VVoVe: VVoVe: VVoVe: VVoVe:


Service load:
0% 100%
File: win.exe
Status:
INFECTED/MALWARE

AntiVir
No viruses found (1.22 seconds taken)
BitDefender
No viruses found (3.36 seconds taken)
ClamAV
No viruses found (4.99 seconds taken)
F-Prot Antivirus
No viruses found (1.18 seconds taken)
F-Secure Anti-Virus
Backdoor.SdBot.gen (4.32 seconds taken)
Kaspersky Anti-Virus
Backdoor.SdBot.gen (4.17 seconds taken)
McAfee VirusScan
No viruses found (6.35 seconds taken)
Norman Virus Control
Sandbox: W32/Malware; [ General information ]

* File length: 94116 bytes.

[ Changes to filesystem ]
* Creates file C:\WINDOWS\SYSTEM\win.exe.

[ Changes to registry ]
* Creates value "agg"="win.exe" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Ru n".
* Creates value "agg"="win.exe" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Ru nServices".
* Creates value "agg"="win.exe" in key "HKCU\Software\Microsoft\Windows\CurrentVersion\Ru n".

[ Network services ]
* Attempts to resolve name "irc.tin.it".
* Connect port 6667 [TCP], IP 193.75.75.100.
* Connects to IRC Server.
* Connect port 113 [IP], IP 0.0.0.0.

[ Process/window information ]
* Creates a mutex AgCrew. (17.03 seconds taken)