FOR CUSTOMERS

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

EN

RU CN DE EN ES FR IT JP KZ UZ PL BY
Close
Support services
Scanners
Dr.Web vxCube
Trial
VCI investigations
Virus library
Knowledge base

Technologies

Terminology

Training and education

Myths

News

Trojan.DownLoader11.29296

Added to the Dr.Web virus database: 2014-08-27

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\npf] 'Start' = '00000002'
Malicious functions:
Creates and executes the following:
  • '%TEMP%\nsk7.tmp\ns9.tmp' net start npf
  • '%PROGRAM_FILES%\Nmap\vcredist2008_x86.exe' /q
  • 'C:\7f2658486a6dd47d6fdc043b07883dd1\install.exe' /q
  • '%TEMP%\7zS1.tmp\nmap-6.47-setup.exe' /S
  • '%PROGRAM_FILES%\Nmap\winpcap-nmap-4.13.exe' /S
  • '%TEMP%\nsk7.tmp\ns8.tmp' net stop npf
Executes the following:
  • '%WINDIR%\regedit.exe' /S "%PROGRAM_FILES%\Nmap\nmap_performance.reg"
  • '<SYSTEM32>\msiexec.exe' /V
  • '<SYSTEM32>\msiexec.exe' -Embedding 054647F5B61253BAD010D03CCE99669F
  • '<SYSTEM32>\regedt32.exe' /S "%PROGRAM_FILES%\Nmap\nmap_performance.reg"
  • '<SYSTEM32>\net.exe' stop npf
  • '<SYSTEM32>\net1.exe' stop npf
  • '<SYSTEM32>\net1.exe' start npf
Modifies file system :
Creates the following files:
  • %PROGRAM_FILES%\Nmap\nselib\srvloc.lua
  • %PROGRAM_FILES%\Nmap\nselib\socks.lua
  • %PROGRAM_FILES%\Nmap\nselib\snmp.lua
  • %PROGRAM_FILES%\Nmap\nselib\sslcert.lua
  • %PROGRAM_FILES%\Nmap\nselib\ssh2.lua
  • %PROGRAM_FILES%\Nmap\nselib\ssh1.lua
  • %PROGRAM_FILES%\Nmap\nselib\smtp.lua
  • %PROGRAM_FILES%\Nmap\nselib\shortport.lua
  • %PROGRAM_FILES%\Nmap\nselib\sasl.lua
  • %PROGRAM_FILES%\Nmap\nselib\rtsp.lua
  • %PROGRAM_FILES%\Nmap\nselib\smbauth.lua
  • %PROGRAM_FILES%\Nmap\nselib\smb.lua
  • %PROGRAM_FILES%\Nmap\nselib\sip.lua
  • %PROGRAM_FILES%\Nmap\nselib\stdnse.lua
  • %PROGRAM_FILES%\Nmap\nselib\unittest.lua
  • %PROGRAM_FILES%\Nmap\nselib\unicode.lua
  • %PROGRAM_FILES%\Nmap\nselib\tns.lua
  • %PROGRAM_FILES%\Nmap\nselib\url.lua
  • %PROGRAM_FILES%\Nmap\nselib\upnp.lua
  • %PROGRAM_FILES%\Nmap\nselib\unpwdb.lua
  • %PROGRAM_FILES%\Nmap\nselib\tls.lua
  • %PROGRAM_FILES%\Nmap\nselib\stun.lua
  • %PROGRAM_FILES%\Nmap\nselib\strict.lua
  • %PROGRAM_FILES%\Nmap\nselib\strbuf.lua
  • %PROGRAM_FILES%\Nmap\nselib\tftp.lua
  • %PROGRAM_FILES%\Nmap\nselib\target.lua
  • %PROGRAM_FILES%\Nmap\nselib\tab.lua
  • %PROGRAM_FILES%\Nmap\nselib\nmap.luadoc
  • %PROGRAM_FILES%\Nmap\nselib\netbios.lua
  • %PROGRAM_FILES%\Nmap\nselib\ndmp.lua
  • %PROGRAM_FILES%\Nmap\nselib\omp2.lua
  • %PROGRAM_FILES%\Nmap\nselib\nsedebug.lua
  • %PROGRAM_FILES%\Nmap\nselib\nrpc.lua
  • %PROGRAM_FILES%\Nmap\nselib\ncp.lua
  • %PROGRAM_FILES%\Nmap\nselib\msrpctypes.lua
  • %PROGRAM_FILES%\Nmap\nselib\msrpcperformance.lua
  • %PROGRAM_FILES%\Nmap\nselib\msrpc.lua
  • %PROGRAM_FILES%\Nmap\nselib\natpmp.lua
  • %PROGRAM_FILES%\Nmap\nselib\mysql.lua
  • %PROGRAM_FILES%\Nmap\nselib\mssql.lua
  • %PROGRAM_FILES%\Nmap\nselib\openssl.luadoc
  • %PROGRAM_FILES%\Nmap\nselib\rmi.lua
  • %PROGRAM_FILES%\Nmap\nselib\redis.lua
  • %PROGRAM_FILES%\Nmap\nselib\rdp.lua
  • %PROGRAM_FILES%\Nmap\nselib\rsync.lua
  • %PROGRAM_FILES%\Nmap\nselib\rpcap.lua
  • %PROGRAM_FILES%\Nmap\nselib\rpc.lua
  • %PROGRAM_FILES%\Nmap\nselib\proxy.lua
  • %PROGRAM_FILES%\Nmap\nselib\pcre.luadoc
  • %PROGRAM_FILES%\Nmap\nselib\packet.lua
  • %PROGRAM_FILES%\Nmap\nselib\ospf.lua
  • %PROGRAM_FILES%\Nmap\nselib\pppoe.lua
  • %PROGRAM_FILES%\Nmap\nselib\pop3.lua
  • %PROGRAM_FILES%\Nmap\nselib\pgsql.lua
  • %PROGRAM_FILES%\Nmap\nselib\versant.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\jdwp-class\README.txt
  • %PROGRAM_FILES%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.java
  • %PROGRAM_FILES%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.class
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\default.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\backdoor.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\README
  • %PROGRAM_FILES%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.java
  • %PROGRAM_FILES%\Nmap\nselib\data\vhosts-default.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\usernames.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\tftplist.txt
  • %PROGRAM_FILES%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.class
  • %PROGRAM_FILES%\Nmap\nselib\data\wp-plugins.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\vhosts-full.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\drives.lua
  • %TEMP%\nsf6.tmp
  • %PROGRAM_FILES%\Nmap\winpcap-nmap-4.13.exe
  • %PROGRAM_FILES%\Nmap\Uninstall.exe
  • %TEMP%\nsk7.tmp\System.dll
  • %TEMP%\nsk7.tmp\final.ini
  • %TEMP%\nsk7.tmp\options.ini
  • %PROGRAM_FILES%\Nmap\icon1.ico
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\network.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\experimental.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\examples.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\pwdump.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\nmap_service.vcproj
  • %PROGRAM_FILES%\Nmap\nselib\data\psexec\nmap_service.c
  • %PROGRAM_FILES%\Nmap\nselib\data\http-default-accounts-fingerprints.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\favicon-db
  • %PROGRAM_FILES%\Nmap\nselib\data\drupal-modules.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\http-folders.txt
  • %PROGRAM_FILES%\Nmap\nselib\data\http-fingerprints.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\http-devframework-fingerprints.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\dns-srv-names
  • %PROGRAM_FILES%\Nmap\nselib\vuzedht.lua
  • %PROGRAM_FILES%\Nmap\nselib\vulns.lua
  • %PROGRAM_FILES%\Nmap\nselib\vnc.lua
  • %PROGRAM_FILES%\Nmap\nselib\xmpp.lua
  • %PROGRAM_FILES%\Nmap\nselib\xdmcp.lua
  • %PROGRAM_FILES%\Nmap\nselib\wsdd.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\http-sql-errors.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\rtsp-urls.txt
  • %PROGRAM_FILES%\Nmap\nselib\data\pixel.gif
  • %PROGRAM_FILES%\Nmap\nselib\data\passwords.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\ssl-fingerprints
  • %PROGRAM_FILES%\Nmap\nselib\data\ssl-ciphers
  • %PROGRAM_FILES%\Nmap\nselib\data\snmpcommunities.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\packetdecoders.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\mgroupnames.db
  • %PROGRAM_FILES%\Nmap\nselib\data\ike-fingerprints.lua
  • %PROGRAM_FILES%\Nmap\nselib\data\http-web-files-extensions.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\oracle-sids
  • %PROGRAM_FILES%\Nmap\nselib\data\oracle-default-accounts.lst
  • %PROGRAM_FILES%\Nmap\nselib\data\mysql-cis.audit
  • %PROGRAM_FILES%\Nmap\scripts\telnet-encryption.nse
  • %PROGRAM_FILES%\Nmap\scripts\telnet-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\teamspeak2-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\traceroute-geolocation.nse
  • %PROGRAM_FILES%\Nmap\scripts\tls-nextprotoneg.nse
  • %PROGRAM_FILES%\Nmap\scripts\tftp-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-traceroute.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-ipv6-multicast-invalid-dst.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-ipv6-multicast-echo.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-asn.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-sniffer.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-ipv6-multicast-slaac.nse
  • %PROGRAM_FILES%\Nmap\scripts\targets-ipv6-multicast-mld.nse
  • %PROGRAM_FILES%\Nmap\scripts\unittest.nse
  • %PROGRAM_FILES%\Nmap\scripts\vuze-dht-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\voldemort-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\vnc-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\whois-domain.nse
  • %PROGRAM_FILES%\Nmap\scripts\weblogic-t3-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\wdb-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\vnc-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\url-snarf.nse
  • %PROGRAM_FILES%\Nmap\scripts\upnp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\unusual-port.nse
  • %PROGRAM_FILES%\Nmap\scripts\vmauthd-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\versant-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ventrilo-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\socks-auth-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-win32-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-win32-software.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssh-hostkey.nse
  • %PROGRAM_FILES%\Nmap\scripts\socks-open-proxy.nse
  • %PROGRAM_FILES%\Nmap\scripts\socks-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-win32-shares.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-netstat.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-ios-config.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-interfaces.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-win32-services.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-sysdescr.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-processes.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssh2-enum-algos.nse
  • %PROGRAM_FILES%\Nmap\scripts\stun-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\sstp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\sslv2.nse
  • %PROGRAM_FILES%\Nmap\scripts\svn-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\stuxnet-detect.nse
  • %PROGRAM_FILES%\Nmap\scripts\stun-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssl-known-key.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssl-date.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssl-cert.nse
  • %PROGRAM_FILES%\Nmap\scripts\sshv1.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssl-heartbleed.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssl-google-cert-catalog.nse
  • %PROGRAM_FILES%\Nmap\scripts\ssl-enum-ciphers.nse
  • %PROGRAM_FILES%\Nmap\scripts\whois-ip.nse
  • %PROGRAM_FILES%\Nmap\nselib\httpspider.lua
  • %PROGRAM_FILES%\Nmap\nselib\http.lua
  • %PROGRAM_FILES%\Nmap\nselib\gps.lua
  • %PROGRAM_FILES%\Nmap\nselib\imap.lua
  • %PROGRAM_FILES%\Nmap\nselib\ike.lua
  • %PROGRAM_FILES%\Nmap\nselib\iax2.lua
  • %PROGRAM_FILES%\Nmap\nselib\giop.lua
  • %PROGRAM_FILES%\Nmap\nselib\eap.lua
  • %PROGRAM_FILES%\Nmap\nselib\drda.lua
  • %PROGRAM_FILES%\Nmap\nselib\dnssd.lua
  • %PROGRAM_FILES%\Nmap\nselib\ftp.lua
  • %PROGRAM_FILES%\Nmap\nselib\formulas.lua
  • %PROGRAM_FILES%\Nmap\nselib\eigrp.lua
  • %PROGRAM_FILES%\Nmap\nselib\informix.lua
  • %PROGRAM_FILES%\Nmap\nselib\match.lua
  • %PROGRAM_FILES%\Nmap\nselib\listop.lua
  • %PROGRAM_FILES%\Nmap\nselib\lfs.luadoc
  • %PROGRAM_FILES%\Nmap\nselib\mongodb.lua
  • %PROGRAM_FILES%\Nmap\nselib\mobileme.lua
  • %PROGRAM_FILES%\Nmap\nselib\membase.lua
  • %PROGRAM_FILES%\Nmap\nselib\ldap.lua
  • %PROGRAM_FILES%\Nmap\nselib\iscsi.lua
  • %PROGRAM_FILES%\Nmap\nselib\ipp.lua
  • %PROGRAM_FILES%\Nmap\nselib\ipOps.lua
  • %PROGRAM_FILES%\Nmap\nselib\json.lua
  • %PROGRAM_FILES%\Nmap\nselib\jdwp.lua
  • %PROGRAM_FILES%\Nmap\nselib\isns.lua
  • %PROGRAM_FILES%\Nmap\nselib\base32.lua
  • %PROGRAM_FILES%\Nmap\nselib\asn1.lua
  • %PROGRAM_FILES%\Nmap\nselib\amqp.lua
  • %PROGRAM_FILES%\Nmap\nselib\bit.luadoc
  • %PROGRAM_FILES%\Nmap\nselib\bin.luadoc
  • %PROGRAM_FILES%\Nmap\nselib\base64.lua
  • %PROGRAM_FILES%\Nmap\nselib\ajp.lua
  • %PROGRAM_FILES%\Nmap\scripts\xdmcp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\x11-access.nse
  • %PROGRAM_FILES%\Nmap\scripts\wsdd-discover.nse
  • %PROGRAM_FILES%\Nmap\nselib\afp.lua
  • %PROGRAM_FILES%\Nmap\scripts\xmpp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\xmpp-brute.nse
  • %PROGRAM_FILES%\Nmap\nselib\bitcoin.lua
  • %PROGRAM_FILES%\Nmap\nselib\dhcp.lua
  • %PROGRAM_FILES%\Nmap\nselib\datafiles.lua
  • %PROGRAM_FILES%\Nmap\nselib\cvs.lua
  • %PROGRAM_FILES%\Nmap\nselib\dnsbl.lua
  • %PROGRAM_FILES%\Nmap\nselib\dns.lua
  • %PROGRAM_FILES%\Nmap\nselib\dhcp6.lua
  • %PROGRAM_FILES%\Nmap\nselib\creds.lua
  • %PROGRAM_FILES%\Nmap\nselib\brute.lua
  • %PROGRAM_FILES%\Nmap\nselib\bjnp.lua
  • %PROGRAM_FILES%\Nmap\nselib\bittorrent.lua
  • %PROGRAM_FILES%\Nmap\nselib\comm.lua
  • %PROGRAM_FILES%\Nmap\nselib\citrixxml.lua
  • %PROGRAM_FILES%\Nmap\nselib\cassandra.lua
  • %TEMP%\nsk7.tmp\nsExec.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.3082.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1036.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1040.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.2052.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1028.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1031.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1049.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.exe
  • C:\7f2658486a6dd47d6fdc043b07883dd1\vc_red.msi
  • C:\7f2658486a6dd47d6fdc043b07883dd1\vc_red.cab
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1041.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1042.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1033.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1033.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\globdata.ini
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.2052.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1028.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\$shtdwn$.req
  • C:\7f2658486a6dd47d6fdc043b07883dd1\vcredist.bmp
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.ini
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1031.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1049.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1041.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1042.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.3082.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1036.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1040.txt
  • %PROGRAM_FILES%\Nmap\py2exe\sqlite3.dll
  • %PROGRAM_FILES%\Nmap\py2exe\select.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\pyexpat.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
  • %PROGRAM_FILES%\Nmap\py2exe\zlib1.dll
  • %PROGRAM_FILES%\Nmap\py2exe\unicodedata.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\pangocairo.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\library.zip
  • %PROGRAM_FILES%\Nmap\py2exe\libpng14-14.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libpangowin32-1.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\pango.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\libxml2-2.dll
  • %PROGRAM_FILES%\Nmap\py2exe\librsvg-2-2.dll
  • %PROGRAM_FILES%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
  • %PROGRAM_FILES%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
  • %PROGRAM_FILES%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
  • %PROGRAM_FILES%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
  • %PROGRAM_FILES%\Nmap\vcredist2008_x86.exe
  • %PROGRAM_FILES%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
  • %PROGRAM_FILES%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
  • %PROGRAM_FILES%\Nmap\py2exe\etc\pango\pango.modules
  • %PROGRAM_FILES%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
  • %PROGRAM_FILES%\Nmap\py2exe\etc\fonts\fonts.dtd
  • %PROGRAM_FILES%\Nmap\py2exe\etc\fonts\fonts.conf
  • %PROGRAM_FILES%\Nmap\py2exe\etc\pango\pango.aliases
  • %PROGRAM_FILES%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
  • %PROGRAM_FILES%\Nmap\py2exe\etc\gtk-2.0\gtkrc
  • %TEMP%\dd_vcredistUI7968.txt
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll
  • %PROGRAM_FILES%\Nmap\ncat.exe
  • %TEMP%\VWLE.tmp
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll
  • %PROGRAM_FILES%\Nmap\NDIFF_README
  • %PROGRAM_FILES%\Nmap\ndiff.exe
  • %PROGRAM_FILES%\Nmap\ca-bundle.crt
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377\9.0.30729.6161.policy
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\9.0.30729.6161.policy
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace\9.0.30729.6161.policy
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30\9.0.30729.6161.policy
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\9.0.30729.6161.policy
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7.cat
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f.cat
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508.cat
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148.cat
  • C:\Config.Msi\376e9.rbs
  • %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
  • %WINDIR%\Installer\376e6.msi
  • %TEMP%\dd_vcredistMSI7968.txt
  • %WINDIR%\Installer\MSIB.tmp
  • %WINDIR%\Installer\MSIA.tmp
  • %APPDATA%\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\9.0.30729.6161.cat
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508.manifest
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148.manifest
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll
  • %WINDIR%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f.manifest
  • %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7.manifest
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace\9.0.30729.6161.cat
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30\9.0.30729.6161.cat
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\9.0.30729.6161.cat
  • %CommonProgramFiles%\Microsoft Shared\VC\msdia90.dll
  • %WINDIR%\Installer\$PatchCache$\Managed\CFD2C1F142D260E3CB8B271543DA9F98\9.0.30729\FL_msdia71_dll_2_60035_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8
  • %WINDIR%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377\9.0.30729.6161.cat
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\linux_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\linux_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\irix_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\openbsd_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\macosx_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\macosx_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\irix_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\default_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\misc\profile_editor.xml
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\ru\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\freebsd_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\freebsd_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\default_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\openbsd_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\unknown_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\unknown_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\ubuntu_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_2_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_1_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_1_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\ubuntu_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\solaris_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\redhat_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\redhat_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\throbber.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\throbber.gif
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\solaris_75.png
  • %TEMP%\nsk7.tmp\ns9.tmp
  • <DRIVERS>\npf.sys
  • %PROGRAM_FILES%\WinPcap\uninstall.exe
  • %PROGRAM_FILES%\Nmap\COPYING_HIGWIDGETS
  • %PROGRAM_FILES%\Nmap\ZENMAP_README
  • %PROGRAM_FILES%\Nmap\zenmap.exe
  • %PROGRAM_FILES%\WinPcap\LICENSE
  • <SYSTEM32>\pthreadVC.dll
  • %TEMP%\nsk7.tmp\ns8.tmp
  • %PROGRAM_FILES%\WinPcap\rpcapd.exe
  • <SYSTEM32>\Packet.dll
  • <SYSTEM32>\wpcap.dll
  • %PROGRAM_FILES%\Nmap\python27.dll
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\it\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\hr\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\fr\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\pt_BR\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\pl\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\ja\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\locale\de\LC_MESSAGES\zenmap.mo
  • %PROGRAM_FILES%\Nmap\share\zenmap\config\scan_profile.usp
  • %PROGRAM_FILES%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
  • %PROGRAM_FILES%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
  • %PROGRAM_FILES%\Nmap\share\zenmap\docs\help.html
  • %PROGRAM_FILES%\Nmap\share\zenmap\config\zenmap_version
  • %PROGRAM_FILES%\Nmap\share\zenmap\config\zenmap.conf
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_2_75.png
  • %PROGRAM_FILES%\Nmap\py2exe\libexpat-1.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libcroco-0.6-3.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libcairo-script-interpreter-2.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgcc_s_dw2-1.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgailutil-18.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libfontconfig-1.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libcairo-gobject-2.dll
  • %PROGRAM_FILES%\Nmap\py2exe\intl.dll
  • %PROGRAM_FILES%\Nmap\py2exe\gtk._gtk.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\gobject._gobject.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\libcairo-2.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libatk-1.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libasprintf-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgdk-win32-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgtk-win32-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgthread-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgsf-win32-1-114.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libpangoft2-1.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libpangocairo-1.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libpango-1.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgsf-1-114.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libglade-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgio-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgobject-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libgmodule-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\py2exe\libglib-2.0-0.dll
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\border.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\zenmap.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\win_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\padlock.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\logo.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\firewall.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\win_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_4_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_3_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_3_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_5_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_5_32.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\vl_4_75.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\router.png
  • %PROGRAM_FILES%\Nmap\py2exe\cairo._cairo.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\bz2.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\atk.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\glib._glib.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\gio._gio.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\freetype6.dll
  • %PROGRAM_FILES%\Nmap\py2exe\_ssl.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\_ctypes.pyd
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\wireless.png
  • %PROGRAM_FILES%\Nmap\share\zenmap\pixmaps\radialnet\switch.png
  • %PROGRAM_FILES%\Nmap\py2exe\_sqlite3.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\_socket.pyd
  • %PROGRAM_FILES%\Nmap\py2exe\_hashlib.pyd
  • %PROGRAM_FILES%\Nmap\scripts\gkrellm-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\giop-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ganglia-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\hadoop-datanode-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\gpsd-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\gopher-ls.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-vuln-cve2010-4221.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-bounce.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-anon.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-vsftpd-backdoor.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-proftpd-backdoor.nse
  • %PROGRAM_FILES%\Nmap\scripts\ftp-libopie.nse
  • %PROGRAM_FILES%\Nmap\scripts\hadoop-jobtracker-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-adobe-coldfusion-apsa1301.nse
  • %PROGRAM_FILES%\Nmap\scripts\hostmap-robtex.nse
  • %PROGRAM_FILES%\Nmap\scripts\hostmap-ip2hosts.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-auth-finder.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-apache-negotiation.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-affiliate-id.nse
  • %PROGRAM_FILES%\Nmap\scripts\hostmap-bfk.nse
  • %PROGRAM_FILES%\Nmap\scripts\hadoop-tasktracker-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\hadoop-secondary-namenode-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\hadoop-namenode-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\hddtemp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\hbase-region-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\hbase-master-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-update.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-srv-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-service-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\domcon-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-zone-transfer.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-zeustracker.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-recursion.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-nsec3-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-nsec-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-ip6-arpa-scan.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-random-txid.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-random-srcport.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-nsid.nse
  • %PROGRAM_FILES%\Nmap\scripts\domcon-cmd.nse
  • %PROGRAM_FILES%\Nmap\scripts\firewalk.nse
  • %PROGRAM_FILES%\Nmap\scripts\finger.nse
  • %PROGRAM_FILES%\Nmap\scripts\eppc-enum-processes.nse
  • %PROGRAM_FILES%\Nmap\scripts\freelancer-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\flume-master-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\firewall-bypass.nse
  • %PROGRAM_FILES%\Nmap\scripts\epmd-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\drda-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\dpap-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\domino-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\eap-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\duplicates.nse
  • %PROGRAM_FILES%\Nmap\scripts\drda-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-auth.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-huawei-hg5xx-vuln.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-headers.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-grep.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-iis-short-name-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-icloud-sendmsg.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-icloud-findmyiphone.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-google-malware.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-frontpage-login.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-form-fuzzer.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-form-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-gitweb-projects-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-git.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-generator.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-iis-webdav-vuln.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-open-redirect.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-open-proxy.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-ntlm-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-phpmyadmin-dir-traversal.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-php-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-passwd.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-mobileversion-checker.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-majordomo2-dir-traversal.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-litespeed-sourcecode-download.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-joomla-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-methods.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-method-tamper.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-malware-host.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-config-backup.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-comments-displayer.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-coldfusion-subzero.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-date.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-csrf.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-cors.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-chrono.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-backup-finder.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-axis2-dir-traversal.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-awstatstotals-exec.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-cakephp-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-barracuda-dir-traversal.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-default-accounts.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-exif-spider.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-errors.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-fileupload-exploiter.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-feed.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-favicon.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-email-harvest.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-dombased-xss.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-dlink-backdoor.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-devframework.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-drupal-modules.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-drupal-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-domino-enum-passwords.nse
  • %PROGRAM_FILES%\Nmap\scripts\ajp-methods.nse
  • %PROGRAM_FILES%\Nmap\scripts\ajp-headers.nse
  • %PROGRAM_FILES%\Nmap\scripts\ajp-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\amqp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\allseeingeye-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ajp-request.nse
  • %PROGRAM_FILES%\Nmap\scripts\ajp-auth.nse
  • %PROGRAM_FILES%\Nmap\scripts\afp-ls.nse
  • %PROGRAM_FILES%\Nmap\scripts\afp-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\address-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\afp-showmount.nse
  • %PROGRAM_FILES%\Nmap\scripts\afp-serverinfo.nse
  • %PROGRAM_FILES%\Nmap\scripts\afp-path-vuln.nse
  • %PROGRAM_FILES%\Nmap\scripts\asn-query.nse
  • %PROGRAM_FILES%\Nmap\scripts\bjnp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\bittorrent-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\bitcoinrpc-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-bjnp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-avahi-dos.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-ataoe-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\bitcoin-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\backorifice-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\auth-spoof.nse
  • %PROGRAM_FILES%\Nmap\scripts\auth-owners.nse
  • %PROGRAM_FILES%\Nmap\scripts\bitcoin-getaddr.nse
  • %PROGRAM_FILES%\Nmap\scripts\banner.nse
  • %PROGRAM_FILES%\Nmap\scripts\backorifice-info.nse
  • %PROGRAM_FILES%\Nmap\nmap-protocols
  • %PROGRAM_FILES%\Nmap\nmap-payloads
  • %PROGRAM_FILES%\Nmap\nmap-os-db
  • %PROGRAM_FILES%\Nmap\nmap-services
  • %PROGRAM_FILES%\Nmap\nmap-service-probes
  • %PROGRAM_FILES%\Nmap\nmap-rpc
  • %PROGRAM_FILES%\Nmap\nmap-mac-prefixes
  • %TEMP%\nsr4.tmp\shortcuts.ini
  • %TEMP%\nsm3.tmp
  • %TEMP%\7zS1.tmp\nmap-6.47-setup.exe
  • %PROGRAM_FILES%\Nmap\COPYING
  • %PROGRAM_FILES%\Nmap\CHANGELOG
  • %TEMP%\nsr4.tmp\final.ini
  • %PROGRAM_FILES%\Nmap\nmap.exe
  • %PROGRAM_FILES%\Nmap\libeay32.dll
  • %PROGRAM_FILES%\Nmap\licenses\OpenSSL.txt
  • %PROGRAM_FILES%\Nmap\licenses\MPL-1.1
  • %PROGRAM_FILES%\Nmap\scripts\acarsd-info.nse
  • %PROGRAM_FILES%\Nmap\ndiff\scripts\ndiff
  • %PROGRAM_FILES%\Nmap\ssleay32.dll
  • %PROGRAM_FILES%\Nmap\licenses\LGPL-2
  • %PROGRAM_FILES%\Nmap\nmap_performance.reg
  • %PROGRAM_FILES%\Nmap\nmap.xsl
  • %PROGRAM_FILES%\Nmap\nse_main.lua
  • %PROGRAM_FILES%\Nmap\licenses\BSD-simplified
  • %PROGRAM_FILES%\Nmap\3rd-party-licenses.txt
  • %PROGRAM_FILES%\Nmap\README-WIN32
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-db2-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\creds-summary.nse
  • %PROGRAM_FILES%\Nmap\scripts\couchdb-stats.nse
  • %PROGRAM_FILES%\Nmap\scripts\couchdb-databases.nse
  • %PROGRAM_FILES%\Nmap\scripts\cvs-brute-repository.nse
  • %PROGRAM_FILES%\Nmap\scripts\cups-queue-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\cups-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\citrix-enum-servers.nse
  • %PROGRAM_FILES%\Nmap\scripts\citrix-brute-xml.nse
  • %PROGRAM_FILES%\Nmap\scripts\cccam-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\cassandra-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\citrix-enum-servers-xml.nse
  • %PROGRAM_FILES%\Nmap\scripts\citrix-enum-apps.nse
  • %PROGRAM_FILES%\Nmap\scripts\citrix-enum-apps-xml.nse
  • %PROGRAM_FILES%\Nmap\scripts\cvs-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-cache-snoop.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-blacklist.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-fuzz.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-client-subnet-scan.nse
  • %PROGRAM_FILES%\Nmap\scripts\dns-check-zone.nse
  • %PROGRAM_FILES%\Nmap\scripts\distcc-cve2004-2687.nse
  • %PROGRAM_FILES%\Nmap\scripts\db2-das-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\daytime.nse
  • %PROGRAM_FILES%\Nmap\scripts\daap-get-library.nse
  • %PROGRAM_FILES%\Nmap\scripts\dict-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\dhcp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\db2-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-networker-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-netbios-master-browser.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-ms-sql-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-pc-duo.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-pc-anywhere.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-novell-locate.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-listener.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-dns-service-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-dhcp6-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-dhcp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-igmp-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-eigrp-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-dropbox-listener.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-pim-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-wpad-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-wake-on-lan.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-versant-locate.nse
  • %PROGRAM_FILES%\Nmap\scripts\cassandra-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-xdmcp-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-wsdd-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-upnp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-rip-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-pppoe-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-ping.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-tellstick-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-sybase-asa-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\broadcast-ripng-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-phpself-xss.nse
  • %PROGRAM_FILES%\Nmap\scripts\p2p-conficker.nse
  • %PROGRAM_FILES%\Nmap\scripts\ovs-agent-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\oracle-sid-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\pgsql-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\pcanywhere-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\path-mtu.nse
  • %PROGRAM_FILES%\Nmap\scripts\oracle-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\openlookup-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\omp2-enum-targets.nse
  • %PROGRAM_FILES%\Nmap\scripts\omp2-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\oracle-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\oracle-brute-stealth.nse
  • %PROGRAM_FILES%\Nmap\scripts\openvas-otp-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\pjl-ready-message.nse
  • %PROGRAM_FILES%\Nmap\scripts\rdp-vuln-ms12-020.nse
  • %PROGRAM_FILES%\Nmap\scripts\rdp-enum-encryption.nse
  • %PROGRAM_FILES%\Nmap\scripts\quake3-master-getservers.nse
  • %PROGRAM_FILES%\Nmap\scripts\redis-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\redis-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\realvnc-auth-bypass.nse
  • %PROGRAM_FILES%\Nmap\scripts\quake3-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\pptp-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\pop3-capabilities.nse
  • %PROGRAM_FILES%\Nmap\scripts\pop3-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\quake1-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\qscan.nse
  • %PROGRAM_FILES%\Nmap\scripts\qconn-exec.nse
  • %PROGRAM_FILES%\Nmap\scripts\ncp-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\nbstat.nse
  • %PROGRAM_FILES%\Nmap\scripts\nat-pmp-mapport.nse
  • %PROGRAM_FILES%\Nmap\scripts\ndmp-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\ndmp-fs-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ncp-serverinfo.nse
  • %PROGRAM_FILES%\Nmap\scripts\nat-pmp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-query.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-vuln-cve2012-2122.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-variables.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\nessus-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\nping-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\nfs-statfs.nse
  • %PROGRAM_FILES%\Nmap\scripts\nfs-showmount.nse
  • %PROGRAM_FILES%\Nmap\scripts\ntp-monlist.nse
  • %PROGRAM_FILES%\Nmap\scripts\ntp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\nrpe-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\nfs-ls.nse
  • %PROGRAM_FILES%\Nmap\scripts\netbus-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\netbus-auth-bypass.nse
  • %PROGRAM_FILES%\Nmap\scripts\nessus-xmlrpc-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\nexpose-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\netbus-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\netbus-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\resolveall.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-psexec.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-print-text.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-os-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-system-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-server-stats.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-security-mode.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-mbenum.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-enum-shares.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-enum-sessions.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-enum-processes.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-ls.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-flood.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-vuln-ms10-054.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-vuln-cve2011-1764.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-vuln-cve2011-1720.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-vuln-cve2010-4344.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-hh3c-logins.nse
  • %PROGRAM_FILES%\Nmap\scripts\snmp-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\sniffer-detect.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-strangeport.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\smbv2-enabled.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-vuln-ms10-061.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-open-relay.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\smtp-commands.nse
  • %PROGRAM_FILES%\Nmap\scripts\rpcap-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\rpcap-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\rpc-grind.nse
  • %PROGRAM_FILES%\Nmap\scripts\rsync-list-modules.nse
  • %PROGRAM_FILES%\Nmap\scripts\rsync-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\rpcinfo.nse
  • %PROGRAM_FILES%\Nmap\scripts\rmi-vuln-classloader.nse
  • %PROGRAM_FILES%\Nmap\scripts\rfc868-time.nse
  • %PROGRAM_FILES%\Nmap\scripts\rexec-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\reverse-index.nse
  • %PROGRAM_FILES%\Nmap\scripts\rmi-dumpregistry.nse
  • %PROGRAM_FILES%\Nmap\scripts\rlogin-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\riak-http-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\rtsp-methods.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\skypev2-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\sip-methods.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-enum-groups.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-enum-domains.nse
  • %PROGRAM_FILES%\Nmap\scripts\smb-check-vulns.nse
  • %PROGRAM_FILES%\Nmap\scripts\sip-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\script.db
  • %PROGRAM_FILES%\Nmap\scripts\samba-vuln-cve-2012-1182.nse
  • %PROGRAM_FILES%\Nmap\scripts\rtsp-url-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\sip-call-spoof.nse
  • %PROGRAM_FILES%\Nmap\scripts\sip-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\servicetags.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-wordpress-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-wordpress-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-waf-fingerprint.nse
  • %PROGRAM_FILES%\Nmap\scripts\iax2-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-xssed.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-wordpress-plugins.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-waf-detect.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2011-3368.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2011-3192.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2010-2861.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-zimbra-lfi.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2013-0156.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2012-1823.nse
  • %PROGRAM_FILES%\Nmap\scripts\iax2-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\ip-geolocation-geoplugin.nse
  • %PROGRAM_FILES%\Nmap\scripts\ip-geolocation-geobytes.nse
  • %PROGRAM_FILES%\Nmap\scripts\ip-forwarding.nse
  • %PROGRAM_FILES%\Nmap\scripts\ipidseq.nse
  • %PROGRAM_FILES%\Nmap\scripts\ip-geolocation-maxmind.nse
  • %PROGRAM_FILES%\Nmap\scripts\ip-geolocation-ipinfodb.nse
  • %PROGRAM_FILES%\Nmap\scripts\informix-tables.nse
  • %PROGRAM_FILES%\Nmap\scripts\imap-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\ike-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\icap-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\informix-query.nse
  • %PROGRAM_FILES%\Nmap\scripts\informix-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\imap-capabilities.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-sitemap-generator.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-server-header.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-robtex-shared-ns.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-sql-injection.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-slowloris.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-slowloris-check.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-robtex-reverse-ip.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-qnap-nas-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-put.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-proxy-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-robots.txt.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-rfi-spider.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-referer-checker.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-stored-xss.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vlcstreamer-ls.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-virustotal.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vhosts.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2010-0738.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vuln-cve2009-3960.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-vmware-path-vuln.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-userdir-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-trace.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-tplink-dir-traversal.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-title.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-useragent-tester.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-unsafe-output-escaping.nse
  • %PROGRAM_FILES%\Nmap\scripts\http-traceroute.nse
  • %PROGRAM_FILES%\Nmap\scripts\ipv6-node-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\mrinfo.nse
  • %PROGRAM_FILES%\Nmap\scripts\mongodb-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-dump-hashes.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-dac.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-config.nse
  • %PROGRAM_FILES%\Nmap\scripts\mongodb-databases.nse
  • %PROGRAM_FILES%\Nmap\scripts\mmouse-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\metasploit-xmlrpc-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\metasploit-msgrpc-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\mongodb-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\modbus-discover.nse
  • %PROGRAM_FILES%\Nmap\scripts\mmouse-exec.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-empty-password.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-audit.nse
  • %PROGRAM_FILES%\Nmap\scripts\murmur-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-empty-password.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-dump-hashes.nse
  • %PROGRAM_FILES%\Nmap\scripts\mysql-databases.nse
  • %PROGRAM_FILES%\Nmap\scripts\mtrace.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-query.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-hasdbaccess.nse
  • %PROGRAM_FILES%\Nmap\scripts\msrpc-enum.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-xp-cmdshell.nse
  • %PROGRAM_FILES%\Nmap\scripts\ms-sql-tables.nse
  • %PROGRAM_FILES%\Nmap\scripts\jdwp-exec.nse
  • %PROGRAM_FILES%\Nmap\scripts\isns-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\iscsi-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\jdwp-version.nse
  • %PROGRAM_FILES%\Nmap\scripts\jdwp-inject.nse
  • %PROGRAM_FILES%\Nmap\scripts\jdwp-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\iscsi-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\irc-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\irc-botnet-channels.nse
  • %PROGRAM_FILES%\Nmap\scripts\ipv6-ra-flood.nse
  • %PROGRAM_FILES%\Nmap\scripts\irc-unrealircd-backdoor.nse
  • %PROGRAM_FILES%\Nmap\scripts\irc-sasl-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\irc-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\krb5-enum-users.nse
  • %PROGRAM_FILES%\Nmap\scripts\membase-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\mcafee-epo-agent.nse
  • %PROGRAM_FILES%\Nmap\scripts\maxdb-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\metasploit-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\memcached-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\membase-http-info.nse
  • %PROGRAM_FILES%\Nmap\scripts\lltd-discovery.nse
  • %PROGRAM_FILES%\Nmap\scripts\ldap-rootdse.nse
  • %PROGRAM_FILES%\Nmap\scripts\ldap-novell-getpass.nse
  • %PROGRAM_FILES%\Nmap\scripts\ldap-brute.nse
  • %PROGRAM_FILES%\Nmap\scripts\llmnr-resolve.nse
  • %PROGRAM_FILES%\Nmap\scripts\lexmark-config.nse
  • %PROGRAM_FILES%\Nmap\scripts\ldap-search.nse
Deletes the following files:
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.2052.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1033.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1028.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.3082.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1031.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1040.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1036.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1049.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1042.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1041.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.exe
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1033.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\vc_red.msi
  • %PROGRAM_FILES%\Nmap\vcredist2008_x86.exe
  • C:\7f2658486a6dd47d6fdc043b07883dd1\vc_red.cab
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1040.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1036.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1049.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1042.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.res.1041.dll
  • %PROGRAM_FILES%\Nmap\winpcap-nmap-4.13.exe
  • %TEMP%\nsk7.tmp\System.dll
  • %WINDIR%\Installer\MSIA.tmp
  • C:\Config.Msi\376e9.rbs
  • %WINDIR%\Installer\MSIB.tmp
  • %TEMP%\nsk7.tmp\ns9.tmp
  • %TEMP%\nsk7.tmp\ns8.tmp
  • %TEMP%\nsk7.tmp\final.ini
  • %TEMP%\nsk7.tmp\options.ini
  • %TEMP%\nsk7.tmp\nsExec.dll
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.2052.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\globdata.ini
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1028.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.3082.txt
  • C:\7f2658486a6dd47d6fdc043b07883dd1\eula.1031.txt
  • %WINDIR%\Installer\376e8.ipi
  • %WINDIR%\Installer\376e6.msi
  • %TEMP%\VWLE.tmp
  • C:\7f2658486a6dd47d6fdc043b07883dd1\install.ini
  • C:\7f2658486a6dd47d6fdc043b07883dd1\vcredist.bmp
Network activity:
Connects to:
  • '20#.#6.232.182':80
  • 'wp#d':80
TCP:
HTTP GET requests:
  • 20#.#6.232.182/pki/crl/products/CSPCA.crl
  • wp#d/wpad.dat
UDP:
  • DNS ASK crl.microsoft.com
  • DNS ASK wp#d
Miscellaneous:
Searches for the following windows:
  • ClassName: 'RegEdit_RegEdit' WindowName: ''
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play