Xandora

File SHA1: 88c9b49acef7d8aa1e5e3c47c3a7d7fda9a66af7
File MD5 : 638cdda50a9b85f73a2b5bd9b7f00419
File Type: MS-DOS executable PE for MS Windows (GUI) Intel 80386 32-bit
Date: Mon Nov 9 01:18:45 MYT 2009
Possible Malware: YES

#– Files Created: –

/WINDOWS/system32/Isass.exe

#– Registry Created: –

[SOFTWARE]
[SYSTEM]
[SECURITIES]
[DEFAULT]
[NTUSER]

#– Malware Traffic – DNS: –

xx.enterhere.biz
xx.sqlteam.info

#– Malware Traffic – Connections: –

203.142.206.20.25
207.155.248.167.25
207.155.249.190.25
218.93.205.30.80
64.120.149.21.33254
66.197.252.149.3954
67.15.19.165.25
78.159.102.105.32114
83.68.16.6.5190

#– Malware Traffic – www: –

#– Screenshots: –

Screen After 90 Seconds