Trojan.DownLoader11.8085

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'EfficientAddressBook' = ''
[<HKLM>\SOFTWARE\Classes\EfficientAddressBookFile\shell\open\command] '' = '"%PROGRAM_FILES%\Efficient Address Book\EfficientAddressBook.exe" %1'

Вредоносные функции:

Для обхода брандмауэра удаляет или модифицирует следующие ключи реестра:

[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%PROGRAM_FILES%\Efficient Address Book\EfficientAddressBook.exe' = '%PROGRAM_FILES%\Efficient Address Book\EfficientAddressBook.exe:*:Enabled:Efficient Address Book'

Создает и запускает на исполнение:

'%TEMP%\is-6LFIU.tmp\EfficientAddressBook-Setup.tmp' /SL5="$200E2,11071297,54272,%WINDIR%\MrSoftware\EfficientAddressBook-Setup.exe" EfficientAddressBook-Setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%WINDIR%\MrSoftware\EfficientAddressBook-Setup.exe' EfficientAddressBook-Setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-

Запускает на исполнение:

'<SYSTEM32>\netsh.exe' firewall set allowedprogram "%PROGRAM_FILES%\Efficient Address Book\EfficientAddressBook.exe" "Efficient Address Book"
'%WINDIR%\regedit.exe' /s reg.reg

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\Efficient Address Book\Language\is-J7K95.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-STH90.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-SBTTC.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-E2PGE.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-VJ8VN.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-2UNMP.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-FHOJB.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-9LFDG.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-5O6T9.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-Q383I.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-0SGG8.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-TTJ82.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-SVAHE.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-SEC5A.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-IMUA2.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-6EIBH.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-86OE1.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-ARTKS.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-L7OOS.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-POL4C.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-M62RB.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-HA0CC.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-UL1QA.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-FO0QV.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-3QT99.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-17435.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-VBK4B.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-3AH5Q.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-I5AGE.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-3HFRS.tmp
%APPDATA%\Efficient Address Book\Dictionaries\is-IFF14.tmp
%APPDATA%\Efficient Address Book\Dictionaries\is-T9QDA.tmp
%APPDATA%\Efficient Address Book\Dictionaries\is-AVCHG.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-LGDEB.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-536AE.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-42E0T.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-HDACE.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Efficient Address Book\Efficient Address Book.lnk
%PROGRAM_FILES%\Efficient Address Book\EfficientAddressBook.url
%PROGRAM_FILES%\Efficient Address Book\unins000.dat
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\takiemon[1]
%HOMEPATH%\Desktop\Efficient Address Book.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Efficient Address Book\Efficient Address Book Help.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Efficient Address Book\Efficient Address Book Home Page.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Efficient Address Book\Uninstall Efficient Address Book.lnk
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\DefaultImportRule\is-B0L0O.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Trad\is-4L3MM.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\Korean\is-PLROM.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-T06QK.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-BQEHT.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-9OH5E.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-FC3VE.tmp
%PROGRAM_FILES%\Efficient Address Book\is-HQ57U.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-K7OOG.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-27CBE.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-EOKMD.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-BUNAV.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-VVIEC.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-ECHHP.tmp
%PROGRAM_FILES%\Efficient Address Book\Skins\is-GI6J3.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-TTKB8.tmp
%PROGRAM_FILES%\Efficient Address Book\Image\is-DCKSG.tmp
%PROGRAM_FILES%\Efficient Address Book\Report\is-KAMCG.tmp
%PROGRAM_FILES%\Efficient Address Book\Sound\is-9CPSN.tmp
%PROGRAM_FILES%\Efficient Address Book\DefaultImportRule\is-9VK3I.tmp
%PROGRAM_FILES%\Efficient Address Book\is-CUO9N.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-PT6NG.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-4A80K.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-EQVF1.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-6E7OD.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-MQFM1.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-90V2A.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-1LK7U.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-VT7GR.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-OVKP3.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-16NUM.tmp
%TEMP%\is-6LFIU.tmp\EfficientAddressBook-Setup.tmp
%TEMP%\is-3OHID.tmp\_isetup\_RegDLL.tmp
%TEMP%\is-3OHID.tmp\_isetup\_shfoldr.dll
%WINDIR%\MrSoftware\reg.reg
%TEMP%\aut1.tmp
%WINDIR%\MrSoftware\EfficientAddressBook-Setup.exe
%TEMP%\aut2.tmp
%PROGRAM_FILES%\Efficient Address Book\is-3Q1LL.tmp
%PROGRAM_FILES%\Efficient Address Book\is-S64LA.tmp
%PROGRAM_FILES%\Efficient Address Book\is-SD4IM.tmp
%PROGRAM_FILES%\Efficient Address Book\is-LQ5EQ.tmp
%PROGRAM_FILES%\Efficient Address Book\is-9NMAM.tmp
%PROGRAM_FILES%\Efficient Address Book\is-8GLL6.tmp
%PROGRAM_FILES%\Efficient Address Book\is-T4IV4.tmp
%PROGRAM_FILES%\Efficient Address Book\is-VACE0.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-DM3GA.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-USB9V.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-PRDKG.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-6RBLQ.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-A38O7.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-SS42I.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-V124I.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-389SF.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-INJCK.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-1HJ5J.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-SOF4L.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-N4UGM.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-MRI4H.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-F2AE2.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-RDN3U.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-9BD14.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-9TFSC.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-BOL7S.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-GA97B.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-9FQP2.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-33N91.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-BT7G1.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-UFBHG.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-G0OL5.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-2VG6D.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-BSLO0.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-JBK8H.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-R3CIT.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-SDHG9.tmp
%PROGRAM_FILES%\Efficient Address Book\Language\is-NSGI9.tmp

Удаляет следующие файлы:

%TEMP%\is-6LFIU.tmp\EfficientAddressBook-Setup.tmp
%WINDIR%\MrSoftware\EfficientAddressBook-Setup.exe
%WINDIR%\MrSoftware\reg.reg
%TEMP%\is-3OHID.tmp\_isetup\_shfoldr.dll
%TEMP%\aut1.tmp
%TEMP%\aut2.tmp
%TEMP%\is-3OHID.tmp\_isetup\_RegDLL.tmp

Перемещает следующие файлы:

%PROGRAM_FILES%\Efficient Address Book\Language\is-VJ8VN.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Slovenian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-2UNMP.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Slovenian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-FHOJB.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Spanish.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-FO0QV.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\PortugueseBR.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-3QT99.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Russian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-17435.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Russian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-E2PGE.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Spanish.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-9LFDG.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Thai.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-SVAHE.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Turkish.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-SEC5A.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Turkish.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-J7K95.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Swedish.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-STH90.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Swedish.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-SBTTC.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Thai.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-HA0CC.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Korean.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-L7OOS.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Lithuanian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-6EIBH.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Lithuanian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-TTKB8.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Japanese.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-POL4C.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Japanese.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-M62RB.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Korean.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-86OE1.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Norwegian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-I5AGE.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Portuguese.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-3HFRS.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Portuguese.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-VBK4B.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\PortugueseBR.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-ARTKS.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Norwegian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-UL1QA.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Polish.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-3AH5Q.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Polish.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-IMUA2.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Ukrainian.lng
%PROGRAM_FILES%\Efficient Address Book\Skins\is-K7OOG.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Pink.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-27CBE.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Silver.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-EOKMD.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Springtime.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-ECHHP.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Black.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-GI6J3.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Blue.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-BUNAV.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Green.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-536AE.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Summer.skn
%APPDATA%\Efficient Address Book\Dictionaries\is-IFF14.tmp в %APPDATA%\Efficient Address Book\Dictionaries\american.adm
%APPDATA%\Efficient Address Book\Dictionaries\is-T9QDA.tmp в %APPDATA%\Efficient Address Book\Dictionaries\autocorrect.adu
%APPDATA%\Efficient Address Book\Dictionaries\is-AVCHG.tmp в %APPDATA%\Efficient Address Book\Dictionaries\Roget.adt
%PROGRAM_FILES%\Efficient Address Book\Skins\is-42E0T.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Xmas.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-HDACE.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Valentine.skn
%PROGRAM_FILES%\Efficient Address Book\Skins\is-LGDEB.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Pumpkin.skn
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-0SGG8.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English\RegionInfo.ini
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-BQEHT.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English\HelpInfo.ini
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-9OH5E.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\license.rtf
%PROGRAM_FILES%\Efficient Address Book\Language\is-TTJ82.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Ukrainian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-5O6T9.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English\license.rtf
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-Q383I.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English\Local.ini
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-FC3VE.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\Local.ini
%PROGRAM_FILES%\Efficient Address Book\Language\Korean\is-PLROM.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Korean\Local.ini
%PROGRAM_FILES%\Efficient Address Book\is-HQ57U.tmp в %PROGRAM_FILES%\Efficient Address Book\Links.ini
%PROGRAM_FILES%\Efficient Address Book\Skins\is-VVIEC.tmp в %PROGRAM_FILES%\Efficient Address Book\Skins\Skins.ini
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-T06QK.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\RegionInfo.ini
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\DefaultImportRule\is-B0L0O.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\DefaultImportRule\Contact.ini
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Trad\is-4L3MM.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Trad\Local.ini
%PROGRAM_FILES%\Efficient Address Book\Language\is-VT7GR.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-OVKP3.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Arabic.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-16NUM.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Arabic.tip
%PROGRAM_FILES%\Efficient Address Book\Report\is-KAMCG.tmp в %PROGRAM_FILES%\Efficient Address Book\Report\ReportTemplate.htm
%PROGRAM_FILES%\Efficient Address Book\Sound\is-9CPSN.tmp в %PROGRAM_FILES%\Efficient Address Book\Sound\Alarm.wav
%PROGRAM_FILES%\Efficient Address Book\Language\is-EQVF1.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-1LK7U.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Armenian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-9FQP2.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-33N91.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-BT7G1.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl.lc
%PROGRAM_FILES%\Efficient Address Book\Language\is-6E7OD.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Armenian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-MQFM1.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Bulgarian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-90V2A.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Bulgarian.tip
%PROGRAM_FILES%\Efficient Address Book\is-VACE0.tmp в %PROGRAM_FILES%\Efficient Address Book\icudt30.dll
%PROGRAM_FILES%\Efficient Address Book\is-9NMAM.tmp в %PROGRAM_FILES%\Efficient Address Book\icuuc30.dll
%PROGRAM_FILES%\Efficient Address Book\is-S64LA.tmp в %PROGRAM_FILES%\Efficient Address Book\Microsoft.VC80.CRT.manifest
%PROGRAM_FILES%\Efficient Address Book\is-3Q1LL.tmp в %PROGRAM_FILES%\Efficient Address Book\unins000.exe
%PROGRAM_FILES%\Efficient Address Book\is-8GLL6.tmp в %PROGRAM_FILES%\Efficient Address Book\firebird.msg
%PROGRAM_FILES%\Efficient Address Book\is-T4IV4.tmp в %PROGRAM_FILES%\Efficient Address Book\gds32.dll
%PROGRAM_FILES%\Efficient Address Book\is-SD4IM.tmp в %PROGRAM_FILES%\Efficient Address Book\msvcr80.dll
%PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\is-4A80K.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Simpl\EfficientAddressBook-Chinese_Simpl.chm
%PROGRAM_FILES%\Efficient Address Book\DefaultImportRule\is-9VK3I.tmp в %PROGRAM_FILES%\Efficient Address Book\DefaultImportRule\Contact.ini
%PROGRAM_FILES%\Efficient Address Book\Image\is-DCKSG.tmp в %PROGRAM_FILES%\Efficient Address Book\Image\Logo.jpg
%PROGRAM_FILES%\Efficient Address Book\is-LQ5EQ.tmp в %PROGRAM_FILES%\Efficient Address Book\Template.dat
%PROGRAM_FILES%\Efficient Address Book\is-CUO9N.tmp в %PROGRAM_FILES%\Efficient Address Book\EfficientAddressBook.exe
%PROGRAM_FILES%\Efficient Address Book\Language\English\is-PT6NG.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\English\EfficientAddressBook.chm
%PROGRAM_FILES%\Efficient Address Book\Language\is-GA97B.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Trad.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-USB9V.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\German.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-PRDKG.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\German.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-389SF.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Greek.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-V124I.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Finnish.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-6RBLQ.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\French.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-DM3GA.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\French.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-MRI4H.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Greek.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-INJCK.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Indonesian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-1HJ5J.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Italian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-SOF4L.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Italian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-F2AE2.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Hungarian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-RDN3U.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Hungarian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-N4UGM.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Indonesian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-UFBHG.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Croatian.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-R3CIT.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Czech.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-SDHG9.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Czech.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-9BD14.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Trad.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-9TFSC.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Chinese_Trad.lc
%PROGRAM_FILES%\Efficient Address Book\Language\is-BOL7S.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Croatian.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-NSGI9.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Danish.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-BSLO0.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Farsi.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-A38O7.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Farsi.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-SS42I.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Finnish.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-JBK8H.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Danish.tip
%PROGRAM_FILES%\Efficient Address Book\Language\is-G0OL5.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Dutch.lng
%PROGRAM_FILES%\Efficient Address Book\Language\is-2VG6D.tmp в %PROGRAM_FILES%\Efficient Address Book\Language\Dutch.tip

Сетевая активность:

Подключается к:

'www.ta##emon.nl':80
'localhost':1037

TCP:

Запросы HTTP GET:

www.ta##emon.nl/

UDP:

DNS ASK www.ta##emon.nl

Другое:

Ищет следующие окна:

ClassName: 'IEFrame' WindowName: '(null)'
ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
ClassName: '' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'BUTTON' WindowName: '(null)'
ClassName: 'RegEdit_RegEdit' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней