Disagree with this determination?
File Behavior
PCMAV-CLN.EXE has been seen to perform the following behavior:
- This Process sends MIME Email
- This Process Disables Other Security Products
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Changes the Internet Explorer Home Page Settings
- Changes the Internet Explorer Search Page
- Creates a Toolbar Extension for Internet Explorer
- Adds a Registry Key (RUNONCE) to auto start Programs on system start up
- Changes to the file command map within the registry
- Modifies the User Shell objects used to run code from other processes
- Modifies the Windows Built in Screen Saver
- Ability to execute files automatically on your PC
- Adds a Registry Key (COMD) auto start to load Program on Boot up
- Disables Access to the Task Manager built into Windows
- Disables Access to the Windows Registry Editior
- Writes to another Process's Virtual Memory (Process Hijacking)
- Registers a Dynamic Link Library File
- Removes Scheduled Tasks from the Windows task queue
- Modifies the Windows Host File which could be used to stop you visiting specific web sites by redirecting you to alternative addresses without you knowing
- Reads your outlook address book
- Found on infected systems and resists interrogation by security products
- Uses low level functions to hide itself from the user and from system/security processes
PCMAV-CLN.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
Country Of Origin
The filename PCMAV-CLN.EXE was first seen on Nov 13 2008 in the following geographical regions of the Prevx community:
- SPAIN on Nov 13 2008
- INDONESIA on Nov 13 2008
File Name Aliases
PCMAV-CLN.EXE can also use the following file names:
- PCMAV19/PCMAV-CLN.EXE
- 88970932.EXE
- DANANG.EXE
- PCMAV-CLN-1.9.EXE
- SERIAL 19.EXE
- C12.EXE
- PCMAV.EXE
- ONEPIECE.EXE
- INDO.EXE
- BERSIHKAN.EXE
- ANTIVIR CLEAN.EXE
- WASHER.EXE
- XATTACK.EXE
- PC MEDIA ANTIVIR.EXE
- CLEANER-PCM_1.9.EXE
- PCMAV 'CLN'.EXE
- M3RD3K4.EXE
- CARI.EXE
Filesizes
This file has been seen with the following file size:
Vendor, Product and Version Information
This file has no vendor, product or version information specified in the file header.
File Type
The filename PCMAV-CLN.EXE refers to an executable program.