Sandra (c)
(Backdoor.Win32.Sandrador.c)

by ?

Compressed with PECompact

more versions



dropped files:
c:\Documents and Settings\%user%\Application Data\Microsoft\q167319.dll   (Backdoor.Win32.Sandrador.c)
size: 12,800 bytes 

c:\Documents and Settings\%user%\Application Data\Microsoft\svchost.exe   (Backdoor.Win32.Sandrador.c)
size: 243,200 bytes 

c:\Program Files\TezBEE\license.txt
size: 4,111 bytes 

c:\Program Files\TezBEE\SatelliteResolver.exe                             (Backdoor.Win32.Delf.jf)
size: 723,968 bytes 

c:\Program Files\TezBEE\winsock.dll
size: 2,864 bytes 

c:\WINDOWS\Installer\18100a.msi
size: 309,248 bytes 

c:\WINDOWS\Installer\{DCA3B34A-27E5-4C8E-B174-E19A63032CBD}\PASS.exe
size: 10,134 bytes 



tested on Windows XP
February 16, 2006

MegaSecurity