Trust level:

• suspicious()

Summary:

• We detected this file as suspicious. As we use heuristic for detection we cannot be 100% sure, that the file is really harmful.

File location:

• %user_profile%\local settings\temp\92911.exe

Details:

• The file does not contain company name.
• File checksum is 3F52A22519C7EB2C2CF809D49530BC3B.
• The file is hidden. Most probably a rootkit hides this file. The file could belong to that rootkit.
• May get commands from the Internet on port 1042.
• Windows Explorer starts it automatically.
• Registered as Java.
• Started by %application_data%\svchost.exe.

Take advantage of WinDetect to do a full search for potentially harmful files on your PC. WinDetect is a free security program for Windows. WinDetect is an anti-spyware utility that selectively searches areas on your hard drive and registry where unwanted files may be hidden or disguised. WinDetect evaluates each item heuristically using multiple tests and flags files or entries that are possibly malicious. Since WinDetect looks at file characteristics instead of searching for virus signatures, it completes scans very fast. Experienced users use WinDetect to find viruses, root kits, keyloggers, Trojans, spyware, downloaders and other kinds of malware.

WinDetect can also disable most suspicious files at your option. WinDetect does not conflict with other antivirus tools and may detect malware that conventional antivirus software fails to find. WinDetect shows the risk level of each file it flags, the reason for flagging the file, and offers the option of disabling the file whenever possible. In addition, WinDetect users can go directly from each suspicious file’s report to an online resource with complete details and recommendations regarding the file.

WinDetect spots millions of spyware and malware infections, including 92911.exe

More...