File Behavior
UNLOCKER1.8.7.EXE has been seen to perform the following behavior:
- Creates a new Background Service on the machine
- This process creates other processes on disk
- Enables an In Process Object/Server - Common with DLL Injections
- Executes a Process
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Executes Processes stored in Temporary Folders
- This Process Deletes Other Processes From Disk
- Creates system tray popups, messages, errors and security warnings
UNLOCKER1.8.7.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Executed by Internet Explorer
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
Country Of Origin
The filename UNLOCKER1.8.7.EXE was first seen on May 5 2009 in the following geographical region of the Prevx community:
File Name Aliases
UNLOCKER1.8.7.EXE can also use the following file names:
- UNLOCKER1.8.7[n].EXE
- 32895067.EXE
- 30723996.EXE
- UNLOCKER V1.8.7.EXE
- UNLOCKER 1.8.7.EXE
- UNLOCKER_SETUP.EXE
- UNLOCKER V187 SETUP.EXE
- LOCKER1.8.7.EXE
- UNLOCKER.EXE
- UNLOCKINSTALLER.EXE
- UNLOCKER1.8.7 (n).EXE
- FILE HANDLE UNLOCKER1.8.7.EXE
- UNLOCKER1.8.7(n).EXE
- UNLOCKER1.8.7_FREE強制刪除檔案.EXE
- UNLOCKER1.8.7 SILME PRO.EXE
- UNLOCKER187.EXE
- UL.EXE
- UNLOCKER1.8.7.안지워지는 파일 삭제.EXE
Filesizes
This file has been seen with the following file size:
Vendor, Product and Version Information
This file has no vendor, product or version information specified in the file header.
File Type
The filename UNLOCKER1.8.7.EXE refers to an executable program.
File Activity
One or more files with the name UNLOCKER1.8.7.EXE creates, deletes, copies or moves the following files and folders:
- Deletes c:\docume~1\jim\locals~1\temp\nsa3.tmp
- Creates c:\docume~1\jim\locals~1\temp\nsq5.tmp
- Deletes c:\docume~1\jim\locals~1\temp\nsq7.tmp
- Creates c:\docume~1\jim\locals~1\temp\nsq7.tmp\LangDLL.dll
- Creates c:\docume~1\jim\locals~1\temp\nsq7.tmp\eBay_shortcuts_1016_Unlocker.exe
- Creates c:\docume~1\jim\locals~1\temp\nsq7.tmp\ioSpecial.ini
- Creates c:\docume~1\jim\locals~1\temp\nsq7.tmp\modern-wizard.bmp
- Creates c:\docume~1\jim\locals~1\temp\nsq7.tmp\InstallOptions.dll
Help the Prevx Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.