Norman Scanner Engine 5.83. 7
Sandbox 05.83, dated 27/09-2005
Your message ID (for later reference): 20051029-775
nepenthes-778d7ad76a9bca1dd82d9c6004b7c4a1-msnwindows.exe : W32/Spybot.gen3 (Signature: W32/Spybot.TXL)
[ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* Creating several executable files on hard-drive.
* File length: 172032 bytes.
[ Changes to filesystem ]
* Creates file C:\WINDOWS\SYSTEM32\msnwindows.exe.
[ Process/window information ]
* Creates a mutex pRiV.
[ Signature Scanning ]
* C:\WINDOWS\SYSTEM32\msnwindows.exe : W32/Spybot.TXL.
(C) 2004 Norman ASA. All Rights Reserved.
The material presented is distributed by Norman ASA as an information source only.
Sent by removed@email.com to sandbox.
Received 29.Oct 2005 at 18.35 - processed 29.Oct 2005 at 18.37.