PUA.MSIL.ProxyVan.B

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のプロセスを追加します。

• %User Temp%\tmpB6DF.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
• "%User Temp%\is-27HG0.tmp\tmpB6DF.tmp" /SL5="$5015C,1975537,721408,%User Temp%\tmpB6DF.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
• "%System%\sc.exe" create ProxyVan2 obj= "LocalSystem" start= auto binPath= "%Program Files%\ProxyVan\Service\ProxyVan.exe "
• "%System%\sc.exe" create ProxyVanUpdater obj= "LocalSystem" start= auto binPath= "%Program Files%\ProxyVan\Updater\ProxyVanUpdater.exe "
• "%System%\sc.exe" start ProxyVan2
• "%System%\sc.exe" start ProxyVanUpdater
• %Program Files%\ProxyVan\Service\ProxyVan.exe
• %Program Files%\ProxyVan\Updater\ProxyVanUpdater.exe
• %Windows%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
• %System%\svchost.exe -k LocalServiceAndNoImpersonation
• %Windows%\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
• %System%\sppsvc.exe
• "%System Root%\Program Files\Windows Media Player\wmpnetwk.exe"
• %System%\svchost.exe -k netsvcs

(註：%User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

プログラムは、以下のフォルダを作成します。

• %Program Files%\ProxyVan
• %Program Files%\ProxyVan\Service
• %Program Files%\ProxyVan\Updater\ru
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\ProxyVan
• %Program Files%\ProxyVan\Service\ru
• %Program Files%\ProxyVan\Updater
• %User Temp%\is-HH5J7.tmp\_isetup
• %Program Files%\ProxyVan\Tray
• %Windows%\ServiceProfiles\NetworkService\AppData\Local\Microsoft

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.)

自動実行方法

プログラムは、自身をシステムサービスとして登録し、Windows起動時に自動実行されるよう以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\ProxyVan2
ImagePath = "%Program Files%\ProxyVan\Service\ProxyVan.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\ProxyVanUpdater
ImagePath = "%Program Files%\ProxyVan\Updater\ProxyVanUpdater.exe"

他のシステム変更

プログラムは、以下のファイルを改変します。

• %Windows%\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
• %Windows%\Tasks\SCHEDLGU.TXT
• %Windows%\Prefetch\DLLHOST.EXE-5E46FA0D.pf
• %Windows%\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf

(註：%Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.)

プログラムは、以下のファイルを削除します。

• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\ProxyVan\Uninstall ProxyVan.url
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\ProxyVan\Uninstall ProxyVan.pif

(註：%All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。)

プログラムは、以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
Inno Setup: Setup Version = "6.0.3 (u)"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
Inno Setup: App Path = "%Program Files%\ProxyVan"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
InstallLocation = "%Program Files%\ProxyVan"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
Inno Setup: Icon Group = "ProxyVan"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
Inno Setup: User = "{username}"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
Inno Setup: Language = "default"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
DisplayName = "ProxyVan"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
DisplayIcon = "%Program Files%\ProxyVan\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
UninstallString = "%Program Files%\ProxyVan\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
QuietUninstallString = "%Program Files%\ProxyVan\unins000.exe /SILENT"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
DisplayVersion = "2.12.0.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
NoModify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
NoRepair = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
InstallDate = "20191023"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
MajorVersion = "2"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
MinorVersion = "12"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
VersionMajor = "2"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
VersionMinor = "12"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Windows\CurrentVersion\
Uninstall\{89A18812-33DA-47C9-857B-5CD96BF0AF6E}_is1
EstimatedSize = "15327"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\ProxyVanUpdater
Type = "16"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\IKEEXT
Type = "16"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
FTH
CheckPointTime = "220272095"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\ThemeManager
ServerChangeNumber = "61"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\LanmanServer\Shares
Users = "\x00\x00\x00\x00\x00\x00\x00"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
ThemeActive = "1"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
LoadedBefore = "1"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
LastUserLangID = "1033"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
LastLoadedDPI = "96"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
DllName = "%SystemRoot%\resources\Themes\Aero\Aero.msstyles"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
ColorName = "NormalColor"

HKEY_USERS\S-1-5-21-2407829820-1079796033-203259571-500\Software\
Microsoft\Windows\CurrentVersion\
ThemeManager
SizeName = "NormalSize"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\ProxyVan2
DisplayName = ""

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\ProxyVan2
Start = "SERVICE_AUTO_START"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\ProxyVanUpdater
DisplayName = ""

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\ProxyVanUpdater
Start = "SERVICE_AUTO_START"

プログラムは、以下のレジストリ値を変更します。

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Browser
Type = "16"

(註：変更前の上記レジストリ値は、「20」となります。)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\LanmanServer\Parameters
Guid = "\x1d\xd2\x07\x0e\x13\xc6\xa4G\x9cB\x9bE\x93\x86\xebQ"

(註：変更前の上記レジストリ値は、「{random values}」となります。)

プログラムは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\LanmanServer\Parameters\
Guid

作成活動

プログラムは、以下のファイルを作成します。

• %Program Files%\ProxyVan\Service\is-1EQKR.tmp
• %Program Files%\ProxyVan\Service\is-J7KSQ.tmp
• %Program Files%\ProxyVan\Updater\System.Net.Sockets.dll
• %Program Files%\ProxyVan\Service\is-T5K70.tmp
• %Program Files%\ProxyVan\Service\System.IO.FileSystem.DriveInfo.dll
• %Program Files%\ProxyVan\Service\is-KG60S.tmp
• %Program Files%\ProxyVan\Service\is-00HHH.tmp
• %Program Files%\ProxyVan\Service\CommandLine.dll
• %Program Files%\ProxyVan\Updater\System.Memory.dll
• %Program Files%\ProxyVan\Service\ProxyVan.exe.config
• %Program Files%\ProxyVan\Service\System.Threading.Tasks.dll
• %Program Files%\ProxyVan\Updater\is-NVK1K.tmp
• %Program Files%\ProxyVan\Tray\is-V37DL.tmp
• %Program Files%\ProxyVan\Updater\is-DEHSF.tmp
• %Program Files%\ProxyVan\Updater\System.Xml.XPath.dll
• %Windows%\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
• %Program Files%\ProxyVan\Service\System.Reflection.Extensions.dll
• %Program Files%\ProxyVan\Service\System.Security.Cryptography.Primitives.dll
• %Program Files%\ProxyVan\Updater\is-O8124.tmp
• %Program Files%\ProxyVan\Updater\System.IO.FileSystem.Primitives.dll
• %Program Files%\ProxyVan\Service\is-6KNP3.tmp
• %Program Files%\ProxyVan\Service\is-JK3A8.tmp
• %Program Files%\ProxyVan\Service\System.IO.Pipes.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.Console.dll
• %Program Files%\ProxyVan\Service\System.Collections.dll
• %Program Files%\ProxyVan\Updater\System.Resources.Reader.dll
• %Program Files%\ProxyVan\Service\is-5IFQ1.tmp
• %Program Files%\ProxyVan\Updater\is-PV1EB.tmp
• %Program Files%\ProxyVan\Service\Serilog.dll
• %Program Files%\ProxyVan\Service\is-I3C2D.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Primitives.dll
• %Program Files%\ProxyVan\Updater\System.IO.Compression.dll
• %Program Files%\ProxyVan\Updater\System.Threading.Channels.dll
• %Program Files%\ProxyVan\Updater\is-JHRK8.tmp
• %Program Files%\ProxyVan\Service\is-QJN71.tmp
• %Program Files%\ProxyVan\Service\is-LVK4K.tmp
• %Program Files%\ProxyVan\Service\System.Diagnostics.TraceSource.dll
• %Program Files%\ProxyVan\Updater\System.Threading.Timer.dll
• %Program Files%\ProxyVan\Service\is-QLKE4.tmp
• %Program Files%\ProxyVan\Updater\Serilog.Extensions.Logging.dll
• %Program Files%\ProxyVan\Service\is-IM978.tmp
• %Program Files%\ProxyVan\Service\is-789E2.tmp
• %Program Files%\ProxyVan\Service\is-0KMMF.tmp
• %Program Files%\ProxyVan\Service\is-UODI7.tmp
• %Program Files%\ProxyVan\Service\is-3HQU8.tmp
• %Program Files%\ProxyVan\Updater\System.Net.Primitives.dll
• %Program Files%\ProxyVan\Service\is-D0H2G.tmp
• %Program Files%\ProxyVan\Updater\is-1791O.tmp
• %Program Files%\ProxyVan\Service\System.Resources.ResourceManager.dll
• %Program Files%\ProxyVan\Tray\is-RFCDB.tmp
• %Program Files%\ProxyVan\Service\System.IO.UnmanagedMemoryStream.dll
• %Program Files%\ProxyVan\Service\System.Text.Encodings.Web.dll
• %Program Files%\ProxyVan\Service\is-VC9KI.tmp
• %Program Files%\ProxyVan\Service\System.Xml.XPath.XDocument.dll
• %Program Files%\ProxyVan\Service\is-DQ50H.tmp
• %Program Files%\ProxyVan\Service\is-JFLKK.tmp
• %Program Files%\ProxyVan\Updater\is-88IC3.tmp
• %Program Files%\ProxyVan\Service\is-8GLOB.tmp
• %Program Files%\ProxyVan\Updater\System.Threading.Tasks.Parallel.dll
• %Program Files%\ProxyVan\Updater\is-BH3P9.tmp
• %Program Files%\ProxyVan\Updater\System.Buffers.dll
• %Program Files%\ProxyVan\Service\netstandard.dll
• %Program Files%\ProxyVan\Tray\ProxyVan.Common.pdb
• %Program Files%\ProxyVan\Updater\is-S0B91.tmp
• %Program Files%\ProxyVan\Service\System.Runtime.InteropServices.RuntimeInformation.dll
• %Program Files%\ProxyVan\Service\System.Text.Encodings.Web.xml
• %Program Files%\ProxyVan\Updater\System.Net.NetworkInformation.dll
• %Program Files%\ProxyVan\Updater\is-BCVKL.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Primitives.xml
• %Program Files%\ProxyVan\Service\System.IO.Compression.dll
• %Program Files%\ProxyVan\Service\is-O1M4M.tmp
• %Program Files%\ProxyVan\Updater\is-SB15N.tmp
• %Program Files%\ProxyVan\Updater\is-ND5G8.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Logging.Abstractions.dll
• %Program Files%\ProxyVan\Updater\ru\is-O91VU.tmp
• %Program Files%\ProxyVan\Service\System.Diagnostics.Tools.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Options.ConfigurationExtensions.dll
• %Program Files%\ProxyVan\Service\is-PLQUB.tmp
• %Program Files%\ProxyVan\Service\System.Memory.xml
• %Program Files%\ProxyVan\Service\is-SDG0S.tmp
• %Program Files%\ProxyVan\Updater\is-69SGG.tmp
• %Program Files%\ProxyVan\Updater\System.Collections.Specialized.dll
• %Program Files%\ProxyVan\Updater\is-759L1.tmp
• %Program Files%\ProxyVan\Service\System.Threading.Tasks.Extensions.dll
• %Program Files%\ProxyVan\Updater\is-CPHS6.tmp
• %Program Files%\ProxyVan\Service\System.Diagnostics.TextWriterTraceListener.dll
• %Program Files%\ProxyVan\Service\is-6CH7E.tmp
• %Program Files%\ProxyVan\Updater\is-R2AEF.tmp
• %Program Files%\ProxyVan\Updater\System.Threading.Thread.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Options.dll
• %Program Files%\ProxyVan\Updater\System.Text.RegularExpressions.dll
• %Program Files%\ProxyVan\Service\System.Diagnostics.StackTrace.dll
• %Program Files%\ProxyVan\Updater\System.ObjectModel.dll
• %Program Files%\ProxyVan\Service\is-RF6CU.tmp
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\ProxyVan\Uninstall ProxyVan.lnk
• %Program Files%\ProxyVan\Service\ru\DanilovSoft.vRPC.resources.dll
• %Program Files%\ProxyVan\Updater\System.Globalization.Calendars.dll
• %Program Files%\ProxyVan\Tray\Microsoft.Bcl.AsyncInterfaces.dll
• %Program Files%\ProxyVan\Updater\is-M40EJ.tmp
• %Program Files%\ProxyVan\Service\is-39PTQ.tmp
• %Program Files%\ProxyVan\Service\System.Xml.ReaderWriter.dll
• %Program Files%\ProxyVan\Updater\Serilog.dll
• %Program Files%\ProxyVan\Updater\is-DVKLR.tmp
• %Program Files%\ProxyVan\Updater\is-K75SN.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.DependencyInjection.dll
• %Program Files%\ProxyVan\Service\is-KPREL.tmp
• %Program Files%\ProxyVan\Service\Serilog.Sinks.Console.dll
• %Program Files%\ProxyVan\Service\System.Security.Cryptography.Csp.dll
• %Program Files%\ProxyVan\Updater\System.Runtime.InteropServices.dll
• %Program Files%\ProxyVan\Service\is-ROS9T.tmp
• %Program Files%\ProxyVan\Updater\is-683I7.tmp
• %Program Files%\ProxyVan\Updater\is-93GMA.tmp
• %Program Files%\ProxyVan\Updater\is-L8RI9.tmp
• %Program Files%\ProxyVan\Service\System.Net.WebSockets.Client.dll
• %Program Files%\ProxyVan\Service\System.IO.MemoryMappedFiles.dll
• %Program Files%\ProxyVan\Service\is-BM3DS.tmp
• %Program Files%\ProxyVan\Updater\Serilog.Sinks.Console.dll
• %Program Files%\ProxyVan\Service\System.Globalization.dll
• %Program Files%\ProxyVan\Service\is-QQHQH.tmp
• %Program Files%\ProxyVan\Service\is-7DSJV.tmp
• %Program Files%\ProxyVan\Updater\is-V3K32.tmp
• %Program Files%\ProxyVan\Service\is-OSBQC.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.dll
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Logging.Console.dll
• %Program Files%\ProxyVan\Tray\is-JVO6H.tmp
• %Program Files%\ProxyVan\Service\is-SO3RA.tmp
• %Program Files%\ProxyVan\Service\System.Numerics.Vectors.dll
• %Program Files%\ProxyVan\Updater\is-7B7O2.tmp
• %Program Files%\ProxyVan\Updater\is-VU4GB.tmp
• %Program Files%\ProxyVan\Updater\System.Net.Ping.dll
• %Program Files%\ProxyVan\Updater\is-FF8KN.tmp
• %Program Files%\ProxyVan\Updater\Serilog.Sinks.RollingFile.dll
• %Program Files%\ProxyVan\Service\is-64Q7T.tmp
• %Program Files%\ProxyVan\Service\System.Linq.Parallel.dll
• %Program Files%\ProxyVan\Service\is-KD267.tmp
• %Program Files%\ProxyVan\Updater\is-OJBPG.tmp
• %Program Files%\ProxyVan\Service\System.Xml.XPath.dll
• %Program Files%\ProxyVan\Updater\is-78LKG.tmp
• %Program Files%\ProxyVan\Service\is-8MT1L.tmp
• %Program Files%\ProxyVan\Updater\is-I4JV2.tmp
• %Program Files%\ProxyVan\Updater\is-UEDTI.tmp
• %Program Files%\ProxyVan\Service\is-FBCJV.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Options.ConfigurationExtensions.xml
• %Program Files%\ProxyVan\Updater\System.Diagnostics.Tracing.dll
• %Program Files%\ProxyVan\Updater\System.Diagnostics.Debug.dll
• %Program Files%\ProxyVan\Service\System.ValueTuple.dll
• %Program Files%\ProxyVan\Updater\is-H3SQC.tmp
• %Program Files%\ProxyVan\Service\is-8DAUC.tmp
• %Program Files%\ProxyVan\Updater\DanilovSoft.WebSocket.dll
• %Program Files%\ProxyVan\Tray\System.Buffers.dll
• %Program Files%\ProxyVan\Service\System.Security.Cryptography.X509Certificates.dll
• %Program Files%\ProxyVan\Service\is-9IH01.tmp
• %Program Files%\ProxyVan\Updater\is-O1HUA.tmp
• %Program Files%\ProxyVan\Tray\is-IG414.tmp
• %Program Files%\ProxyVan\Service\is-F3GJU.tmp
• %Program Files%\ProxyVan\Updater\is-2T7V8.tmp
• %Program Files%\ProxyVan\Updater\is-AT64R.tmp
• %Program Files%\ProxyVan\Updater\System.Data.Common.dll
• %Program Files%\ProxyVan\Updater\is-VSPUG.tmp
• %Program Files%\ProxyVan\Updater\is-HQP9C.tmp
• %Program Files%\ProxyVan\Service\is-6H312.tmp
• %Program Files%\ProxyVan\Service\System.Collections.Specialized.dll
• %Program Files%\ProxyVan\Tray\ProxyVanTray.exe
• %Program Files%\ProxyVan\Service\System.Threading.Thread.dll
• %Program Files%\ProxyVan\Updater\is-9EQF3.tmp
• %Program Files%\ProxyVan\Updater\is-CMB4K.tmp
• %Program Files%\ProxyVan\Updater\is-0A0UF.tmp
• %Program Files%\ProxyVan\Updater\is-4TRKM.tmp
• %Program Files%\ProxyVan\Updater\System.Runtime.Serialization.Json.dll
• %Program Files%\ProxyVan\Updater\is-32FC2.tmp
• %Program Files%\ProxyVan\unins000.exe
• %Program Files%\ProxyVan\Service\System.Runtime.dll
• %Program Files%\ProxyVan\Service\DanilovSoft.WebSocket.xml
• %Program Files%\ProxyVan\Tray\System.Text.Encodings.Web.dll
• %Program Files%\ProxyVan\Service\is-IEUO4.tmp
• %Program Files%\ProxyVan\Service\System.Numerics.Vectors.xml
• %Program Files%\ProxyVan\Service\Microsoft.Win32.Primitives.dll
• %Program Files%\ProxyVan\Service\is-RPPFK.tmp
• %Program Files%\ProxyVan\Updater\is-6T4OT.tmp
• %Program Files%\ProxyVan\Service\is-IEMKU.tmp
• %Program Files%\ProxyVan\Service\System.ObjectModel.dll
• %Program Files%\ProxyVan\Updater\System.ComponentModel.TypeConverter.dll
• %Program Files%\ProxyVan\Updater\is-TBHCL.tmp
• %Program Files%\ProxyVan\Service\System.Runtime.Serialization.Json.dll
• %Program Files%\ProxyVan\Service\System.Xml.XDocument.dll
• %All Users Profile%\Microsoft\Windows\DRM\v3ks.sec
• %Windows%\Tasks\SCHEDLGU.TXT
• %Program Files%\ProxyVan\Service\is-E8D77.tmp
• %Program Files%\ProxyVan\Service\System.Reflection.Primitives.dll
• %Program Files%\ProxyVan\Service\ProxyVan.exe
• %Program Files%\ProxyVan\Service\Microsoft.Bcl.AsyncInterfaces.xml
• %Program Files%\ProxyVan\Updater\is-MN75O.tmp
• %Program Files%\ProxyVan\Service\System.ComponentModel.dll
• %Program Files%\ProxyVan\Service\is-2E1E7.tmp
• %Program Files%\ProxyVan\Service\System.Net.WebHeaderCollection.dll
• %Program Files%\ProxyVan\Service\is-GS2LC.tmp
• %Program Files%\ProxyVan\Updater\is-L2V65.tmp
• %Program Files%\ProxyVan\Service\is-UMQPU.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Win32.Primitives.dll
• %Program Files%\ProxyVan\Updater\is-H0L7L.tmp
• %Program Files%\ProxyVan\Service\is-O4J1I.tmp
• %Program Files%\ProxyVan\Updater\is-MF27L.tmp
• %Program Files%\ProxyVan\Service\ProxyVan.Common.pdb
• %Program Files%\ProxyVan\Updater\System.Security.Principal.dll
• %Program Files%\ProxyVan\Updater\System.IO.UnmanagedMemoryStream.dll
• %Program Files%\ProxyVan\Service\Serilog.Extensions.Logging.xml
• %Program Files%\ProxyVan\Service\System.Threading.Channels.xml
• %Program Files%\ProxyVan\Service\is-R2LMQ.tmp
• %Program Files%\ProxyVan\Service\Proxy.Common.dll
• %Program Files%\ProxyVan\Service\is-I217D.tmp
• %Program Files%\ProxyVan\Service\is-S89BL.tmp
• %Program Files%\ProxyVan\Service\System.Threading.Tasks.Parallel.dll
• %Program Files%\ProxyVan\Updater\is-0DL0K.tmp
• %Program Files%\ProxyVan\Updater\System.IO.Pipes.dll
• %Program Files%\ProxyVan\Updater\is-D037P.tmp
• %Program Files%\ProxyVan\Updater\System.IO.FileSystem.Watcher.dll
• %Program Files%\ProxyVan\Updater\System.Security.Cryptography.Algorithms.dll
• %Program Files%\ProxyVan\Updater\is-QEVS4.tmp
• %Program Files%\ProxyVan\Updater\is-NB5O1.tmp
• %Program Files%\ProxyVan\Service\System.Dynamic.Runtime.dll
• %Program Files%\ProxyVan\Service\System.Memory.dll
• %Program Files%\ProxyVan\Updater\System.Xml.XPath.XDocument.dll
• %Program Files%\ProxyVan\Updater\System.IO.Compression.ZipFile.dll
• %Program Files%\ProxyVan\Service\System.Globalization.Calendars.dll
• %Program Files%\ProxyVan\Service\System.Net.Requests.dll
• %Program Files%\ProxyVan\Updater\is-VGE5F.tmp
• %Program Files%\ProxyVan\Service\is-9V0TH.tmp
• %Program Files%\ProxyVan\Updater\is-QQPFC.tmp
• %Program Files%\ProxyVan\Service\System.Text.Encoding.dll
• %Program Files%\ProxyVan\Updater\is-0GI9R.tmp
• %Program Files%\ProxyVan\Updater\System.Runtime.CompilerServices.VisualC.dll
• %Program Files%\ProxyVan\Updater\is-6MQJ7.tmp
• %Program Files%\ProxyVan\Service\is-UR166.tmp
• %Program Files%\ProxyVan\Service\is-OJ477.tmp
• %Program Files%\ProxyVan\Tray\is-HC8IB.tmp
• %Program Files%\ProxyVan\Updater\System.Runtime.dll
• %Program Files%\ProxyVan\Tray\System.Numerics.Vectors.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.DependencyInjection.Abstractions.xml
• %Program Files%\ProxyVan\Service\System.Threading.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.Console.xml
• %Program Files%\ProxyVan\Service\is-R9HSB.tmp
• %Program Files%\ProxyVan\Updater\is-NJDEP.tmp
• %Program Files%\ProxyVan\Service\is-HVNO5.tmp
• %Program Files%\ProxyVan\Service\is-D7C1R.tmp
• %Program Files%\ProxyVan\Service\System.Console.dll
• %Program Files%\ProxyVan\Updater\is-IE4GF.tmp
• %Program Files%\ProxyVan\Service\is-K6E8C.tmp
• %Program Files%\ProxyVan\Service\Serilog.Sinks.RollingFile.xml
• %Program Files%\ProxyVan\Updater\ProxyVanUpdater.pdb
• %Program Files%\ProxyVan\Service\ProxyVan.Common.dll.config
• %Program Files%\ProxyVan\Service\is-J4KLS.tmp
• %Program Files%\ProxyVan\Updater\System.Globalization.Extensions.dll
• %Program Files%\ProxyVan\Service\is-MNQVH.tmp
• %Program Files%\ProxyVan\Service\System.ComponentModel.Primitives.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.Abstractions.xml
• %Program Files%\ProxyVan\Service\is-9BOJT.tmp
• %Program Files%\ProxyVan\Updater\System.IO.FileSystem.dll
• %Program Files%\ProxyVan\Updater\System.Reflection.Primitives.dll
• %Program Files%\ProxyVan\Updater\System.Diagnostics.Tools.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.Abstractions.dll
• %Program Files%\ProxyVan\Updater\is-QA7JU.tmp
• %Program Files%\ProxyVan\Service\is-F7VOJ.tmp
• %Program Files%\ProxyVan\Service\is-3OSHP.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Configuration.Binder.dll
• %Program Files%\ProxyVan\Updater\ProxyVan.Common.pdb
• %Program Files%\ProxyVan\Service\is-C148L.tmp
• %Program Files%\ProxyVan\Service\is-U7PVS.tmp
• %Program Files%\ProxyVan\Updater\is-VF1FT.tmp
• %Program Files%\ProxyVan\Service\is-6BM65.tmp
• %Program Files%\ProxyVan\Updater\is-TNSKQ.tmp
• %Program Files%\ProxyVan\Updater\System.Xml.ReaderWriter.dll
• %Program Files%\ProxyVan\Service\is-T30DU.tmp
• %Program Files%\ProxyVan\Updater\is-C6MLR.tmp
• %Program Files%\ProxyVan\Service\is-ITHIH.tmp
• %Program Files%\ProxyVan\Service\is-MGB6C.tmp
• %Program Files%\ProxyVan\Updater\is-NM0LF.tmp
• %All Users Profile%\Microsoft\Network\Downloader\qmgr1.dat
• %Program Files%\ProxyVan\Service\is-JIFEJ.tmp
• %Program Files%\ProxyVan\Updater\is-7N603.tmp
• %Program Files%\ProxyVan\Service\Serilog.Sinks.File.pdb
• %Program Files%\ProxyVan\Updater\is-PV0AV.tmp
• %Program Files%\ProxyVan\Service\System.Net.Primitives.dll
• %Program Files%\ProxyVan\Service\System.Drawing.Primitives.dll
• %Program Files%\ProxyVan\Service\DanilovSoft.vRPC.xml
• %Program Files%\ProxyVan\Service\is-AO7UD.tmp
• %Program Files%\ProxyVan\Service\is-37EET.tmp
• %Program Files%\ProxyVan\Service\is-TTA61.tmp
• %Program Files%\ProxyVan\Tray\is-ON4K1.tmp
• %Program Files%\ProxyVan\Service\System.Security.Cryptography.Encoding.dll
• %Program Files%\ProxyVan\Service\is-5VKLI.tmp
• %Program Files%\ProxyVan\Service\ru\DanilovSoft.WebSocket.resources.dll
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Configuration.dll
• %Program Files%\ProxyVan\Service\is-S2LTU.tmp
• %Program Files%\ProxyVan\Service\is-BJJ60.tmp
• %Program Files%\ProxyVan\Service\is-Q4LSP.tmp
• %Program Files%\ProxyVan\Tray\is-4IJTN.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Configuration.xml
• %Program Files%\ProxyVan\Service\System.Threading.ThreadPool.dll
• %Program Files%\ProxyVan\Updater\is-QTB68.tmp
• %Program Files%\ProxyVan\Service\is-OK2J8.tmp
• %Program Files%\ProxyVan\Service\is-B1STE.tmp
• %Program Files%\ProxyVan\Updater\System.Net.Security.dll
• %Program Files%\ProxyVan\Service\is-JD2ER.tmp
• %Program Files%\ProxyVan\Updater\is-Q0VCN.tmp
• %Program Files%\ProxyVan\Service\is-CGB2S.tmp
• %Program Files%\ProxyVan\Service\System.ComponentModel.TypeConverter.dll
• %Program Files%\ProxyVan\Updater\is-KA83C.tmp
• %Program Files%\ProxyVan\Updater\is-AQHL5.tmp
• %Program Files%\ProxyVan\Updater\is-F9D9F.tmp
• %Program Files%\ProxyVan\Service\is-HMJAB.tmp
• %Program Files%\ProxyVan\Updater\System.ValueTuple.dll
• %Program Files%\ProxyVan\Service\System.Linq.dll
• %Program Files%\ProxyVan\Service\is-08HMM.tmp
• %Program Files%\ProxyVan\Updater\System.Collections.Concurrent.dll
• %Program Files%\ProxyVan\Service\System.Threading.Timer.dll
• %Program Files%\ProxyVan\Service\is-V1Q92.tmp
• %Program Files%\ProxyVan\Updater\System.Runtime.CompilerServices.Unsafe.dll
• %Program Files%\ProxyVan\Service\is-6A23R.tmp
• %Program Files%\ProxyVan\Service\Serilog.Extensions.Logging.dll
• %Program Files%\ProxyVan\unins000.dat
• %Program Files%\ProxyVan\Service\is-3DQP0.tmp
• %Program Files%\ProxyVan\Service\is-OEQSP.tmp
• %Program Files%\ProxyVan\Updater\is-6PU9U.tmp
• %Program Files%\ProxyVan\Updater\is-S63FU.tmp
• %Program Files%\ProxyVan\Service\System.Net.Http.dll
• %Program Files%\ProxyVan\Service\is-6SV4D.tmp
• %Program Files%\ProxyVan\Tray\System.Memory.dll
• %Program Files%\ProxyVan\Updater\is-UKJ9J.tmp
• %Program Files%\ProxyVan\Service\is-SL510.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.DependencyInjection.Abstractions.dll
• %Program Files%\ProxyVan\Service\System.Collections.NonGeneric.dll
• %Program Files%\ProxyVan\Updater\System.Security.Cryptography.Primitives.dll
• %Program Files%\ProxyVan\Updater\System.Text.Encoding.Extensions.dll
• %Program Files%\ProxyVan\Service\is-UH5I0.tmp
• %Program Files%\ProxyVan\Updater\System.ComponentModel.Annotations.dll
• %Program Files%\ProxyVan\Updater\System.Threading.Overlapped.dll
• %Program Files%\ProxyVan\Service\is-NVMOF.tmp
• %Program Files%\ProxyVan\Service\System.Security.Claims.dll
• %Program Files%\ProxyVan\Updater\System.Resources.Writer.dll
• %Program Files%\ProxyVan\Updater\System.Text.Encoding.dll
• %Program Files%\ProxyVan\Service\is-FBKPT.tmp
• %Program Files%\ProxyVan\Service\System.Globalization.Extensions.dll
• %Program Files%\ProxyVan\Service\is-VGBE0.tmp
• %Program Files%\ProxyVan\Service\System.Runtime.Numerics.dll
• %Program Files%\ProxyVan\Service\is-V859S.tmp
• %Program Files%\ProxyVan\Updater\is-EF9O0.tmp
• %AppDataLocal%\Microsoft\Media Player\CurrentDatabase_372.wmdb
• %Program Files%\ProxyVan\Updater\is-MK237.tmp
• %Program Files%\ProxyVan\Tray\ProxyVanTray.pdb
• %Program Files%\ProxyVan\Tray\netstandard.dll
• %Program Files%\ProxyVan\Updater\System.Globalization.dll
• %Program Files%\ProxyVan\Service\Serilog.Sinks.File.xml
• %Program Files%\ProxyVan\Updater\System.Runtime.Numerics.dll
• %Program Files%\ProxyVan\Updater\is-L51KK.tmp
• %Program Files%\ProxyVan\Service\System.Security.Cryptography.Algorithms.dll
• %Program Files%\ProxyVan\Service\is-IINIC.tmp
• %Program Files%\ProxyVan\Updater\is-BK7IO.tmp
• %Program Files%\ProxyVan\is-VIP70.tmp
• %Program Files%\ProxyVan\Service\is-8HHMG.tmp
• %Program Files%\ProxyVan\Service\is-IVUS6.tmp
• %Program Files%\ProxyVan\Service\is-2KRU2.tmp
• %Program Files%\ProxyVan\Service\is-NGPV0.tmp
• %Program Files%\ProxyVan\Updater\System.Diagnostics.Contracts.dll
• %Program Files%\ProxyVan\Service\is-UOI0S.tmp
• %Program Files%\ProxyVan\Service\is-9PO3H.tmp
• %Program Files%\ProxyVan\Updater\System.Collections.dll
• %Program Files%\ProxyVan\Updater\System.Threading.Tasks.Extensions.dll
• %Program Files%\ProxyVan\Service\System.Resources.Writer.dll
• %Program Files%\ProxyVan\Updater\System.IO.FileSystem.DriveInfo.dll
• %Program Files%\ProxyVan\Updater\is-P2IUN.tmp
• %Program Files%\ProxyVan\Updater\is-UEAMP.tmp
• %Program Files%\ProxyVan\Tray\is-0QLC3.tmp
• %Program Files%\ProxyVan\Service\System.Diagnostics.Process.dll
• %Program Files%\ProxyVan\Service\is-F2KJT.tmp
• %Program Files%\ProxyVan\Service\System.Resources.Reader.dll
• %Program Files%\ProxyVan\Service\is-N30RD.tmp
• %Program Files%\ProxyVan\Service\ProxyVan.pdb
• %Program Files%\ProxyVan\Updater\is-S2OL7.tmp
• %Program Files%\ProxyVan\Updater\System.Dynamic.Runtime.dll
• %Program Files%\ProxyVan\Service\System.Runtime.Serialization.Xml.dll
• %Program Files%\ProxyVan\Service\is-9QGE0.tmp
• %Program Files%\ProxyVan\Tray\ProxyVanTray.exe.config
• %Program Files%\ProxyVan\Service\is-L4GSC.tmp
• %Program Files%\ProxyVan\Service\DanilovSoft.vRPC.dll
• %Program Files%\ProxyVan\Service\is-HL6VC.tmp
• %Program Files%\ProxyVan\Updater\System.Threading.dll
• %Program Files%\ProxyVan\Service\System.IO.Compression.ZipFile.dll
• %Program Files%\ProxyVan\Tray\ProxyVan.Common.dll
• %Program Files%\ProxyVan\Service\is-SKU4U.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Configuration.Binder.xml
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Configuration.Abstractions.dll
• %Program Files%\ProxyVan\Service\System.Text.Json.xml
• %Program Files%\ProxyVan\Updater\System.Diagnostics.StackTrace.dll
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Options.dll
• %Program Files%\ProxyVan\Tray\System.Text.Json.dll
• %Program Files%\ProxyVan\Tray\ProxyVan.Common.dll.config
• %Program Files%\ProxyVan\Service\is-I9061.tmp
• %Program Files%\ProxyVan\Updater\System.Linq.Parallel.dll
• %Program Files%\ProxyVan\Service\System.Net.Sockets.dll
• %Program Files%\ProxyVan\Updater\System.Threading.Tasks.dll
• %Program Files%\ProxyVan\Service\ProxyVan.Common.dll
• %Program Files%\ProxyVan\Service\is-BN82R.tmp
• %Program Files%\ProxyVan\Updater\System.Text.Json.dll
• %Program Files%\ProxyVan\Service\Serilog.xml
• %Program Files%\ProxyVan\Service\is-FF73O.tmp
• %Program Files%\ProxyVan\Updater\is-NS9E5.tmp
• %Program Files%\ProxyVan\Updater\System.Console.dll
• %Program Files%\ProxyVan\Updater\System.Diagnostics.Process.dll
• %Program Files%\ProxyVan\Service\is-SJBG6.tmp
• %Program Files%\ProxyVan\Service\is-FVSS9.tmp
• %Program Files%\ProxyVan\Service\is-9OM5O.tmp
• %Program Files%\ProxyVan\Service\is-BM272.tmp
• %Program Files%\ProxyVan\Service\is-URSGC.tmp
• %Program Files%\ProxyVan\Updater\is-36JCV.tmp
• %Program Files%\ProxyVan\Updater\is-4EU4H.tmp
• %Program Files%\ProxyVan\Updater\System.Reflection.dll
• %Program Files%\ProxyVan\Updater\System.Runtime.Serialization.Formatters.dll
• %Program Files%\ProxyVan\Tray\is-UAUU6.tmp
• %Program Files%\ProxyVan\Updater\is-9UN2I.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Configuration.Abstractions.xml
• %Program Files%\ProxyVan\Updater\is-PABC0.tmp
• %Program Files%\ProxyVan\Updater\is-KJMEA.tmp
• %Program Files%\ProxyVan\Service\Serilog.Sinks.RollingFile.dll
• %Program Files%\ProxyVan\Service\System.Diagnostics.Tracing.dll
• %Program Files%\ProxyVan\Updater\netstandard.dll
• %Program Files%\ProxyVan\Service\is-KA9C5.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.DependencyInjection.Abstractions.dll
• %Program Files%\ProxyVan\Updater\ru\DanilovSoft.WebSocket.resources.dll
• %Program Files%\ProxyVan\Service\is-UDE5L.tmp
• %Program Files%\ProxyVan\Updater\is-024RK.tmp
• %Program Files%\ProxyVan\Updater\is-6HB42.tmp
• %Program Files%\ProxyVan\Service\System.Buffers.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.Configuration.xml
• %Program Files%\ProxyVan\Service\is-E7S18.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.xml
• %Program Files%\ProxyVan\Updater\is-B9ENQ.tmp
• %Program Files%\ProxyVan\Updater\is-4S07I.tmp
• %Program Files%\ProxyVan\Service\Microsoft.IO.RecyclableMemoryStream.dll
• %Program Files%\ProxyVan\Service\is-HENRU.tmp
• %Program Files%\ProxyVan\Updater\System.Resources.ResourceManager.dll
• %Program Files%\ProxyVan\Service\System.Runtime.Extensions.dll
• %Program Files%\ProxyVan\Service\System.Diagnostics.Contracts.dll
• %Program Files%\ProxyVan\Service\System.IO.FileSystem.Primitives.dll
• %Program Files%\ProxyVan\Updater\System.Diagnostics.TextWriterTraceListener.dll
• %Program Files%\ProxyVan\Service\System.Threading.Channels.dll
• %Program Files%\ProxyVan\Service\is-7N1C3.tmp
• %Program Files%\ProxyVan\Service\System.AppContext.dll
• %Program Files%\ProxyVan\Updater\System.AppContext.dll
• %Program Files%\ProxyVan\Service\System.Xml.XmlDocument.dll
• %Program Files%\ProxyVan\Updater\is-TE68H.tmp
• %Program Files%\ProxyVan\Updater\System.IO.IsolatedStorage.dll
• %Program Files%\ProxyVan\Service\is-25ASK.tmp
• %Program Files%\ProxyVan\Updater\is-ED6NQ.tmp
• %Program Files%\ProxyVan\Service\is-6SBDF.tmp
• %Program Files%\ProxyVan\Service\is-EOSIB.tmp
• %Program Files%\ProxyVan\Service\is-4NHF5.tmp
• %Program Files%\ProxyVan\Service\System.Diagnostics.FileVersionInfo.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Logging.Configuration.dll
• %Program Files%\ProxyVan\Updater\is-FHK2N.tmp
• %Program Files%\ProxyVan\Service\is-NEORI.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Configuration.Abstractions.dll
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.DependencyInjection.dll
• %Program Files%\ProxyVan\Service\System.Net.NetworkInformation.dll
• %Program Files%\ProxyVan\Updater\Serilog.Sinks.File.dll
• %Program Files%\ProxyVan\Service\System.Net.WebSockets.dll
• %Program Files%\ProxyVan\Updater\is-DNBFR.tmp
• %Program Files%\ProxyVan\Updater\is-RSVFH.tmp
• %Program Files%\ProxyVan\Service\Serilog.Sinks.Console.xml
• %Program Files%\ProxyVan\Service\is-V8NVG.tmp
• %Program Files%\ProxyVan\Updater\System.ComponentModel.EventBasedAsync.dll
• %Program Files%\ProxyVan\Service\is-MN799.tmp
• %Program Files%\ProxyVan\Updater\System.Net.NameResolution.dll
• %Program Files%\ProxyVan\Service\System.Diagnostics.Debug.dll
• %Program Files%\ProxyVan\Updater\is-PI8MJ.tmp
• %Program Files%\ProxyVan\Service\System.Threading.Overlapped.dll
• %Program Files%\ProxyVan\Service\is-U7DP1.tmp
• %Program Files%\ProxyVan\Service\is-EF7IO.tmp
• %Program Files%\ProxyVan\Service\is-Q8RFV.tmp
• %Program Files%\ProxyVan\Service\DanilovSoft.WebSocket.dll
• %Program Files%\ProxyVan\Updater\is-6LROP.tmp
• %Program Files%\ProxyVan\Updater\is-NKDF3.tmp
• %Program Files%\ProxyVan\Service\is-MHGBE.tmp
• %Program Files%\ProxyVan\Updater\System.Collections.NonGeneric.dll
• %Program Files%\ProxyVan\Service\is-FSLHQ.tmp
• %Program Files%\ProxyVan\Updater\is-53TP4.tmp
• %Program Files%\ProxyVan\Service\is-VFR66.tmp
• %Program Files%\ProxyVan\Service\System.Linq.Expressions.dll
• %Program Files%\ProxyVan\Updater\is-28E7K.tmp
• %Program Files%\ProxyVan\Updater\System.Security.SecureString.dll
• %Program Files%\ProxyVan\Tray\is-SUR1U.tmp
• %Program Files%\ProxyVan\Service\System.ComponentModel.EventBasedAsync.dll
• %Program Files%\ProxyVan\Updater\System.Runtime.Extensions.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Configuration.Binder.dll
• %Program Files%\ProxyVan\Service\System.Runtime.CompilerServices.VisualC.dll
• %Program Files%\ProxyVan\Service\is-49QGS.tmp
• %User Temp%\tmpB6DF.exe
• %Program Files%\ProxyVan\Updater\is-H8UV9.tmp
• %Program Files%\ProxyVan\Service\System.Text.Encoding.Extensions.dll
• %Program Files%\ProxyVan\Updater\is-UJ6DQ.tmp
• %Program Files%\ProxyVan\Updater\System.Linq.Expressions.dll
• %Program Files%\ProxyVan\Updater\System.Linq.dll
• %Program Files%\ProxyVan\Updater\System.Text.Encodings.Web.dll
• %Program Files%\ProxyVan\Updater\System.Security.Cryptography.Encoding.dll
• %Program Files%\ProxyVan\Updater\is-N0UHV.tmp
• %Program Files%\ProxyVan\Updater\is-2F99U.tmp
• %Program Files%\ProxyVan\Service\is-88215.tmp
• %Program Files%\ProxyVan\Service\is-2IJNL.tmp
• %Program Files%\ProxyVan\Service\System.Xml.XmlSerializer.dll
• %Program Files%\ProxyVan\Updater\System.Diagnostics.TraceSource.dll
• %Program Files%\ProxyVan\Updater\is-NIQKB.tmp
• %Program Files%\ProxyVan\Updater\is-6O90S.tmp
• %Program Files%\ProxyVan\Updater\ru\DanilovSoft.vRPC.resources.dll
• %Program Files%\ProxyVan\Updater\System.Runtime.InteropServices.RuntimeInformation.dll
• %Program Files%\ProxyVan\Service\is-TSN10.tmp
• %Program Files%\ProxyVan\Updater\is-SEVS0.tmp
• %Program Files%\ProxyVan\Updater\is-QD36M.tmp
• %Program Files%\ProxyVan\Service\protobuf-net.xml
• %Program Files%\ProxyVan\Service\is-14OGL.tmp
• %Program Files%\ProxyVan\Service\CommandLine.xml
• %Program Files%\ProxyVan\Service\is-EUN40.tmp
• %Program Files%\ProxyVan\Service\System.Net.NameResolution.dll
• %Program Files%\ProxyVan\Tray\is-RH5DR.tmp
• %Program Files%\ProxyVan\Service\ru\is-PG3HM.tmp
• %Program Files%\ProxyVan\Updater\System.Numerics.Vectors.dll
• %Program Files%\ProxyVan\Service\System.Runtime.InteropServices.dll
• %Program Files%\ProxyVan\Updater\System.IO.MemoryMappedFiles.dll
• %Program Files%\ProxyVan\Updater\is-S3E96.tmp
• %Program Files%\ProxyVan\Updater\System.ComponentModel.Primitives.dll
• %Program Files%\ProxyVan\Updater\is-JHBEF.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Options.ConfigurationExtensions.dll
• %Program Files%\ProxyVan\Service\Proxy.Common.pdb
• %Program Files%\ProxyVan\Service\System.Text.RegularExpressions.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.DependencyInjection.xml
• %Program Files%\ProxyVan\Service\System.IO.FileSystem.Watcher.dll
• %Program Files%\ProxyVan\Service\is-3QEPI.tmp
• %Program Files%\ProxyVan\Service\is-PPDP1.tmp
• %Program Files%\ProxyVan\Updater\is-FT0MC.tmp
• %Program Files%\ProxyVan\Updater\is-34PMN.tmp
• %Program Files%\ProxyVan\Tray\is-9KD74.tmp
• %Program Files%\ProxyVan\Tray\is-0KL3O.tmp
• %Program Files%\ProxyVan\Updater\is-MSGK9.tmp
• %Program Files%\ProxyVan\Service\System.ValueTuple.xml
• %Program Files%\ProxyVan\Service\is-M2EVK.tmp
• %Program Files%\ProxyVan\Updater\System.Net.WebSockets.dll
• %Program Files%\ProxyVan\Updater\System.Net.WebSockets.Client.dll
• %Program Files%\ProxyVan\Updater\is-G11KT.tmp
• %Program Files%\ProxyVan\Service\System.IO.IsolatedStorage.dll
• %Program Files%\ProxyVan\Service\System.Runtime.CompilerServices.Unsafe.xml
• %Program Files%\ProxyVan\Service\is-DBB4K.tmp
• %Program Files%\ProxyVan\Updater\System.Runtime.Serialization.Primitives.dll
• %Program Files%\ProxyVan\Updater\is-3EOS1.tmp
• %Program Files%\ProxyVan\Updater\is-SMO19.tmp
• %Program Files%\ProxyVan\Service\is-65U5Q.tmp
• %Program Files%\ProxyVan\Updater\is-CSN5M.tmp
• %Program Files%\ProxyVan\Service\System.Linq.Queryable.dll
• %Program Files%\ProxyVan\Service\Serilog.Sinks.File.dll
• %Program Files%\ProxyVan\Service\Microsoft.Bcl.AsyncInterfaces.dll
• %Program Files%\ProxyVan\Updater\is-N2EOS.tmp
• %Program Files%\ProxyVan\Service\is-FMSJR.tmp
• %Program Files%\ProxyVan\Updater\System.Net.WebHeaderCollection.dll
• %Program Files%\ProxyVan\Service\is-PF57Q.tmp
• %Program Files%\ProxyVan\Service\is-9HA9P.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Bcl.AsyncInterfaces.dll
• %Program Files%\ProxyVan\Updater\is-PF9B5.tmp
• %Program Files%\ProxyVan\Service\System.Runtime.Serialization.Formatters.dll
• %Program Files%\ProxyVan\Updater\is-BJU64.tmp
• %Program Files%\ProxyVan\Service\is-G485O.tmp
• %Program Files%\ProxyVan\Service\System.Threading.Tasks.Extensions.xml
• %All Users Profile%\Microsoft\Windows\DRM\drmstore.hds
• %Program Files%\ProxyVan\Service\System.IO.FileSystem.dll
• %Program Files%\ProxyVan\Updater\is-SLLIC.tmp
• %Program Files%\ProxyVan\Service\System.Security.SecureString.dll
• %All Users Profile%\Microsoft\Network\Downloader\qmgr0.dat
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Logging.dll
• %Program Files%\ProxyVan\Service\System.Collections.Concurrent.dll
• %Program Files%\ProxyVan\Updater\is-18JFM.tmp
• %Program Files%\ProxyVan\Service\is-6AUMH.tmp
• %Program Files%\ProxyVan\Updater\ProxyVan.Common.dll.config
• %Windows%\Prefetch\DLLHOST.EXE-5E46FA0D.pf
• %Program Files%\ProxyVan\Updater\System.Linq.Queryable.dll
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Logging.Configuration.dll
• %Program Files%\ProxyVan\Service\is-CTSLR.tmp
• %Program Files%\ProxyVan\Updater\System.Net.Http.dll
• %Program Files%\ProxyVan\Tray\is-3FBPJ.tmp
• %Program Files%\ProxyVan\Updater\System.Reflection.Extensions.dll
• %Program Files%\ProxyVan\Updater\System.Security.Claims.dll
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Options.xml
• %Program Files%\ProxyVan\Updater\System.Security.Cryptography.X509Certificates.dll
• %Program Files%\ProxyVan\Updater\System.Diagnostics.FileVersionInfo.dll
• %Program Files%\ProxyVan\Updater\ProxyVanUpdater.exe
• %Program Files%\ProxyVan\Updater\System.Security.Cryptography.Csp.dll
• %Program Files%\ProxyVan\Service\System.Buffers.xml
• %Program Files%\ProxyVan\Updater\System.Xml.XmlSerializer.dll
• %Program Files%\ProxyVan\Service\is-M9F8U.tmp
• %Program Files%\ProxyVan\Service\System.Net.Security.dll
• %Program Files%\ProxyVan\Service\System.Text.Json.dll
• %Program Files%\ProxyVan\Updater\System.ComponentModel.dll
• %Program Files%\ProxyVan\Service\protobuf-net.dll
• %Program Files%\ProxyVan\Service\is-CN3TN.tmp
• %Program Files%\ProxyVan\Updater\ProxyVanUpdater.exe.config
• %Program Files%\ProxyVan\Service\is-HE84L.tmp
• %Program Files%\ProxyVan\Service\is-EEBP0.tmp
• %Program Files%\ProxyVan\Service\System.Net.Ping.dll
• %Program Files%\ProxyVan\Updater\is-78B5E.tmp
• %Program Files%\ProxyVan\Service\is-95AOL.tmp
• %Program Files%\ProxyVan\Updater\is-8PER0.tmp
• %Program Files%\ProxyVan\Updater\is-QH214.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.Extensions.Primitives.dll
• %Program Files%\ProxyVan\Updater\is-DPV90.tmp
• %Program Files%\ProxyVan\Service\System.Runtime.Serialization.Primitives.dll
• %Program Files%\ProxyVan\Updater\Serilog.Sinks.File.pdb
• %Program Files%\ProxyVan\Updater\System.Drawing.Primitives.dll
• %Program Files%\ProxyVan\Service\System.Data.Common.dll
• %Program Files%\ProxyVan\Updater\System.Xml.XmlDocument.dll
• %Program Files%\ProxyVan\Updater\System.Net.Requests.dll
• %Program Files%\ProxyVan\Updater\CommandLine.dll
• %Program Files%\ProxyVan\Updater\is-CU0NR.tmp
• %Program Files%\ProxyVan\Service\is-F8JQQ.tmp
• %Program Files%\ProxyVan\Tray\System.Runtime.CompilerServices.Unsafe.dll
• %Program Files%\ProxyVan\Updater\System.Threading.ThreadPool.dll
• %Program Files%\ProxyVan\Updater\DanilovSoft.vRPC.dll
• %Program Files%\ProxyVan\Service\is-N1PM4.tmp
• %Program Files%\ProxyVan\Service\is-V93MR.tmp
• %Program Files%\ProxyVan\Updater\is-MILQ9.tmp
• %Program Files%\ProxyVan\Service\System.IO.dll
• %Program Files%\ProxyVan\Updater\is-MTNJ7.tmp
• %Program Files%\ProxyVan\Updater\is-3AGT1.tmp
• %Program Files%\ProxyVan\Updater\is-C7KE3.tmp
• %Program Files%\ProxyVan\Updater\protobuf-net.dll
• %Program Files%\ProxyVan\Updater\System.Xml.XDocument.dll
• %Program Files%\ProxyVan\Updater\is-FNCSS.tmp
• %Program Files%\ProxyVan\Updater\is-G5BQN.tmp
• %Program Files%\ProxyVan\Service\is-VF38J.tmp
• %Program Files%\ProxyVan\Updater\is-HEFLN.tmp
• %Program Files%\ProxyVan\Service\Microsoft.Extensions.Configuration.dll
• %Program Files%\ProxyVan\Service\System.Reflection.dll
• %Program Files%\ProxyVan\Service\is-N16RE.tmp
• %Program Files%\ProxyVan\Updater\Microsoft.IO.RecyclableMemoryStream.dll
• %Program Files%\ProxyVan\Updater\is-T0NJD.tmp
• %Program Files%\ProxyVan\Updater\is-P3IGE.tmp
• %System Root%\DfsServer
• %Program Files%\ProxyVan\Service\System.ComponentModel.Annotations.dll
• %Program Files%\ProxyVan\Service\is-TEU60.tmp
• %Program Files%\ProxyVan\Service\is-MRFJD.tmp
• %Program Files%\ProxyVan\Service\ru\is-NSERR.tmp
• %Program Files%\ProxyVan\Service\System.Runtime.CompilerServices.Unsafe.dll
• %Windows%\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
• %Program Files%\ProxyVan\Updater\ProxyVan.Common.dll
• %Program Files%\ProxyVan\Service\is-IF4A4.tmp
• %Program Files%\ProxyVan\Updater\ru\is-2937B.tmp
• %Program Files%\ProxyVan\Service\is-OP05A.tmp
• %Program Files%\ProxyVan\Updater\System.Runtime.Handles.dll
• %Program Files%\ProxyVan\Updater\System.Runtime.Serialization.Xml.dll
• %Program Files%\ProxyVan\Updater\System.IO.dll
• %Program Files%\ProxyVan\Service\System.Runtime.Handles.dll
• %Program Files%\ProxyVan\Service\System.Security.Principal.dll
• %Program Files%\ProxyVan\Service\is-JVSAU.tmp

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %AppDataLocal%フォルダは、ローカルアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local" です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

このウイルス情報は、自動解析システムにより作成されました。