Packed MD5 cc303a62636b24f1b06aa4a8afa1d469 
Priority 0 
First 08/25/2008 
Last 08/25/2008 
Count 1 
History NEW 
Unpacked MD5 fda109a6fdb8a53d76036870995c2068  
AV Hits 11 18 13 
AV Count 32 
CC Servers 69.42.216.108:9890 69.42.216.108:2010 
DNS Lookups :f.unicat.org FR:www.members.lycos.co.uk :adware.rxmods.net 
Failed Connects  
AV Name AhnLab-V3:MISSED, AntiVir:TRCrypt.TPM.Gen, Authentium:MISSED, Avast:MISSED, AVG:RBot.FA, BitDefender:DeepScan_Generic.Sdbot.EE8FDC31, CAT-QuickHeal:SdBot.gen, ClamAV:PUA.Packed.Themida, DrWeb:MISSED, eSafe:MISSED, eTrust-Vet:MISSED, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:MISSED, F-Prot:MISSED, F-Secure:SDBot.gen8, Ikarus:Generic.Sdbot, Kaspersky:MISSED, McAfee:MISSED, Microsoft:MISSED, NOD32v2:MISSED, Norman:SDBot.gen8, Panda:MISSED, Prevx1:Generic.Malware, Rising:MISSED, Sophos:SusComPack, Sunbelt:MISSED, Symantec:MISSED, TheHacker:Behav-Heuristic-064, VBA32:MISSED, VirusBuster:MISSED, Webwasher-Gateway:Crypt.TPM.Gen  
WinXP Files igxdfdfds.com  
WinXP Processes CMD.EXE, CSRSS.EXE, EXPLORER.EXE, igxdfdfds.com, LSASS.EXE, MSMSGS.EXE, rundll32.exe, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE  
WinXP Registries HKEY_LOCAL_MACHINE@...CurrentVersion\RunServices, HKEY_USERS@...CurrentVersion\RunOnce, HKEY_USERS@...Software\WinRARSFX  
WinXP Ports 1034, 1566, 1566, 27396, 3558, 3559, 3560, 3561, 3562, 3563, 3564, 3565, 3566, 3567, 3568, 3569, 3570, 3571, 3572, 3573, 3574, 3575, 3576, 3577, 3578, 3579, 3580, 3581, 3582, 3583, 3584, 3585, 3586, 3587, 3588, 3589, 3590, 3591, 3592, 3593, 3594, 3595, 3596, 3597, 3598, 3599, 3600, 3601, 3602, 3603, 3604, 3605, 3606, 3607, 3608, 3609, 3610, 3611, 3612, 3613, 3614, 3615, 3616, 3617, 3618, 3619, 3620, 3621, 3622, 3623, 3624, 3625, 3626, 3627, 3628, 3629, 3630, 3631, 3632, 3633, 3634, 3635, 3636, 3637, 3638, 3639, 3640, 3641, 3642, 3643, 3644, 3645, 3646  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 ASProtect 
Packer ID2  
Embedded DNS igxdfdfds.com, f.unicat.org  
String Count 583 
String Link text
String MD5 dd1b998b5ada719f7a50d2898faf4d4d 
Timerange 365 Days 
Unpack Status unknown () 
Countries 1 
Unpacked Link none[none] 
Callgraph none:none 
API Resolution  
Comment none