Xandora

File SHA1: bac37f5bcbf31a26f2b486428cee80720bb50a9a
File MD5 : 40c3d456bacf868a948b97903efba97c
File Type: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
Date: Tue Nov 10 01:02:48 MYT 2009
Possible Malware: YES

#– Files Created: –

/Documents and Settings/All Users/Application Data/Microsoft/Dr Watson
/WINDOWS/system32/lowsec
/WINDOWS/system32/sdra64.exe

#– Registry Created: –

[SOFTWARE]
+ [software\Microsoft\PCHealth\ErrorReporting\ExclusionList]
+ [software\Microsoft\PCHealth\ErrorReporting\InclusionList]
[SYSTEM]
[SECURITIES]
[DEFAULT]
[NTUSER]

#– Malware Traffic – DNS: –

irc.zief.pl

#– Malware Traffic – Connections: –

218.93.205.30.80

#– Malware Traffic – www: –

#– Screenshots: –

Screen After 90 Seconds