Disagree with this determination?
I1[n].EXE
Malicious SoftwareYour PC is infected. The file called I1[n].EXE is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including I1[n].EXE as soon as possible. The free version of Prevx 3.0 will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx 3.0.
File Behavior
I1[n].EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Process
- Adds a Registry Key (RUN) to auto start Programs on system start up
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
I1[n].EXE has been the subject of the following behavior:
- Executed by Internet Explorer
- Created as a process on disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Added as a Registry auto start to load Program on Boot up
- Copied to multiple locations on the system
- Deleted as a process from disk
- Executed from Temporary Folders
Country Of Origin
The filename I1[n].EXE was first seen on Aug 16 2008 in the following geographical region of the Prevx community:
- The UNITED STATES on Aug 16 2008
File Name Aliases
I1[n].EXE can also use the following file names:
- _A00F1875B.EXE
- 65004415.EXE
- XQLPUFS.TMP
Filesizes
This file has been seen with the following file size:
- 34,816 bytes
Vendor, Product and Version Information
A file with the name I1[n].EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- Microsoft Corporation; Microsoft® Remote Std I/O Shell; 6.0.6001.16470 (fbl_tools(patst).070215-1229)
- Microsoft Corporation; MicrosoftaeR7 Remote Std I/O Shell; 6.0.6001.16470 (fbl_tools(patst).070215-1229)
- Microsoft Corporation; Microsoftc2aeR7 Remote Std I/O Shell; 6.0.6001.16470 (fbl_tools(patst).070215-1229)
File Type
The filename I1[n].EXE refers to an executable program.
Registry Activity
One or more files with the name I1[n].EXE creates or modifies the following registry keys and values:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run A00F1875B.exe C:\DOCUME~1\user\LOCALS~1\Temp\_A00F1875B.exe