Malware Report: 23653a6d00052b3f74f1b2beaf5f780d923f541f
File SHA1: 23653a6d00052b3f74f1b2beaf5f780d923f541f
File MD5 : a81aa241adc229fb9cb9bd66ad8c9990
File Type: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
Date: Tue Nov 10 01:20:06 MYT 2009
Possible Malware: YES
#– Files Created: –
/Documents and Settings/All Users/Application Data/Microsoft/Dr Watson
/WINDOWS/system32/lowsec
/WINDOWS/system32/sdra64.exe
#– Registry Created: –
[SOFTWARE]
+ [software\Microsoft\PCHealth\ErrorReporting\ExclusionList]
+ [software\Microsoft\PCHealth\ErrorReporting\InclusionList]
[SYSTEM]
[SECURITIES]
[DEFAULT]
[NTUSER]
#– Malware Traffic – DNS: –
colopin.cn
irc.zief.pl
#– Malware Traffic – Connections: –
218.93.205.30.80
91.206.201.39.80
#– Malware Traffic – www: –
#– Screenshots: –
Screen After 90 Seconds
Screen After 120 Seconds
