解析者: Khristian Joseph Morales   
 プラットフォーム:

Windows

 危険度:
 ダメージ度:
 感染力:
 感染確認数:
 情報漏えい:

  • マルウェアタイプ:
    潜在的に迷惑なアプリケーション

  • 破壊活動の有無:
    なし

  • 暗号化:
     

  • 感染報告の有無 :
    はい

  概要

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

  詳細

ファイルサイズ 16,852,824 bytes
タイプ EXE
メモリ常駐 はい
発見日 2022年2月14日

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のファイルを作成します。

  • %All Users Profile%\PDFsam Enhanced 7\Installation\curl-ca-bundle.crt
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs\log.INFO.{random characters}.{random characters}
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}.exe
  • %All Users Profile%\PDFsam Enhanced 7\Installation\Statistics.dll
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}\PDFsam_Enhanced_7_Installer_7.0.49.2295.exe
  • %All Users Profile%\PDFsam Enhanced 7\Installation\PDFsam_Enhanced_7_Installer.exe
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs\log.ERROR.{random characters}.{random characters}
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs\log.WARNING.{random characters}.{random characters}
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}.bat
  • %All Users Profile%\PDFsam Enhanced 7\Installation\analytics.dll
  • %All Users Profile%\PDFsam Enhanced 7\Installation\pdfsam-enhanced-startup-7.0.70.15196-x86.msi
  • %All Users Profile%\PDFsam Enhanced 7\Installation\app-config.json
  • %Desktop%PDFsam Enhanced 7.lnk
  • %Application Data%\Microsoft\Internet Explorer\Quick Launch\PDFsam Enhanced 7.lnk
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeExpertEncoding
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeLatin1Encoding
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeSingleGlyphList
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeStandardEncoding
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-console-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-datetime-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-debug-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-errorhandling-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-file-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-file-l1-2-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-file-l2-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-handle-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-heap-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-interlocked-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-libraryloader-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-localization-l1-2-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-memory-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-namedpipe-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-processenvironment-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-processthreads-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-processthreads-l1-1-1.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-profile-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-string-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-synch-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-synch-l1-2-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-sysinfo-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-timezone-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-util-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-conio-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-convert-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-environment-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-filesystem-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-heap-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-locale-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-math-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-multibyte-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-private-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-process-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-runtime-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-stdio-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-string-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-time-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-utility-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AppleRomanEncoding
  • %Program Files%\PDFsam Enhanced 7\localization\Click on 'Change' to select default pdf handler.pdf
  • %Program Files%\PDFsam Enhanced 7\atom.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\Big5Encoding
  • %Program Files%\PDFsam Enhanced 7\sp\bl\bl.csp
  • %Program Files%\PDFsam Enhanced 7\bl.dll
  • %Program Files%\PDFsam Enhanced 7\bl-creator-module.dll
  • %Program Files%\PDFsam Enhanced 7\bl-edit.dll
  • %Program Files%\PDFsam Enhanced 7\bl-scan.dll
  • %Program Files%\PDFsam Enhanced 7\bl-service-provider.dll
  • %Program Files%\PDFsam Enhanced 7\bl-views.dll
  • %Program Files%\PDFsam Enhanced 7\brand.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Scripts\Common.js
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\commonwidths.dat
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\compliance_log.xml
  • %Program Files%\PDFsam Enhanced 7\concrt140.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\concrt140.dll
  • %Program Files%\PDFsam Enhanced 7\context-menu.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\ConverterCoreLight.dll
  • %Program Files%\PDFsam Enhanced 7\crash-handler.dll
  • %Program Files%\PDFsam Enhanced 7\crash-handler-app.exe
  • %Program Files%\PDFsam Enhanced 7\creator-so.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\CsvFlt.flt
  • %Program Files%\PDFsam Enhanced 7\curl-ca-bundle.crt
  • %Program Files%\PDFsam Enhanced 7\D3DCompiler_43.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\dbCore.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\DOCXFlt.flt
  • %Program Files%\PDFsam Enhanced 7\ebook2pdf.dll
  • %Program Files%\PDFsam Enhanced 7\encoding-conversion.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.graph.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.paperclip.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.pushpin.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.tag.txt
  • %Program Files%\PDFsam Enhanced 7\sam.exe
  • %Program Files%\PDFsam Enhanced 7\sam-launcher.exe
  • %Program Files%\PDFsam Enhanced 7\activation-service.exe
  • %Program Files%\PDFsam Enhanced 7\stats-com.exe
  • %Program Files%\PDFsam Enhanced 7\creator-app.exe
  • %Program Files%\PDFsam Enhanced 7\creator-ws.exe
  • %Program Files%\PDFsam Enhanced 7\printer-installer.dll
  • %Program Files%\PDFsam Enhanced 7\printer-installer-app.exe
  • %Program Files%\PDFsam Enhanced 7\ui-notifier.dll
  • %Program Files%\PDFsam Enhanced 7\update-service.exe
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Framework.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\GB2312Encoding
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\GenericRGBProfile.icc
  • %Program Files%\PDFsam Enhanced 7\graphics-service.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\htmFlt.flt
  • %Program Files%\PDFsam Enhanced 7\localization\de\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\en\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\es\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\fr\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\ja\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\pt\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\ru\icon.png
  • %Program Files%\PDFsam Enhanced 7\resources\Core\icudt58l.dat
  • %Program Files%\PDFsam Enhanced 7\icudt68.dll
  • %Program Files%\PDFsam Enhanced 7\icudt68l.dat
  • %Program Files%\PDFsam Enhanced 7\icuin68.dll
  • %Program Files%\PDFsam Enhanced 7\icuin68d.dll
  • %Program Files%\PDFsam Enhanced 7\icuuc68.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\CMap\Identity-H
  • %Program Files%\PDFsam Enhanced 7\resources\Core\CMap\Identity-V
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\ImageTool.dll
  • %Program Files%\PDFsam Enhanced 7\localization\de\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\en\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\es\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\fr\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\it\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\ja\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\pt\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\ru\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\it\icon.png
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\JohabEncoding
  • %Program Files%\PDFsam Enhanced 7\libcrypto-1_1.dll
  • %Program Files%\PDFsam Enhanced 7\libcurl.dll
  • %Program Files%\PDFsam Enhanced 7\libidn.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\libidn.dll
  • %Program Files%\PDFsam Enhanced 7\libphonenumber.dll
  • %Program Files%\PDFsam Enhanced 7\libssl-1_1.dll
  • %Program Files%\PDFsam Enhanced 7\localization-service.dll
  • %Program Files%\PDFsam Enhanced 7\logger.dll
  • %Program Files%\PDFsam Enhanced 7\localization\de\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\en\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\es\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\fr\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\it\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\ja\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\pt\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\ru\messages.dat
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\metadata.xml
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\MSSymbolEncoding
  • %Program Files%\PDFsam Enhanced 7\msvcp140.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\msvcp140.dll
  • %Program Files%\PDFsam Enhanced 7\msvcp140_1.dll
  • %Program Files%\PDFsam Enhanced 7\msvcp140_2.dll
  • %Program Files%\PDFsam Enhanced 7\msvcp140_codecvt_ids.dll
  • %Program Files%\PDFsam Enhanced 7\notification-service.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\ocr.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDF_tagged.xml
  • %Program Files%\PDFsam Enhanced 7\pdf2html.dll
  • %Program Files%\PDFsam Enhanced 7\pdf2image.dll
  • %Program Files%\PDFsam Enhanced 7\Pdf2PdfAPI.dll
  • %Program Files%\PDFsam Enhanced 7\pdf2pdfconv.exe
  • %Program Files%\PDFsam Enhanced 7\pdf2text.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_1a.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_1b.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_2a.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_2b.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_3a.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_3b.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_XMP_1.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_XMP_2.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_XMP_3.xml
  • %Program Files%\PDFsam Enhanced 7\pdfcore.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfDbEditor.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfFlt.flt
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfFontMapper.txt
  • %Program Files%\PDFsam Enhanced 7\pdfgraphics.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PDFLibTool.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfMeta.dll
  • %Program Files%\PDFsam Enhanced 7\pdfview.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-acroform.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-box-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-dropbox-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-evernote.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-googledrive-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-onboarding-tutorial.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-onedrive-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-pdf-converter.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-pdf-creator.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-pdfa-converter.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-scanner.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-sharepoint-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-text-markup.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-text-to-speech.dll
  • %Program Files%\PDFsam Enhanced 7\plugins-manager.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PptxFlt.flt
  • %Program Files%\PDFsam Enhanced 7\preview-handler.dll
  • %Program Files%\PDFsam Enhanced 7\rlottie.dll
  • %Program Files%\PDFsam Enhanced 7\sp\root\root.csp
  • %Program Files%\PDFsam Enhanced 7\root-service-provider.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\RtfFlt.flt
  • %Program Files%\PDFsam Enhanced 7\scan.exe
  • %Program Files%\PDFsam Enhanced 7\sciter.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SecurePdfSDK.dll
  • %Program Files%\PDFsam Enhanced 7\settings.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\SJISEncoding
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SolidCore.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SolidFrameworkNative.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SolidLanguage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\SolidLists.pdf
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SPal.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SpmlFlt.flt
  • %Program Files%\PDFsam Enhanced 7\stats.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\sticker.normal.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\sticker.pressed.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Templates\StickerNormal
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Templates\StickerPressed
  • %Program Files%\PDFsam Enhanced 7\support.dll
  • %Program Files%\PDFsam Enhanced 7\thumbnail-handler.dll
  • %Program Files%\PDFsam Enhanced 7\tray-app.exe
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\txtFlt.flt
  • %Program Files%\PDFsam Enhanced 7\ucrtbase.dll
  • %Program Files%\PDFsam Enhanced 7\sp\ui\ui.csp
  • %Program Files%\PDFsam Enhanced 7\ui.dll
  • %Program Files%\PDFsam Enhanced 7\ui-actions.dll
  • %Program Files%\PDFsam Enhanced 7\ui-ads.dll
  • %Program Files%\PDFsam Enhanced 7\ui-creator-module.dll
  • %Program Files%\PDFsam Enhanced 7\ui-dialogs.dll
  • %Program Files%\PDFsam Enhanced 7\ui-dialogs-fs.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-frame.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-attachments.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-bookmarks.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-comments.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-forms.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-layers.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-links.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-page-preview.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-properties.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-search.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-signatures.dll
  • %Program Files%\PDFsam Enhanced 7\ui-engine.dll
  • %Program Files%\PDFsam Enhanced 7\ui-floating-toolbar.dll
  • %Program Files%\PDFsam Enhanced 7\ui-main-frame.dll
  • %Program Files%\PDFsam Enhanced 7\ui-options.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\ui-print-plugin.dll
  • %Program Files%\PDFsam Enhanced 7\ui-remover.dll
  • %Program Files%\PDFsam Enhanced 7\ui-ribbon.dll
  • %Program Files%\PDFsam Enhanced 7\ui-scan.dll
  • %Program Files%\PDFsam Enhanced 7\ui-service-provider.dll
  • %Program Files%\PDFsam Enhanced 7\ui-splash.dll
  • %Program Files%\PDFsam Enhanced 7\ui-src.dll
  • %Program Files%\PDFsam Enhanced 7\ui-update.dll
  • %Program Files%\PDFsam Enhanced 7\ui-user-management.dll
  • %Program Files%\PDFsam Enhanced 7\updater-so.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Color\USWebCoatedSWOP.icc
  • %Program Files%\PDFsam Enhanced 7\vccorlib140.dll
  • %Program Files%\PDFsam Enhanced 7\vcruntime140.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\vcruntime140.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\WansungEncoding
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\WdmlFlt.flt
  • %Program Files%\PDFsam Enhanced 7\web-link-store.dll
  • %Program Files%\PDFsam Enhanced 7\webservices-so.dll
  • %Program Files%\PDFsam Enhanced 7\win-specific-services.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\XlsxFlt.flt
  • %Application Data%\PDFsam Enhanced 7\logs\sam_{random characters}.htm
  • %Application Data%\PDFsam Enhanced 7\logs\activation-service_{random characters}.htm
  • %Application Data%\PDFsam Enhanced 7\plugins\config.json
  • %Application Data%\PDFsam Enhanced 7\.dsblupdt.lock

(註：%All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Desktop%フォルダは、現在ログオンしているユーザのデスクトップです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Desktop" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\Desktop" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。)

プログラムは、以下のプロセスを追加します。

  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}.exe /update=start
  • regsvr32.exe /s "%All Users Profile%\PDFsam Enhanced 7\Installation\Statistics.dll"
  • %All Users Profile%\PDFsam Enhanced 7\Installation\PDFsam_Enhanced_7_Installer.exe /RegServer
  • %All Users Profile%\PDFsam Enhanced 7\Installation\PDFsam_Enhanced_7_Installer.exe /update=finish /second-instance
  • regsvr32.exe /u /s "%All Users Profile%\PDFsam Enhanced 7\Installation\Statistics.dll"
  • cmd /c %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}.bat
  • timeout 5
  • regsvr32.exe /s "%All Users Profile%\PDFsam Enhanced 7\Installation\analytics.dll"
  • %Program Files\Internet Explorer\iexplore.exe -nohome

(註：%User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。)

プログラムは、以下のフォルダを作成します。

  • %All Users Profile%\PDFsam Enhanced 7
  • %All Users Profile%\PDFsam Enhanced 7\Installation
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}
  • %Program Files%\PDFsam Enhanced 7
  • %Program Files%\PDFsam Enhanced 7\plugins
  • %Program Files%\PDFsam Enhanced 7\plugins\resources
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin
  • %Program Files%\PDFsam Enhanced 7\resources
  • %Program Files%\PDFsam Enhanced 7\resources\Core
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Color
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings
  • %Program Files%\PDFsam Enhanced 7\localization
  • %Program Files%\PDFsam Enhanced 7\Print
  • %Program Files%\PDFsam Enhanced 7\sp
  • %Program Files%\PDFsam Enhanced 7\sp\bl
  • %Program Files%\PDFsam Enhanced 7\sp\root
  • %Program Files%\PDFsam Enhanced 7\sp\ui
  • %Application Data%\PDFsam Enhanced 7
  • %Application Data%\PDFsam Enhanced 7\plugins
  • %Application Data%\PDFsam Enhanced 7\logs

(註：%All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。)

他のシステム変更

プログラムは、以下のファイルを削除します。

  • %All Users Profile%\PDFsam Enhanced 7\Installation\curl-ca-bundle.crt
  • %All Users Profile%\PDFsam Enhanced 7\Installation\Statistics.dll

(註：%All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。)

その他

プログラムは、以下のレジストリキーを追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\PDFsam Enhanced 7

HKEY_LOCAL_MACHINE\SOFTWARE\PDFsam Enhanced 7\
Installation

HKEY_CURRENT_USER\Software\PDFsam Enhanced 7\
Installation

プログラムは、以下の不正なWebサイトにアクセスします。

  • https://wsgeoip.{BLOCKED}m.org/ipservice.asmx
  • http://jtracking.{BLOCKED}ft.com
  • https://jtracking.{BLOCKED}ft.com/

プログラムは、以下を実行します。

  • It adds and runs the following service:
    • Service Name : PDFsam Enhanced 7
      Launch String : %Program Files%\pdfsam enhanced 7\activation-service.exe
    • Service Name : PDFsam Enhanced 7 Creator
      Launch String : %Program Files%\pdfsam enhanced 7\creator-ws.exe
    • Service Name : PDFsam Enhanced 7 Update Service
      Launch String : %Program Files%\pdfsam enhanced 7\update-service.exe

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。)

以下のスケジュールされたタスクを追加します：

  • Task Name: \Andrea Vacondio\PDFsam Enhanced 7\App Notification
    Task Action: c:\program files\pdfsam enhanced 7\sam-launcher.exe
  • Task Name: \Andrea Vacondio\PDFsam Enhanced 7\App Notification Logon
    Task Action: c:\program files\pdfsam enhanced 7\sam-launcher.exe
  • Task Name: \Andrea Vacondio\PDFsam Enhanced 7\Update
    Task Action: c:\program files\pdfsam enhanced 7\sam.exe

  対応方法

対応検索エンジン: 9.800
SSAPI パターンバージョン: 2.492.00
SSAPI パターンリリース日: 2022年2月24日

手順 1

Windows 7、Windows 8、Windows 8.1、および Windows 10 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

このマルウェアもしくはアドウェア等の実行により、手順中に記載されたすべてのファイル、フォルダおよびレジストリキーや値がコンピュータにインストールされるとは限りません。インストールが不完全である場合の他、オペレーティングシステム（OS）の条件によりインストールがされない場合が考えられます。手順中に記載されたファイル／フォルダ／レジストリ情報が確認されない場合、該当の手順の操作は不要ですので、次の手順に進んでください。

手順 3

Windowsをセーフモードで再起動します。

[ 詳細 ]

手順 4

このレジストリキーを削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • HKEY_LOCAL_MACHINE\SOFTWARE\PDFsam Enhanced 7
  • HKEY_LOCAL_MACHINE\SOFTWARE\PDFsam Enhanced 7\Installation
  • HKEY_CURRENT_USER\Software\PDFsam Enhanced 7\Installation

手順 5

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %All Users Profile%\PDFsam Enhanced 7\Installation\curl-ca-bundle.crt
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs\log.INFO.{random characters}.{random characters}
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}.exe
  • %All Users Profile%\PDFsam Enhanced 7\Installation\Statistics.dll
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}\PDFsam_Enhanced_7_Installer_7.0.49.2295.exe
  • %All Users Profile%\PDFsam Enhanced 7\Installation\PDFsam_Enhanced_7_Installer.exe
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs\log.ERROR.{random characters}.{random characters}
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs\log.WARNING.{random characters}.{random characters}
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}.bat
  • %All Users Profile%\PDFsam Enhanced 7\Installation\analytics.dll
  • %All Users Profile%\PDFsam Enhanced 7\Installation\pdfsam-enhanced-startup-7.0.70.15196-x86.msi
  • %All Users Profile%\PDFsam Enhanced 7\Installation\app-config.json
  • %Desktop%PDFsam Enhanced 7.lnk
  • %Application Data%\Microsoft\Internet Explorer\Quick Launch\PDFsam Enhanced 7.lnk
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeExpertEncoding
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeLatin1Encoding
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeSingleGlyphList
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AdobeStandardEncoding
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-console-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-datetime-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-debug-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-errorhandling-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-file-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-file-l1-2-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-file-l2-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-handle-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-heap-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-interlocked-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-libraryloader-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-localization-l1-2-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-memory-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-namedpipe-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-processenvironment-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-processthreads-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-processthreads-l1-1-1.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-profile-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-string-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-synch-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-synch-l1-2-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-sysinfo-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-timezone-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-core-util-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-conio-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-convert-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-environment-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-filesystem-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-heap-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-locale-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-math-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-multibyte-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-private-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-process-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-runtime-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-stdio-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-string-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-time-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\api-ms-win-crt-utility-l1-1-0.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\AppleRomanEncoding
  • %Program Files%\PDFsam Enhanced 7\localization\Click on 'Change' to select default pdf handler.pdf
  • %Program Files%\PDFsam Enhanced 7\atom.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\Big5Encoding
  • %Program Files%\PDFsam Enhanced 7\sp\bl\bl.csp
  • %Program Files%\PDFsam Enhanced 7\bl.dll
  • %Program Files%\PDFsam Enhanced 7\bl-creator-module.dll
  • %Program Files%\PDFsam Enhanced 7\bl-edit.dll
  • %Program Files%\PDFsam Enhanced 7\bl-scan.dll
  • %Program Files%\PDFsam Enhanced 7\bl-service-provider.dll
  • %Program Files%\PDFsam Enhanced 7\bl-views.dll
  • %Program Files%\PDFsam Enhanced 7\brand.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Scripts\Common.js
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\commonwidths.dat
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\compliance_log.xml
  • %Program Files%\PDFsam Enhanced 7\concrt140.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\concrt140.dll
  • %Program Files%\PDFsam Enhanced 7\context-menu.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\ConverterCoreLight.dll
  • %Program Files%\PDFsam Enhanced 7\crash-handler.dll
  • %Program Files%\PDFsam Enhanced 7\crash-handler-app.exe
  • %Program Files%\PDFsam Enhanced 7\creator-so.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\CsvFlt.flt
  • %Program Files%\PDFsam Enhanced 7\curl-ca-bundle.crt
  • %Program Files%\PDFsam Enhanced 7\D3DCompiler_43.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\dbCore.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\DOCXFlt.flt
  • %Program Files%\PDFsam Enhanced 7\ebook2pdf.dll
  • %Program Files%\PDFsam Enhanced 7\encoding-conversion.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.graph.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.paperclip.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.pushpin.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\file_attachment.tag.txt
  • %Program Files%\PDFsam Enhanced 7\sam.exe
  • %Program Files%\PDFsam Enhanced 7\sam-launcher.exe
  • %Program Files%\PDFsam Enhanced 7\activation-service.exe
  • %Program Files%\PDFsam Enhanced 7\stats-com.exe
  • %Program Files%\PDFsam Enhanced 7\creator-app.exe
  • %Program Files%\PDFsam Enhanced 7\creator-ws.exe
  • %Program Files%\PDFsam Enhanced 7\printer-installer.dll
  • %Program Files%\PDFsam Enhanced 7\printer-installer-app.exe
  • %Program Files%\PDFsam Enhanced 7\ui-notifier.dll
  • %Program Files%\PDFsam Enhanced 7\update-service.exe
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Framework.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\GB2312Encoding
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\GenericRGBProfile.icc
  • %Program Files%\PDFsam Enhanced 7\graphics-service.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\htmFlt.flt
  • %Program Files%\PDFsam Enhanced 7\localization\de\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\en\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\es\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\fr\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\ja\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\pt\icon.png
  • %Program Files%\PDFsam Enhanced 7\localization\ru\icon.png
  • %Program Files%\PDFsam Enhanced 7\resources\Core\icudt58l.dat
  • %Program Files%\PDFsam Enhanced 7\icudt68.dll
  • %Program Files%\PDFsam Enhanced 7\icudt68l.dat
  • %Program Files%\PDFsam Enhanced 7\icuin68.dll
  • %Program Files%\PDFsam Enhanced 7\icuin68d.dll
  • %Program Files%\PDFsam Enhanced 7\icuuc68.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\CMap\Identity-H
  • %Program Files%\PDFsam Enhanced 7\resources\Core\CMap\Identity-V
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\ImageTool.dll
  • %Program Files%\PDFsam Enhanced 7\localization\de\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\en\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\es\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\fr\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\it\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\ja\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\pt\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\ru\info.json
  • %Program Files%\PDFsam Enhanced 7\localization\it\icon.png
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\JohabEncoding
  • %Program Files%\PDFsam Enhanced 7\libcrypto-1_1.dll
  • %Program Files%\PDFsam Enhanced 7\libcurl.dll
  • %Program Files%\PDFsam Enhanced 7\libidn.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\libidn.dll
  • %Program Files%\PDFsam Enhanced 7\libphonenumber.dll
  • %Program Files%\PDFsam Enhanced 7\libssl-1_1.dll
  • %Program Files%\PDFsam Enhanced 7\localization-service.dll
  • %Program Files%\PDFsam Enhanced 7\logger.dll
  • %Program Files%\PDFsam Enhanced 7\localization\de\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\en\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\es\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\fr\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\it\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\ja\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\pt\messages.dat
  • %Program Files%\PDFsam Enhanced 7\localization\ru\messages.dat
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\metadata.xml
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\MSSymbolEncoding
  • %Program Files%\PDFsam Enhanced 7\msvcp140.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\msvcp140.dll
  • %Program Files%\PDFsam Enhanced 7\msvcp140_1.dll
  • %Program Files%\PDFsam Enhanced 7\msvcp140_2.dll
  • %Program Files%\PDFsam Enhanced 7\msvcp140_codecvt_ids.dll
  • %Program Files%\PDFsam Enhanced 7\notification-service.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\ocr.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDF_tagged.xml
  • %Program Files%\PDFsam Enhanced 7\pdf2html.dll
  • %Program Files%\PDFsam Enhanced 7\pdf2image.dll
  • %Program Files%\PDFsam Enhanced 7\Pdf2PdfAPI.dll
  • %Program Files%\PDFsam Enhanced 7\pdf2pdfconv.exe
  • %Program Files%\PDFsam Enhanced 7\pdf2text.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_1a.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_1b.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_2a.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_2b.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_3a.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_3b.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_XMP_1.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_XMP_2.xml
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\PDFA_XMP_3.xml
  • %Program Files%\PDFsam Enhanced 7\pdfcore.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfDbEditor.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfFlt.flt
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfFontMapper.txt
  • %Program Files%\PDFsam Enhanced 7\pdfgraphics.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PDFLibTool.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PdfMeta.dll
  • %Program Files%\PDFsam Enhanced 7\pdfview.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-acroform.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-box-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-dropbox-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-evernote.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-googledrive-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-onboarding-tutorial.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-onedrive-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-pdf-converter.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-pdf-creator.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-pdfa-converter.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-scanner.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-sharepoint-storage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-text-markup.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\plugin-text-to-speech.dll
  • %Program Files%\PDFsam Enhanced 7\plugins-manager.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\PptxFlt.flt
  • %Program Files%\PDFsam Enhanced 7\preview-handler.dll
  • %Program Files%\PDFsam Enhanced 7\rlottie.dll
  • %Program Files%\PDFsam Enhanced 7\sp\root\root.csp
  • %Program Files%\PDFsam Enhanced 7\root-service-provider.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\RtfFlt.flt
  • %Program Files%\PDFsam Enhanced 7\scan.exe
  • %Program Files%\PDFsam Enhanced 7\sciter.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SecurePdfSDK.dll
  • %Program Files%\PDFsam Enhanced 7\settings.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\SJISEncoding
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SolidCore.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SolidFrameworkNative.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SolidLanguage.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\Resources\SolidLists.pdf
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SPal.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\SpmlFlt.flt
  • %Program Files%\PDFsam Enhanced 7\stats.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\sticker.normal.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Icons\sticker.pressed.txt
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Templates\StickerNormal
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Templates\StickerPressed
  • %Program Files%\PDFsam Enhanced 7\support.dll
  • %Program Files%\PDFsam Enhanced 7\thumbnail-handler.dll
  • %Program Files%\PDFsam Enhanced 7\tray-app.exe
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\txtFlt.flt
  • %Program Files%\PDFsam Enhanced 7\ucrtbase.dll
  • %Program Files%\PDFsam Enhanced 7\sp\ui\ui.csp
  • %Program Files%\PDFsam Enhanced 7\ui.dll
  • %Program Files%\PDFsam Enhanced 7\ui-actions.dll
  • %Program Files%\PDFsam Enhanced 7\ui-ads.dll
  • %Program Files%\PDFsam Enhanced 7\ui-creator-module.dll
  • %Program Files%\PDFsam Enhanced 7\ui-dialogs.dll
  • %Program Files%\PDFsam Enhanced 7\ui-dialogs-fs.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-frame.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-attachments.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-bookmarks.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-comments.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-forms.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-layers.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-links.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-page-preview.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-properties.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-search.dll
  • %Program Files%\PDFsam Enhanced 7\ui-document-panel-signatures.dll
  • %Program Files%\PDFsam Enhanced 7\ui-engine.dll
  • %Program Files%\PDFsam Enhanced 7\ui-floating-toolbar.dll
  • %Program Files%\PDFsam Enhanced 7\ui-main-frame.dll
  • %Program Files%\PDFsam Enhanced 7\ui-options.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\ui-print-plugin.dll
  • %Program Files%\PDFsam Enhanced 7\ui-remover.dll
  • %Program Files%\PDFsam Enhanced 7\ui-ribbon.dll
  • %Program Files%\PDFsam Enhanced 7\ui-scan.dll
  • %Program Files%\PDFsam Enhanced 7\ui-service-provider.dll
  • %Program Files%\PDFsam Enhanced 7\ui-splash.dll
  • %Program Files%\PDFsam Enhanced 7\ui-src.dll
  • %Program Files%\PDFsam Enhanced 7\ui-update.dll
  • %Program Files%\PDFsam Enhanced 7\ui-user-management.dll
  • %Program Files%\PDFsam Enhanced 7\updater-so.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Color\USWebCoatedSWOP.icc
  • %Program Files%\PDFsam Enhanced 7\vccorlib140.dll
  • %Program Files%\PDFsam Enhanced 7\vcruntime140.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\vcruntime140.dll
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings\WansungEncoding
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\WdmlFlt.flt
  • %Program Files%\PDFsam Enhanced 7\web-link-store.dll
  • %Program Files%\PDFsam Enhanced 7\webservices-so.dll
  • %Program Files%\PDFsam Enhanced 7\win-specific-services.dll
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin\XlsxFlt.flt
  • %Application Data%\PDFsam Enhanced 7\logs\sam_{random characters}.htm
  • %Application Data%\PDFsam Enhanced 7\logs\activation-service_{random characters}.htm
  • %Application Data%\PDFsam Enhanced 7\plugins\config.json
  • %Application Data%\PDFsam Enhanced 7\.dsblupdt.lock

手順 6

以下のフォルダを検索し削除します。

[ 詳細 ]
フォルダが隠しフォルダ属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %All Users Profile%\PDFsam Enhanced 7
  • %All Users Profile%\PDFsam Enhanced 7\Installation
  • %All Users Profile%\PDFsam Enhanced 7\Installation\logs
  • %User Temp%\{Random characters}-{Random characters}-{Random characters}-{Random characters}-{Random characters}
  • %Program Files%\PDFsam Enhanced 7
  • %Program Files%\PDFsam Enhanced 7\plugins
  • %Program Files%\PDFsam Enhanced 7\plugins\resources
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid
  • %Program Files%\PDFsam Enhanced 7\plugins\resources\solid\bin
  • %Program Files%\PDFsam Enhanced 7\resources
  • %Program Files%\PDFsam Enhanced 7\resources\Core
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Color
  • %Program Files%\PDFsam Enhanced 7\resources\Core\Encodings
  • %Program Files%\PDFsam Enhanced 7\localization
  • %Program Files%\PDFsam Enhanced 7\Print
  • %Program Files%\PDFsam Enhanced 7\sp
  • %Program Files%\PDFsam Enhanced 7\sp\bl
  • %Program Files%\PDFsam Enhanced 7\sp\root
  • %Program Files%\PDFsam Enhanced 7\sp\ui
  • %Application Data%\PDFsam Enhanced 7
  • %Application Data%\PDFsam Enhanced 7\plugins
  • %Application Data%\PDFsam Enhanced 7\logs

手順 7

スケジュールされたタスクを削除する

タスク削除の手順に含まれる{タスク名} - {実行するタスク}には以下が当てはまります。

  • Task Name: \Andrea Vacondio\PDFsam Enhanced 7\App Notification
    Task Action: %Program Files%\pdfsam enhanced 7\sam-launcher.exe
  • Task Name: \Andrea Vacondio\PDFsam Enhanced 7\App Notification Logon
    Task Action:%Program Files%\pdfsam enhanced 7\sam-launcher.exe
  • Task Name: \Andrea Vacondio\PDFsam Enhanced 7\Update
    Task Action: %Program Files%\pdfsam enhanced 7\sam.exe

Windows 2000、Windows XP、Windows Server 2003の場合：

  1. [スタート]→[プログラム]→[アクセサリ]→[システムツール]→[スケジュールされたタスク]をクリックして、スケジュールされたタスクを開きます。
  2. 上記の{タスク名} を、[名前]の欄に入力します。
  3. 入力した{タスク名} 持つファイルを右クリックします。
  4. [プロパティ]をクリックします。 [実行]フィールドで、表示されている{実行するタスク}を確認します。
  5. 上記の{実行するタスク}と文字列が一致するタスクを削除します。

Windows Vista、Windows 7、Windows Server 2008、Windows 8、Windows 8.1、およびWindows Server 2012の場合：

  1. Windowsタスクスケジューラを開きます。
    • Windows Vista、Windows 7、Windows Server 2008の場合、[スタート]をクリックし、[検索]フィールドに「taskchd.msc」と入力してEnterキーを押します。
    • Windows 8、Windows 8.1、Windows Server 2012の場合、画面の左下隅を右クリックし、[実行]をクリックし、「taskchd.msc」と入力してEnterキーを押します。
  2. 左側のパネルで、[タスクスケジューラライブラリ]をクリックします。
  3. 中央上部のパネルで、上記の{タスク名}を[名前]の欄に入力します。
  4. 中央下部のパネルで、[アクション]タブをクリックします。 [詳細]の欄で、{実行するタスク}を確認します。
  5. 文字列が一致するタスクを削除します。

手順 8

このマルウェアのサービスを無効にします。

[ 詳細 ]
    • PDFsam Enhanced 7
    • PDFsam Enhanced 7 Creator
    • PDFsam Enhanced 7 Update Service

手順 9

コンピュータを通常モードで再起動し、最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、「PUA.Win32.LuluSoftware.A」と検出したファイルの検索を実行してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。


ご利用はいかがでしたか？　アンケートにご協力ください