Path
Name
File Name
First Used By Program
First Seen
Last Seen
File Size
Determination
Malware Group
Siblings
?:\
26/11/2006 20:02:00
26/11/2006 20:01:55
13/04/2007 13:01:08
3056
B
Covert.Code
1
?:\system volume information\_restore{?sid?}\rp{folder}\
27/12/2006 21:19:00
27/12/2006 21:19:26
14/03/2007 15:15:06
3072
B
Covert.Code
1
%WINDIR%\SYSTEM32\
27/01/2007 09:11:00
27/01/2007 09:11:10
11/04/2007 00:16:31
3072
B
Covert.Code
1
B