File Investigation Report
MBSRM32.EXE
Malicious SoftwareYour PC is infected. The file called MBSRM32.EXE is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including MBSRM32.EXE as soon as possible. The free version of Prevx will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The filename is associated with the malware group:
- Malicious Software
File Behavior
MBSRM32.EXE has been seen to perform the following behavior:
- This Process Contains User Mode Rootkit Functionality and can hide itself from the running process list
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Registers a Dynamic Link Library File
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Enables an In Process Object/Server - Common with DLL Injections
MBSRM32.EXE has been the subject of the following behavior:
- Executed as a Process
- Created as a process on disk
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
Country Of Origin
The filename MBSRM32.EXE was first seen on May 25 2007 in the following geographical region of the Prevx community:
- Europe on May 25 2007
File Name Aliases
MBSRM32.EXE can also use the following file name:
- MBSRM32.EXE~
Filesizes
This file has been seen with the following file size:
- 91,648 bytes
Vendor, Product and Version Information
This file has no vendor, product or version information specified in the file header.
File Type
The filename MBSRM32.EXE refers to an executable program.