Packed MD5 5364c612fa3733e91b13c4a4c58ee181 
Priority
First 07/06/2008 
Last 08/23/2008 
Count
History 6 hits: 07-06 to 08-23 
Unpacked MD5  
AV Hits 30 33 
AV Count 32 
CC Servers 210.245.211.11:65520 
DNS Lookups US:microsoft.com US:download.microsoft.com HK:proxima.ircgalaxy.pl DE:dl2.teenpassage.com 
Failed Connects US:208.111.153.231:80 HK:210.245.211.11:65520 US:192.221.99.126:80 US:205.128.73.126:80 US:207.123.42.126:80 DE:85.114.141.207:80 US:208.111.148.15:80 US:208.111.148.23:80 US:198.78.220.124:80 US:206.33.45.125:80 
AV Name AhnLab-V3:Welchia.10240, AntiVir:Nachi.A.1, Authentium:Nachi.A, Avast:_Nachi, AVG:Nachi.A, BitDefender:Welchia.A, CAT-QuickHeal:Nachi, ClamAV:Blaster.D, DrWeb:HLLW.LoveSan.2, eSafe:Blaster.D, eTrust-Vet:Nachi.A, Ewido:Welchia.a, FileAdvisor:MISSED, Fortinet:Nachi.A!worm, F-Prot:Nachi.A, F-Secure:Suspicious_Malware!Gemini, Ikarus:Welchia.A, Kaspersky:Welchia.a, McAfee:Nachi.a, Microsoft:Nachi.A, NOD32v2:Nachi.A, Norman:Nachi.A, Panda:Nachi.A, Prevx1:Worm, Rising:Welchia, Sophos:Nachi-A, Sunbelt:MISSED, Symantec:Welchia.Worm, TheHacker:Nachi.A, VBA32:Welchia.a, VirusBuster:Nachi, Webwasher-Gateway:Nachi.A.1  
WinXP Files  
WinXP Processes  
WinXP Registries  
WinXP Ports  
Win-2Kf Files  
Win-2Kf Processes DLLHOST.EXE  
Win-2Kf Registries HKEY_LOCAL_MACHINE@...Filelist\\0, HKEY_LOCAL_MACHINE@...Filelist\\1, HKEY_LOCAL_MACHINE@...Filelist\\2, HKEY_LOCAL_MACHINE@...Filelist\\3, HKEY_LOCAL_MACHINE@...Filelist\\4, HKEY_LOCAL_MACHINE@...Filelist\\5, HKEY_LOCAL_MACHINE@...HotFix\\KB823980, HKEY_LOCAL_MACHINE@...KB823980\\File1, HKEY_LOCAL_MACHINE@...KB823980\\Filelist, HKEY_LOCAL_MACHINE@...Microsoft\\DownloadManager, HKEY_LOCAL_MACHINE@...Microsoft\\Updates, HKEY_LOCAL_MACHINE@...SP5\\KB823980, HKEY_LOCAL_MACHINE@...Updates\\Windows2000, HKEY_LOCAL_MACHINE@...Windows2000\\SP5, HKEY_USERS@...InternetSettings\\5.0, HKEY_USERS@...InternetSettings\\Connections  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 tElock 
Packer ID2  
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status unknown () 
Countries
Unpacked Link none[none
Callgraph none:none 
API Resolution  
Comment none