Versions

3.3.140513.1589	7.69%
3.3.131004.1527	7.69%
3.3.130726.1469	7.69%
3.3.130706.1458	7.69%
3.3.130610.1369	7.69%
3.2.121229.1266	38.46%
3.2.121229.1266	7.69%
3.1.110425.1262	7.69%
3.1.110425.1262	7.69%

Warning 14 antivirus scanners has detected malware in various versions of VKSaver.exe.

There are 9 versions of vksaver.exe in the wild, the latest version being 3.3.140513.1589. vksaver.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. In order execute the program with adminsitrator rights and prevent a UAC prompt, the program will add a job to the Windows Task Scheduler that will automtaiclaly start it when a user logs on. The average file size is about 191.44 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 4.55 MB with the maximum memory reaching around 8.3 MB.

Based on 40+ industry antivirus scanners, 14 of them detected the following malware.