Adware.Win32.Adposhel.AB

アドウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。 アドウェアは、ユーザの手動インストールにより、コンピュータに侵入します。

侵入方法

アドウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

アドウェアは、ユーザの手動インストールにより、コンピュータに侵入します。

インストール

アドウェアは、以下のフォルダを追加します。

• %Application Data%\DAEMON Tools Lite
• %Program Files%\DAEMON Tools Lite
• %Program Files%\DAEMON Tools Lite\Lang
• %Program Files%\DAEMON Tools Toolbar
• %Program Files%\DAEMON Tools Toolbar\Resources
• %Start Menu%\Programs\DAEMON Tools Lite
• %User Temp%\nsi{numbers}.tmp
• %User Temp%\nsi{numbers}.tmp\Lang

(註：%Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP（32-bit）,Vista（32-bit）、7（32-bit）、8（32-bit）の場合、通常 "C:\Program Files"です。また、Windows XP（64-bit）、Vista（64-bit）、7（64-bit）、8（64-bit）の場合、通常 "C:\Program Files（x86）" です。. %Start Menu%フォルダは、現在ログオンしているユーザのスタートメニューフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Windows\Start Menu" または "C:\Documents and Settings\＜ユーザ名＞\Start Menu" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming\Microsoft\Windows\Start Menu" です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

アドウェアは、以下のファイルを作成します。

• %Application Data%\DAEMON Tools Lite\license.dat
• %Desktop%\DAEMON Tools Lite.lnk
• %Program Files%\DAEMON Tools Lite\_DTLite.xml
• %Program Files%\DAEMON Tools Lite\_DTLite.xml.new
• %Program Files%\DAEMON Tools Lite\DAEMON Tools Toolbar.exe
• %Program Files%\DAEMON Tools Lite\DT.gadget
• %Program Files%\DAEMON Tools Lite\DTCommonRes.dll
• %Program Files%\DAEMON Tools Lite\DTGadget32.dll
• %Program Files%\DAEMON Tools Lite\DTGadget64.dll
• %Program Files%\DAEMON Tools Lite\DTHelper.exe
• %Program Files%\DAEMON Tools Lite\DTLite.exe
• %Program Files%\DAEMON Tools Lite\DTShellHlp.exe
• %Program Files%\DAEMON Tools Lite\dtsoftbus01.cat
• %Program Files%\DAEMON Tools Lite\dtsoftbus01.inf
• %Program Files%\DAEMON Tools Lite\dtsoftbus01.sys
• %Program Files%\DAEMON Tools Lite\Engine.dll
• %Program Files%\DAEMON Tools Lite\imgengine.dll
• %Program Files%\DAEMON Tools Lite\InstallGadget.exe
• %Program Files%\DAEMON Tools Lite\Lang\AFK.dll
• %Program Files%\DAEMON Tools Lite\Lang\ARA.dll
• %Program Files%\DAEMON Tools Lite\Lang\BGR.dll
• %Program Files%\DAEMON Tools Lite\Lang\BIH.dll
• %Program Files%\DAEMON Tools Lite\Lang\CHS.dll
• %Program Files%\DAEMON Tools Lite\Lang\CHT.dll
• %Program Files%\DAEMON Tools Lite\Lang\CSY.dll
• %Program Files%\DAEMON Tools Lite\Lang\DAN.dll
• %Program Files%\DAEMON Tools Lite\Lang\DEU.dll
• %Program Files%\DAEMON Tools Lite\Lang\ELL.dll
• %Program Files%\DAEMON Tools Lite\Lang\ENU.dll
• %Program Files%\DAEMON Tools Lite\Lang\ESN.dll
• %Program Files%\DAEMON Tools Lite\Lang\FIN.dll
• %Program Files%\DAEMON Tools Lite\Lang\FRA.dll
• %Program Files%\DAEMON Tools Lite\Lang\HEB.dll
• %Program Files%\DAEMON Tools Lite\Lang\HRV.dll
• %Program Files%\DAEMON Tools Lite\Lang\HUN.dll
• %Program Files%\DAEMON Tools Lite\Lang\HYE.dll
• %Program Files%\DAEMON Tools Lite\Lang\IND.dll
• %Program Files%\DAEMON Tools Lite\Lang\ITA.dll
• %Program Files%\DAEMON Tools Lite\Lang\JPN.dll
• %Program Files%\DAEMON Tools Lite\Lang\KAT.dll
• %Program Files%\DAEMON Tools Lite\Lang\KOR.dll
• %Program Files%\DAEMON Tools Lite\Lang\LTH.dll
• %Program Files%\DAEMON Tools Lite\Lang\LVI.dll
• %Program Files%\DAEMON Tools Lite\Lang\NLB.dll
• %Program Files%\DAEMON Tools Lite\Lang\NOR.dll
• %Program Files%\DAEMON Tools Lite\Lang\PLK.dll
• %Program Files%\DAEMON Tools Lite\Lang\PTB.dll
• %Program Files%\DAEMON Tools Lite\Lang\ROM.dll
• %Program Files%\DAEMON Tools Lite\Lang\RUS.dll
• %Program Files%\DAEMON Tools Lite\Lang\SKY.dll
• %Program Files%\DAEMON Tools Lite\Lang\SLV.dll
• %Program Files%\DAEMON Tools Lite\Lang\SRL.dll
• %Program Files%\DAEMON Tools Lite\Lang\SVE.dll
• %Program Files%\DAEMON Tools Lite\Lang\TRK.dll
• %Program Files%\DAEMON Tools Lite\Lang\UKR.dll
• %Program Files%\DAEMON Tools Lite\SPTDinst-x64.exe
• %Program Files%\DAEMON Tools Lite\SPTDinst-x86.exe
• %Program Files%\DAEMON Tools Lite\uninst.exe
• %Program Files%\DAEMON Tools Toolbar\DTToolbar.dll
• %Program Files%\DAEMON Tools Toolbar\Resources\about.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\AboutWindow.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\accept.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ARA.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\as.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\as.png
• %Program Files%\DAEMON Tools Toolbar\Resources\astro.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_audio.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_buy.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_download.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_feedback.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_forum.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_home.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astro_lite.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astroburn_site.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\astroLite_16.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\az.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\AZE.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\b1.png
• %Program Files%\DAEMON Tools Toolbar\Resources\burn_files.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\burn_image.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\burn_imgs.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\BurnImage.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\buy.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\cal.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\CHS.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\CHT.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\Config.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\d.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\d2.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\daemon_search.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\daemon_search_site.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\DEU.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\download.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ds.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dsearch.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_about.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_buy.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_download.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_faq.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_feedback.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_forum.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_line.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_lite.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_manual.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt_pro.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dt-home.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\DTPro.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dtt16.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\dtt32.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\Dwnl.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\emulation.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ENG.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\faq.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\favicon.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\fb.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\features.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\feedback.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\forum.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\FRA.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\GameCentrix.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GameCentrixCristals.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GameCentrixDownload.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GameCentrixPlayOnline.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GameCentrixTop.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GameS.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\games_search.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\games_search_SA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GameSA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\gct16.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\gd.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\genre.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\globe.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\GrabImage.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\hb.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\hb.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\help.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\hide.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\home.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\image_search.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\image_search_SA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ImageS.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ImageSA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ip.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\ITA.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\JPN.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\KOR.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\lang.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\lingvo.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\m.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\mail.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mail_disable.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mail_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mail_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mail_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mailc.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mailc_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mailc_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\mailc_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\manual.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\map.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\MenuTr.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\mount.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\mount_n_drive.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\next.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\next_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\next_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\next_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\none.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\none_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\op.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\play.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\play.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\play_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\play_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\play_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\pragma.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\prev.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\prev_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\prev_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\prev_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\prod.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\Radio.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioBg.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioBg.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDown.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDown.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioE.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioG.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioL.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioLM.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioM.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioN.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioR.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioR.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioRM.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioRU.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\RadioW.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\rbcheck.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\rbtxt.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\refresh.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\refresh_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\refresh_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\refresh_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\Rss.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\Rss1.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RssA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RssA1.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\rssClose.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\rssL.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\rssOpen.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RssRefresh.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\RUS.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\s2.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\show.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\size.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\size_lr.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\size_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\size_rl.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\skins.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\soft24.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\soft24_SA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\spt.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\StartPage.jpg
• %Program Files%\DAEMON Tools Toolbar\Resources\stop.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\stop.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\stop_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\stop_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\stop_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\style.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\SupportRequest.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\timer.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\TitleIcon.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\toolbar.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\trans.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\Trash.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\Trash_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\Trash_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\Trash_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\u.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\UKR.xml
• %Program Files%\DAEMON Tools Toolbar\Resources\unmount-all.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\vol.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_back.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_dott.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_mute.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\vol_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtClose.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtText.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
• %Program Files%\DAEMON Tools Toolbar\Resources\web_resources.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\web_search.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\web_search_SA.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\WebS.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\WebSa.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi0.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi1.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi10.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi11.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi12.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi13.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi14.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi2.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi3.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi4.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi5.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi6.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi7.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi8.ico
• %Program Files%\DAEMON Tools Toolbar\Resources\wi9.ico
• %Program Files%\DAEMON Tools Toolbar\uninst.exe
• %Start Menu%\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk
• %Start Menu%\Programs\DAEMON Tools Lite\SPTD Setup.lnk
• %Start Menu%\Programs\DAEMON Tools Lite\Uninstall.lnk
• %User Temp%\Cab{random}.tmp
• %User Temp%\nsd{numbers}.tmp
• %User Temp%\nsi{numbers}.tmp\dtsetup.ini
• %User Temp%\nsi{numbers}.tmp\DTSetupHelper.exe
• %User Temp%\nsi{numbers}.tmp\InstallOptions.dll
• %User Temp%\nsi{numbers}.tmp\ioSpecial.ini
• %User Temp%\nsi{numbers}.tmp\Lang\AFK.dll
• %User Temp%\nsi{numbers}.tmp\Lang\ARA.dll
• %User Temp%\nsi{numbers}.tmp\Lang\BGR.dll
• %User Temp%\nsi{numbers}.tmp\Lang\BIH.dll
• %User Temp%\nsi{numbers}.tmp\Lang\CHS.dll
• %User Temp%\nsi{numbers}.tmp\Lang\CHT.dll
• %User Temp%\nsi{numbers}.tmp\Lang\CSY.dll
• %User Temp%\nsi{numbers}.tmp\Lang\DAN.dll
• %User Temp%\nsi{numbers}.tmp\Lang\DEU.dll
• %User Temp%\nsi{numbers}.tmp\Lang\ELL.dll
• %User Temp%\nsi{numbers}.tmp\Lang\ENU.dll
• %User Temp%\nsi{numbers}.tmp\Lang\ESN.dll
• %User Temp%\nsi{numbers}.tmp\Lang\FIN.dll
• %User Temp%\nsi{numbers}.tmp\Lang\FRA.dll
• %User Temp%\nsi{numbers}.tmp\Lang\HEB.dll
• %User Temp%\nsi{numbers}.tmp\Lang\HRV.dll
• %User Temp%\nsi{numbers}.tmp\Lang\HUN.dll
• %User Temp%\nsi{numbers}.tmp\Lang\HYE.dll
• %User Temp%\nsi{numbers}.tmp\Lang\IND.dll
• %User Temp%\nsi{numbers}.tmp\Lang\ITA.dll
• %User Temp%\nsi{numbers}.tmp\Lang\JPN.dll
• %User Temp%\nsi{numbers}.tmp\Lang\KAT.dll
• %User Temp%\nsi{numbers}.tmp\Lang\KOR.dll
• %User Temp%\nsi{numbers}.tmp\Lang\LTH.dll
• %User Temp%\nsi{numbers}.tmp\Lang\LVI.dll
• %User Temp%\nsi{numbers}.tmp\Lang\NLB.dll
• %User Temp%\nsi{numbers}.tmp\Lang\NOR.dll
• %User Temp%\nsi{numbers}.tmp\Lang\PLK.dll
• %User Temp%\nsi{numbers}.tmp\Lang\PTB.dll
• %User Temp%\nsi{numbers}.tmp\Lang\ROM.dll
• %User Temp%\nsi{numbers}.tmp\Lang\RUS.dll
• %User Temp%\nsi{numbers}.tmp\Lang\SKY.dll
• %User Temp%\nsi{numbers}.tmp\Lang\SLV.dll
• %User Temp%\nsi{numbers}.tmp\Lang\SRL.dll
• %User Temp%\nsi{numbers}.tmp\Lang\SVE.dll
• %User Temp%\nsi{numbers}.tmp\Lang\TRK.dll
• %User Temp%\nsi{numbers}.tmp\Lang\UKR.dll
• %User Temp%\nsi{numbers}.tmp\modern-header.bmp
• %User Temp%\nsi{numbers}.tmp\modern-wizard.bmp
• %User Temp%\nsi{numbers}.tmp\RegPageType.ini
• %User Temp%\nsi{numbers}.tmp\SetupHelper.exe
• %User Temp%\nsi{numbers}.tmp\setuphlp.dll
• %User Temp%\nsi{numbers}.tmp\System.dll
• %User Temp%\nsi{numbers}.tmp\WaitPage.ini
• %User Temp%\nss{numbers}.tmp\HomePage.ini
• %User Temp%\nss{numbers}.tmp\search.xml
• %User Temp%\nss{numbers}.tmp\search.xml.new
• %User Temp%\nss{numbers}.tmp\setuphlp.dll
• %User Temp%\nss{numbers}.tmp\StartPage.bmp
• %User Temp%\nss{numbers}.tmp\UserInfo.dll
• %Windows%\inf\oem14.inf
• %Windows%\inf\oem14.PNF
• %Windows%\system32\drivers\SET20.tmp

(註：%Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %Desktop%フォルダは、現在ログオンしているユーザのデスクトップです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Desktop" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\Desktop" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP（32-bit）,Vista（32-bit）、7（32-bit）、8（32-bit）の場合、通常 "C:\Program Files"です。また、Windows XP（64-bit）、Vista（64-bit）、7（64-bit）、8（64-bit）の場合、通常 "C:\Program Files（x86）" です。. %Start Menu%フォルダは、現在ログオンしているユーザのスタートメニューフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Windows\Start Menu" または "C:\Documents and Settings\＜ユーザ名＞\Start Menu" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming\Microsoft\Windows\Start Menu" です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.)

他のシステム変更

アドウェアは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\DT Soft

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro\Config

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro\Config\ConnectionSettings

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro\View

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
FileExts\.mdf

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
FileExts\.mds

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
FileExts\.mdx

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mdf

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mds

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mdx

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite\shell

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite\shell\open

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite\shell\open\
command

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj.1\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\Config

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\Data

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\FileTypesSave

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\FileTypesSave\.mdf

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\FileTypesSave\.mds

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\FileTypesSave\.mdx

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\App Paths\
DTLite.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{9D3039DD-CCA5-4B4D-B33D-E2DDC8A8C52E}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{9D3039DD-CCA5-4B4D-B33D-E2DDC8A8C52E}\
Properties

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\CriticalDeviceDatabase\root#dtsoftbus01

アドウェアは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro\View
Language = 1033

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro\Config
Autostart = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
DAEMON Tools Lite = %Program Files%\DAEMON Tools Lite\DTLite.exe -autorun

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite\DefaultIcon
(Default) = %Program Files%\DAEMON Tools Lite\DTLite.exe,0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DAEMON.Tools.Lite\shell\open\
command
(Default) = %Program Files%\DAEMON Tools Lite\DTLite.exe -shellmount "%1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mds
(Default) = DAEMON.Tools.Lite

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mdf
(Default) = DAEMON.Tools.Lite

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mdx
(Default) = DAEMON.Tools.Lite

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite
DisplayName = DAEMON Tools Lite

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite
UninstallString = %Program Files%\DAEMON Tools Lite\uninst.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite
DisplayVersion = 4.41.3.0173

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite
URLInfoAbout = http://www.{BLOCKED}-tools.cc/

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite
Publisher = DT Soft Ltd

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Lite
DisplayIcon = %Program Files%\DAEMON Tools Lite\DTLite.exe

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro
Path = %Program Files%\DAEMON Tools Lite\

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro
Version Major = 4

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro
Version Minor = 41

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro
Version Release = 3

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro
Path = %Program Files%\DAEMON Tools Lite\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\App Paths\
DTLite.exe
Path = %Program Files%\DAEMON Tools Lite\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\App Paths\
DTLite.exe
(Default) = %Program Files%\DAEMON Tools Lite\DTLite.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
InfPath = oem14.inf

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
InfSection = DTSoftBus_Device

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
InfSectionExt = .NT

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
ProviderName = DT Soft Ltd

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
DriverDateData = {hex values}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
DriverDate = 6-17-2011

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
DriverVersion = 4.41.3.256

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
MatchingDeviceId = root\dtsoftbus01

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\GroupOrderList
SCSI Miniport = {hex values}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{4D36E97D-E325-11CE-BFC1-08002BE10318}\
0063
DriverDesc = DAEMON Tools Virtual Bus

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\CriticalDeviceDatabase\root#dtsoftbus01
Service = dtsoftbus01

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\CriticalDeviceDatabase\root#dtsoftbus01
ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\dtsoftbus01
AdapterStatus = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{9D3039DD-CCA5-4B4D-B33D-E2DDC8A8C52E}
Class = dtsoftbus01

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{9D3039DD-CCA5-4B4D-B33D-E2DDC8A8C52E}
NoDisplayClass = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{9D3039DD-CCA5-4B4D-B33D-E2DDC8A8C52E}
NoUseClass = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Class\{9D3039DD-CCA5-4B4D-B33D-E2DDC8A8C52E}\
Properties
Security = {hex values}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\dtsoftbus01
Start = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\dtsoftbus01
client = {hex values}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\dtsoftbus01\unit{0-126}
data = {hex values}

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\Config
AdapterStateDT = 1

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar
RunFromApp = ""

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar
Language = 1033

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Start Page = {BLOCKED}y.{BLOCKED}-search.com

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Toolbar
{32099AAC-C132-4136-9E9A-4E364A424E17} = DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj.1
(Default) = DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj.1\CLSID
(Default) = {32099AAC-C132-4136-9E9A-4E364A424E17}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj
(Default) = DTToolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj\CLSID
(Default) = {32099AAC-C132-4136-9E9A-4E364A424E17}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
DTToolbar.ToolBandObj\CurVer
(Default) = DTToolbar.ToolBandObj.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
(Default) = DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ProgID
(Default) = DTToolbar.ToolBandObj.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\VersionIndependentProgID
(Default) = DTToolbar.ToolBandObj

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\InprocServer32
(Default) = %Program Files%\DAEMON Tools Toolbar\DTToolbar.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\InprocServer32
ThreadingModel = Apartment

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\TypeLib
(Default) = {3E288F79-03E4-4983-A48E-0D879B51FF19}

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar
VersionIE = 1.1.8.0285

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar
Path = %Program Files%\DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar
VersionFF = 1.1.8.0285

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Toolbar
Path = %Program Files%\DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar
DisplayName = DAEMON Tools Toolbar

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar
UninstallString = %Program Files%\DAEMON Tools Toolbar\uninst.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar
DisplayIcon = %Program Files%\DAEMON Tools Toolbar\uninst.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar
DisplayVersion = 1.1.8.0285

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar
URLInfoAbout = http://www.{BLOCKED}oft.com

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DAEMON Tools Toolbar
Publisher = DT Soft Ltd

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\Data
HP = 1

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\Data
SP = 1

HKEY_LOCAL_MACHINE\SOFTWARE\DT Soft\
DAEMON Tools Pro\Data
TB = DTToolbar@1.1.8

HKEY_CURRENT_USER\Software\DT Soft\
DAEMON Tools Pro\Config
SendStatistic = 0

その他

アドウェアは、以下の不正なWebサイトにアクセスします。

• http://checkup.{BLOCKED}rnet.com/checkup.php
• http://{BLOCKED}tes.com/activate?query={value}