.img-wmf.pi << Back

Recommendation to Automatically remove Exploit.img-wmf.pi

Our products can remove Exploit.img-wmf.pi and thousands of other Virus and Spyware automatically and instantly.

Exploit.img-wmf.pi Details

Category Exploit
Discovered 4/10/2010 7:17:21 PM
Modified 2/22/2019 12:31:33 PM
Threat Level Medium
Category Description
Exploits use vulnerabilities in operating systems and applications to achieve the same result. Or in other words, this is a type of malware containing a piece of software, a chunk of data, or sequence of commands that take advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software. This frequently includes such things as gaining control of a computer system or allowing privilege escalation or a denial of service attack.

The following Files were created:

VALUE	FILESIZE	COMPANYNAME	VERSION	SIGNATURE
9b372707.exe	23552	Microsoft Corporation	5.1.2600.2180 (xpsp	74a6df4cdb5a80302b20e27b95ffe6b8
343c184e.exe	25088	Microsoft Corporation	5.1.2600.2180 (xpsp	4f3c412a0ff10eac4226efcabd770701
9ad24e5b.exe	25088	Microsoft Corporation	5.1.2600.2180 (xpsp	4cf03bb0a9ccbd32651e43da1ae0bd47
as01.exe	3100			0ba4f5222dc67c5564897193eec15302
3b88573f.exe	25088	Microsoft Corporation	5.1.2600.2180	692beff77cc94a7326e7c9496b3f082e
753f0b53.exe	25088	Microsoft Corporation	5.1.2600.2180	30651f70a7b7ae4f6cd98c3fea570ae0
0638444_000112640-45802e87_5cadd24b5921a79879d2d236e3bf0a08.exe	112640	Microsoft Corporation	5.1.2600.2180	5cadd24b5921a79879d2d236e3bf0a08
sa4..exe	18616	Microsoft Corporation	5.1.2600.2180	4fd3fdabef4b8947d96e4685367cc9fe
c52b2112.exe	25088	Microsoft Corporation	5.1.2600.2180	10f5c3b7e2faaca9703ce3dd46075183
c6880de8.exe	25088	Microsoft Corporation	5.1.2600.2180	27f5ca319854f4cd883812b85bd47c04

The following Registry Entries were created:

..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\processsafe.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\arswp.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\ravstub.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SUPERKILLER.EXE\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DrvAnti.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RawCopy.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojDie.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SelfUpdate.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\qqdoctormain.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\upiea.exe\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Exploit.img-wmf.pi

Exploit.img-wmf.pi Details

Useful Links