KEYGEN.EXE

Malicious Software

Your PC is infected. The file called KEYGEN.EXE is considered unsafe and there may be other infections on your PC.

You should urgently check your PC and remove any malicious software including KEYGEN.EXE as soon as possible. The free version of Prevx 3.0 will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx 3.0.

Download Prevx 3.0 now »

Associated Malware Groups

The filename is associated with the malware group:

Malicious Software

File Behavior

KEYGEN.EXE has been seen to perform the following behavior:

The Process is packed and/or encrypted using a software packing process
Looks at the contents of the autoexec.bat file
Reads email address and phone book details

KEYGEN.EXE has been the subject of the following behavior:

Deleted as a process from disk
Registered as a Dynamic Link Library File
Executed as a Process

Country Of Origin

The filename KEYGEN.EXE was first seen on Sep 4 2008 in the following geographical region of the Prevx community:

SPAIN on Sep 4 2008

File Name Aliases

KEYGEN.EXE can also use the following file names:

41599383.EXE
08360355.EXE
81896546.SVD

Filesizes

This file has been seen with the following file size:

3,072 bytes

Vendor, Product and Version Information

This file has no vendor, product or version information specified in the file header.

File Type

The filename KEYGEN.EXE refers to an executable program.

File Activity

One or more files with the name KEYGEN.EXE creates, deletes, copies or moves the following files and folders:

Opens/modifes c:\autoexec.bat
Creates c:\docume~1\user\locals~1\temp\963b_appcompat.txt
Creates c:\docume~1\user\locals~1\temp\19F48.dmp

Website Activity

One or more files with the name KEYGEN.EXE interacts with the following web sites and pages. Web addresses have been deliberately modified to prevent unintentional use.

TCP:127.0.0.1:1091 Port:17
Port 80 IP:83.149.112.12