13.01.2013, 20:49
garciadefender napisał(a):Trojan Ransom
this not ransom
this is Warz-Bot
zeroaccess recycle.bin
Created process: C:\Windows\system32\cmd.exe,(null),(null)
Hide file from user: C:\$Recycle.Bin\S-1-5-21-2113703211-3599218389-2606509963-1001\$dc35f2cad0296b5ed28c8a3c4b4acd58\@
Hide file from user: C:\$Recycle.Bin\S-1-5-21-2113703211-3599218389-2606509963-1001\$dc35f2cad0296b5ed28c8a3c4b4acd58\n
Hide folder from user: C:\$Recycle.Bin\S-1-5-21-2113703211-3599218389-2606509963-1001\$dc35f2cad0296b5ed28c8a3c4b4acd58
Internet connection: C:\Users\TACHION\Desktop\ddreftrgvervtrghtybtrbrrgbtr\ddreftrgvervtrghtybtrbrrgbtr.exe Connects to "50.22.196.70" on port 80 (TCP - HTTP)