Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Exploit.img-wmf.pi << Back

Recommendation to Automatically remove Exploit.img-wmf.pi

Our products can remove Exploit.img-wmf.pi and thousands of other Virus and Spyware automatically and instantly.

Exploit.img-wmf.pi Details

Category Exploit
Discovered 4/10/2010 7:17:21 PM
Modified 2/22/2019 12:31:33 PM
Threat Level Medium
Category Description
Exploits use vulnerabilities in operating systems and applications to achieve the same result. Or in other words, this is a type of malware containing a piece of software, a chunk of data, or sequence of commands that take advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software. This frequently includes such things as gaining control of a computer system or allowing privilege escalation or a denial of service attack.

The following Files were created:

VALUE	FILESIZE	COMPANYNAME	VERSION	SIGNATURE
3493b729.exe	23552	Microsoft Corporation	5.1.2600.2180 (xpsp	7d5178b25716e331ce34f1e3555b45a0
343c184e.exe	25088	Microsoft Corporation	5.1.2600.2180 (xpsp	4f3c412a0ff10eac4226efcabd770701
9ad24e5b.exe	25088	Microsoft Corporation	5.1.2600.2180 (xpsp	4cf03bb0a9ccbd32651e43da1ae0bd47
b5bdfeec.exe	25088	Microsoft Corporation	5.1.2600.2180	97560c7bfc504f8b3323ca4d477d6c64
as01.exe	3100			0ba4f5222dc67c5564897193eec15302
134a7cfa.exe	25088	Microsoft Corporation	5.1.2600.2180	6c902513079360352f3a0d8fcabb5756
ba9f4a75.exe	25088	Microsoft Corporation	5.1.2600.2180	6b343083c85ce93112c0f4fde2bc0ffe
29a1a2b4.exe	23552	Microsoft Corporation	5.1.2600.2180	6a8cf72fc87f73479f0e84e520f4cb1d
3b88573f.exe	25088	Microsoft Corporation	5.1.2600.2180	692beff77cc94a7326e7c9496b3f082e
753f0b53.exe	25088	Microsoft Corporation	5.1.2600.2180	30651f70a7b7ae4f6cd98c3fea570ae0

The following Registry Entries were created:

..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\processsafe.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\arswp.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\ravstub.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SUPERKILLER.EXE\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DrvAnti.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RawCopy.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojDie.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SelfUpdate.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\qqdoctormain.exe\(Default)

..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\upiea.exe\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Exploit.img-wmf.pi

Exploit.img-wmf.pi Details

Useful Links