Trust level:

• suspicious()

Summary:

• We detected this file as suspicious. As we use heuristic for detection we cannot be 100% sure, that the file is really harmful.

File location:

• c:\temp\0.7725722819092936.exe

Details:

• Company is Tulsa(3.01.0006).
• File checksum is FAE312D8C4D5B72B9D4CE985BCCC55C3.
• The file hides its content. Most often spywares pack the binaries to be not detected by some anti-spywares. Perhaps this is legitimate file that belongs to a security product.
• Spoofs the system process.
• Windows Explorer starts it automatically.
• Registered as Shell.
• Detected as W32/VBKrypt!tr by Fortinet AntiVirus.
• Detected as Trojan.KillProc.9635 by DrWeb AntiVirus.

Take advantage of WinDetect to do a full search for potentially harmful files on your PC. WinDetect is a free security program for Windows. WinDetect is an anti-spyware utility that selectively searches areas on your hard drive and registry where unwanted files may be hidden or disguised. WinDetect evaluates each item heuristically using multiple tests and flags files or entries that are possibly malicious. Since WinDetect looks at file characteristics instead of searching for virus signatures, it completes scans very fast. Experienced users use WinDetect to find viruses, root kits, keyloggers, Trojans, spyware, downloaders and other kinds of malware.

WinDetect can also disable most suspicious files at your option. WinDetect does not conflict with other antivirus tools and may detect malware that conventional antivirus software fails to find. WinDetect shows the risk level of each file it flags, the reason for flagging the file, and offers the option of disabling the file whenever possible. In addition, WinDetect users can go directly from each suspicious file’s report to an online resource with complete details and recommendations regarding the file.

WinDetect spots millions of spyware and malware infections, including 0.7725722819092936.exe

More...