Xandora

File SHA1: abb6d3e4c73f31249f272867c6f44fdcaf98d085
File MD5 : fd6b1da19ab31c2fa9f71f7c7f0a63a0
File Type: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
Date: Tue Nov 10 00:35:07 MYT 2009
Possible Malware: YES

#– Files Created: –

/Documents and Settings/All Users/Application Data/Microsoft/Dr Watson
/WINDOWS/system32/lowsec
/WINDOWS/system32/sdra64.exe

#– Registry Created: –

[SOFTWARE]
+ [software\Microsoft\PCHealth\ErrorReporting\ExclusionList]
+ [software\Microsoft\PCHealth\ErrorReporting\InclusionList]
[SYSTEM]
[SECURITIES]
[DEFAULT]
[NTUSER]

#– Malware Traffic – DNS: –

irc.zief.pl

#– Malware Traffic – Connections: –

218.93.205.30.80

#– Malware Traffic – www: –

#– Screenshots: –

Screen After 90 Seconds

Screen After 120 Seconds