Versions

2.0.0.0128	6.12%
2.0.0.0128	6.12%
2.0.0.0128	18.37%
1.2.0.0099	18.37%
1.2.0.0071	14.29%
1.1.0.0051	14.29%
1.1.0.0051	2.04%
1.0.0.0049	4.08%
1.0.0.0045	10.20%
1.0.0.0040	6.12%

Warning 7 antivirus scanners has detected malware in various versions of obexsrv.exe.

There are 10 versions of obexsrv.exe in the wild, the latest version being 2.0.0.0128. It is started as a Windows Service with the name 'Bluetooth OBEX Service' and described as “Provides Bluetooth File Transfer Protocol support.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 1002.22 KB. The file is a digitally signed and issued to Intel Corporation by Intel Corporation. Numerous variations of obexsrv.exe have been installed with both Pharaoh Puzzle and Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology. During the process's lifecycle, the typical CPU resource utilization is about 0.0004% including both foreground and background operations, the average private memory consumption is about 2.99 MB with the maximum memory reaching around 5.82 MB and typical read I/O operations are around 11 Bytes per minute.

Based on 40+ industry antivirus scanners, 7 of them detected the following malware.