TROJ_KOVTER.DB

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

マルウェアは、実行後、自身を削除します。

侵入方法

その他は、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

その他は、以下のフォルダを作成します。

• %Application Data%\byqi
• %System Root%\_117421_
• %System Root%\981d9a7e2e5778ae34
• %System Root%\981d9a7e2e5778ae34\update

(註：%Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming" です。.. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

他のシステム変更

その他は、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION

HKEY_CURRENT_USER\Software\qanz

HKEY_LOCAL_MACHINE\SOFTWARE\qanz

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate\
OSUpgrade

HKEY_LOCAL_MACHINE\SOFTWARE\FC5CCB959A024000A660

HKEY_LOCAL_MACHINE\SOFTWARE\062E43D025E39BD63381

その他は、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
regsvr32.exe = "22b8"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
iexplore.exe = "22b8"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
regsvr32.exe = "22b8"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
iexplore.exe = "22b8"

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
zojewbdazo = "{random characters}"

HKEY_CURRENT_USER\Software\qanz
zojewbdazo = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate
DisableOSUpgrade = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate\
OSUpgrade
ReservationsAllowed = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
ltpxeirzlt = "cTgW3Z4xA7FLvQ=="

HKEY_CURRENT_USER\Software\qanz
ltpxeirzlt = "IjtC2cVpULiWWQ=="

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
bjtkim = "dGoQiZU6BCVMwOYvmPf5pFLmwOlw720="

HKEY_CURRENT_USER\Software\qanz
bjtkim = "dzFBjsQwBzzEOtM9JkXawYC0vxqn9wU="

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
eljz = "cj9DicI+VwCKvCCZauTIslE="

HKEY_CURRENT_USER\Software\qanz
eljz = "eT9FjsBrALGZvNXnkcR58x4="

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
kqdg = "{random characters}"

HKEY_CURRENT_USER\Software\qanz
kqdg = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\FC5CCB959A024000A660
449426EE1E8802613A = "449426EE1E8802613A"

HKEY_LOCAL_MACHINE\SOFTWARE\062E43D025E39BD63381
4AB6B5041AA3B003 = "4AB6B5041AA3B003"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup
LogLevel = "2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup
LogLevel = "0"

その他は、以下のレジストリ値を変更します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\3
1206 = "0"

(註：変更前の上記レジストリ値は、「3」となります。)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\3
2300 = "0"

(註：変更前の上記レジストリ値は、「1」となります。)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\3
1809 = "3"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\1
1206 = "0"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\1
2300 = "0"

(註：変更前の上記レジストリ値は、「1」となります。)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\1
1809 = "3"

(註：変更前の上記レジストリ値は、「3」となります。)

その他は、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SOFTWARE

作成活動

その他は、以下のファイルを作成します。

• %Application Data%\byqi\byqi.exe
• %User Temp%\WindowsXP-KB968930-x86-ENG.exe
• %System Root%\981d9a7e2e5778ae34\eventforwarding.adm
• %System Root%\981d9a7e2e5778ae34\windowsremotemanagement.adm
• %System Root%\981d9a7e2e5778ae34\windowsremoteshell.adm
• %System Root%\981d9a7e2e5778ae34\windowspowershellhelp.chm
• %System Root%\981d9a7e2e5778ae34\winrm.cmd
• %System Root%\981d9a7e2e5778ae34\compiledcomposition.microsoft.powershell.gpowershell.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.backgroundintelligenttransfer.management.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.backgroundintelligenttransfer.management.interop.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.backgroundintelligenttransfer.management.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.diagnostics.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.diagnostics.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.management.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.management.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.utility.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.utility.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.consolehost.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.consolehost.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.editor.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.editor.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.gpowershell.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.gpowershell.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.graphicalhost.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.graphicalhost.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.security.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.security.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.wsman.management.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.wsman.management.resources.dll
• %System Root%\981d9a7e2e5778ae34\microsoft.wsman.runtime.dll
• %System Root%\981d9a7e2e5778ae34\powershell_ise.resources.dll
• %System Root%\981d9a7e2e5778ae34\pspluginwkr.dll
• %System Root%\981d9a7e2e5778ae34\pwrshmsg.dll
• %System Root%\981d9a7e2e5778ae34\pwrshplugin.dll
• %System Root%\981d9a7e2e5778ae34\pwrshsip.dll
• %System Root%\981d9a7e2e5778ae34\spmsg.dll
• %System Root%\981d9a7e2e5778ae34\system.management.automation.dll
• %System Root%\981d9a7e2e5778ae34\system.management.automation.resources.dll
• %System Root%\981d9a7e2e5778ae34\wevtfwd.dll
• %System Root%\981d9a7e2e5778ae34\winrmprov.dll
• %System Root%\981d9a7e2e5778ae34\winrscmd.dll
• %System Root%\981d9a7e2e5778ae34\winrsmgr.dll
• %System Root%\981d9a7e2e5778ae34\winrssrv.dll
• %System Root%\981d9a7e2e5778ae34\wsmauto.dll
• %System Root%\981d9a7e2e5778ae34\wsmplpxy.dll
• %System Root%\981d9a7e2e5778ae34\wsmres.dll
• %System Root%\981d9a7e2e5778ae34\wsmsvc.dll
• %System Root%\981d9a7e2e5778ae34\wsmwmipl.dll
• %System Root%\981d9a7e2e5778ae34\powershell.exe
• %System Root%\981d9a7e2e5778ae34\powershell_ise.exe
• %System Root%\981d9a7e2e5778ae34\pscustomsetuputil.exe
• %System Root%\981d9a7e2e5778ae34\pssetupnativeutils.exe
• %System Root%\981d9a7e2e5778ae34\spuninst.exe
• %System Root%\981d9a7e2e5778ae34\spupdsvc.exe
• %System Root%\981d9a7e2e5778ae34\winrs.exe
• %System Root%\981d9a7e2e5778ae34\winrshost.exe
• %System Root%\981d9a7e2e5778ae34\wsmanhttpconfig.exe
• %System Root%\981d9a7e2e5778ae34\wsmprovhost.exe
• %System Root%\981d9a7e2e5778ae34\wtrinstaller.ico
• %System Root%\981d9a7e2e5778ae34\winrm.ini
• %System Root%\981d9a7e2e5778ae34\winrmprov.mof
• %System Root%\981d9a7e2e5778ae34\wsmauto.mof
• %System Root%\981d9a7e2e5778ae34\powershell.exe.mui
• %System Root%\981d9a7e2e5778ae34\profile.ps1
• %System Root%\981d9a7e2e5778ae34\bitstransfer.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\certificate.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\diagnostics.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\dotnettypes.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\filesystem.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\getevent.types.ps1xml
• %System Root%\981d9a7e2e5778ae34\help.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\powershellcore.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\powershelltrace.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\registry.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\types.ps1xml
• %System Root%\981d9a7e2e5778ae34\wsman.format.ps1xml
• %System Root%\981d9a7e2e5778ae34\bitstransfer.psd1
• %System Root%\981d9a7e2e5778ae34\importallmodules.psd1
• %System Root%\981d9a7e2e5778ae34\about_aliases.help.txt
• %System Root%\981d9a7e2e5778ae34\about_arithmetic_operators.help.txt
• %System Root%\981d9a7e2e5778ae34\about_arrays.help.txt
• %System Root%\981d9a7e2e5778ae34\about_assignment_operators.help.txt
• %System Root%\981d9a7e2e5778ae34\about_automatic_variables.help.txt
• %System Root%\981d9a7e2e5778ae34\about_bits_cmdlets.help.txt
• %System Root%\981d9a7e2e5778ae34\about_break.help.txt
• %System Root%\981d9a7e2e5778ae34\about_command_precedence.help.txt
• %System Root%\981d9a7e2e5778ae34\about_command_syntax.help.txt
• %System Root%\981d9a7e2e5778ae34\about_comment_based_help.help.txt
• %System Root%\981d9a7e2e5778ae34\about_commonparameters.help.txt
• %System Root%\981d9a7e2e5778ae34\about_comparison_operators.help.txt
• %System Root%\981d9a7e2e5778ae34\about_continue.help.txt
• %System Root%\981d9a7e2e5778ae34\about_core_commands.help.txt
• %System Root%\981d9a7e2e5778ae34\about_data_sections.help.txt
• %System Root%\981d9a7e2e5778ae34\about_debuggers.help.txt
• %System Root%\981d9a7e2e5778ae34\about_do.help.txt
• %System Root%\981d9a7e2e5778ae34\about_environment_variables.help.txt
• %System Root%\981d9a7e2e5778ae34\about_escape_characters.help.txt
• %System Root%\981d9a7e2e5778ae34\about_eventlogs.help.txt
• %System Root%\981d9a7e2e5778ae34\about_execution_policies.help.txt
• %System Root%\981d9a7e2e5778ae34\about_for.help.txt
• %System Root%\981d9a7e2e5778ae34\about_foreach.help.txt
• %System Root%\981d9a7e2e5778ae34\about_format.ps1xml.help.txt
• %System Root%\981d9a7e2e5778ae34\about_functions.help.txt
• %System Root%\981d9a7e2e5778ae34\about_functions_advanced.help.txt
• %System Root%\981d9a7e2e5778ae34\about_functions_advanced_methods.help.txt
• %System Root%\981d9a7e2e5778ae34\about_functions_advanced_parameters.help.txt
• %System Root%\981d9a7e2e5778ae34\about_functions_cmdletbindingattribute.help.txt
• %System Root%\981d9a7e2e5778ae34\about_hash_tables.help.txt
• %System Root%\981d9a7e2e5778ae34\about_history.help.txt
• %System Root%\981d9a7e2e5778ae34\about_if.help.txt
• %System Root%\981d9a7e2e5778ae34\about_job_details.help.txt
• %System Root%\981d9a7e2e5778ae34\about_jobs.help.txt
• %System Root%\981d9a7e2e5778ae34\about_join.help.txt
• %System Root%\981d9a7e2e5778ae34\about_language_keywords.help.txt
• %System Root%\981d9a7e2e5778ae34\about_line_editing.help.txt
• %System Root%\981d9a7e2e5778ae34\about_locations.help.txt
• %System Root%\981d9a7e2e5778ae34\about_logical_operators.help.txt
• %System Root%\981d9a7e2e5778ae34\about_methods.help.txt
• %System Root%\981d9a7e2e5778ae34\about_modules.help.txt
• %System Root%\981d9a7e2e5778ae34\about_objects.help.txt
• %System Root%\981d9a7e2e5778ae34\about_operators.help.txt
• %System Root%\981d9a7e2e5778ae34\about_parameters.help.txt
• %System Root%\981d9a7e2e5778ae34\about_parsing.help.txt
• %System Root%\981d9a7e2e5778ae34\about_path_syntax.help.txt
• %System Root%\981d9a7e2e5778ae34\about_pipelines.help.txt
• %System Root%\981d9a7e2e5778ae34\about_preference_variables.help.txt
• %System Root%\981d9a7e2e5778ae34\about_profiles.help.txt
• %System Root%\981d9a7e2e5778ae34\about_prompts.help.txt
• %System Root%\981d9a7e2e5778ae34\about_properties.help.txt
• %System Root%\981d9a7e2e5778ae34\about_providers.help.txt
• %System Root%\981d9a7e2e5778ae34\about_pssession_details.help.txt
• %System Root%\981d9a7e2e5778ae34\about_pssessions.help.txt
• %System Root%\981d9a7e2e5778ae34\about_pssnapins.help.txt
• %System Root%\981d9a7e2e5778ae34\about_quoting_rules.help.txt
• %System Root%\981d9a7e2e5778ae34\about_redirection.help.txt
• %System Root%\981d9a7e2e5778ae34\about_ref.help.txt
• %System Root%\981d9a7e2e5778ae34\about_regular_expressions.help.txt
• %System Root%\981d9a7e2e5778ae34\about_remote.help.txt
• %System Root%\981d9a7e2e5778ae34\about_remote_faq.help.txt
• %System Root%\981d9a7e2e5778ae34\about_remote_jobs.help.txt
• %System Root%\981d9a7e2e5778ae34\about_remote_output.help.txt
• %System Root%\981d9a7e2e5778ae34\about_remote_requirements.help.txt
• %System Root%\981d9a7e2e5778ae34\about_remote_troubleshooting.help.txt
• %System Root%\981d9a7e2e5778ae34\about_requires.help.txt
• %System Root%\981d9a7e2e5778ae34\about_reserved_words.help.txt
• %System Root%\981d9a7e2e5778ae34\about_return.help.txt
• %System Root%\981d9a7e2e5778ae34\about_scopes.help.txt
• %System Root%\981d9a7e2e5778ae34\about_script_blocks.help.txt
• %System Root%\981d9a7e2e5778ae34\about_script_internationalization.help.txt
• %System Root%\981d9a7e2e5778ae34\about_scripts.help.txt
• %System Root%\981d9a7e2e5778ae34\about_session_configurations.help.txt
• %System Root%\981d9a7e2e5778ae34\about_signing.help.txt
• %System Root%\981d9a7e2e5778ae34\about_special_characters.help.txt
• %System Root%\981d9a7e2e5778ae34\about_split.help.txt
• %System Root%\981d9a7e2e5778ae34\about_switch.help.txt
• %System Root%\981d9a7e2e5778ae34\about_throw.help.txt
• %System Root%\981d9a7e2e5778ae34\about_transactions.help.txt
• %System Root%\981d9a7e2e5778ae34\about_trap.help.txt
• %System Root%\981d9a7e2e5778ae34\about_try_catch_finally.help.txt
• %System Root%\981d9a7e2e5778ae34\about_type_operators.help.txt
• %System Root%\981d9a7e2e5778ae34\about_types.ps1xml.help.txt
• %System Root%\981d9a7e2e5778ae34\about_variables.help.txt
• %System Root%\981d9a7e2e5778ae34\about_while.help.txt
• %System Root%\981d9a7e2e5778ae34\about_wildcards.help.txt
• %System Root%\981d9a7e2e5778ae34\about_windows_powershell_2.0.help.txt
• %System Root%\981d9a7e2e5778ae34\about_windows_powershell_ise.help.txt
• %System Root%\981d9a7e2e5778ae34\about_wmi_cmdlets.help.txt
• %System Root%\981d9a7e2e5778ae34\about_ws-management_cmdlets.help.txt
• %System Root%\981d9a7e2e5778ae34\default.help.txt
• %System Root%\981d9a7e2e5778ae34\winrm.vbs
• %System Root%\981d9a7e2e5778ae34\microsoft.backgroundintelligenttransfer.management.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.diagnostics.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.management.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.commands.utility.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.consolehost.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\microsoft.powershell.security.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\microsoft.wsman.management.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\system.management.automation.dll-help.xml
• %System Root%\981d9a7e2e5778ae34\wsmpty.xsl
• %System Root%\981d9a7e2e5778ae34\wsmtxt.xsl
• %System Root%\981d9a7e2e5778ae34\update\kb968930xp.cat
• %System Root%\981d9a7e2e5778ae34\update\spcustom.dll
• %System Root%\981d9a7e2e5778ae34\update\updspapi.dll
• %System Root%\981d9a7e2e5778ae34\update\update.exe
• %System Root%\981d9a7e2e5778ae34\update\update.inf
• %System Root%\981d9a7e2e5778ae34\update\eula.txt
• %System Root%\981d9a7e2e5778ae34\update\update.ver
• %System Root%\981d9a7e2e5778ae34\$shtdwn$.req

その他

その他は、以下の不正なWebサイトにアクセスします。

• http://{BLOCKED}7.72.90
• http://{BLOCKED}7.72.90/{random path}
• {BLOCKED}7.80.161
• {BLOCKED}134.188
• {BLOCKED}6.72.48
• {BLOCKED}6.116.22
• {BLOCKED}52.53
• {BLOCKED}.140.34
• {BLOCKED}.23.224
• {BLOCKED}4.76.218
• {BLOCKED}3.160.56
• {BLOCKED}1.75.104
• {BLOCKED}0.36.45
• {BLOCKED}6.122.204
• {BLOCKED}.242.184
• {BLOCKED}.216.186
• {BLOCKED}.112.39
• {BLOCKED}53.23
• {BLOCKED}.162.62
• {BLOCKED}5.92.6
• {BLOCKED}6.255.23
• {BLOCKED}2.155.176
• {BLOCKED}7.72.84
• {BLOCKED}.90.12
• {BLOCKED}.184.61
• {BLOCKED}.58.96
• {BLOCKED}129.215
• {BLOCKED}.206.120
• {BLOCKED}2.241.177
• {BLOCKED}79.240
• {BLOCKED}.197.200
• {BLOCKED}.128.146
• {BLOCKED}.143.32
• {BLOCKED}.88.237
• {BLOCKED}.28.250
• {BLOCKED}.240.222
• {BLOCKED}36.75
• {BLOCKED}9.73.200
• {BLOCKED}51.173
• {BLOCKED}239.119
• {BLOCKED}4.51.42
• {BLOCKED}0.186.166
• {BLOCKED}.78.67
• {BLOCKED}.35.206
• {BLOCKED}224.21
• {BLOCKED}106.47
• {BLOCKED}1.250.246
• {BLOCKED}.134.42
• {BLOCKED}221.190
• {BLOCKED}.51.182
• {BLOCKED}7.76.157
• {BLOCKED}0.37.41
• {BLOCKED}202.204
• {BLOCKED}6.209.6
• {BLOCKED}.201.4
• {BLOCKED}7.138.142
• {BLOCKED}.150.213
• {BLOCKED}0.171.25
• {BLOCKED}.74.20
• {BLOCKED}.247.44
• {BLOCKED}7.60.83
• {BLOCKED}.67.252
• {BLOCKED}.158.193
• {BLOCKED}.158.134
• {BLOCKED}8.85.59
• {BLOCKED}.174.191
• {BLOCKED}1.33.14
• {BLOCKED}8.211.184
• {BLOCKED}.246.199
• {BLOCKED}233.25
• {BLOCKED}5.139.223
• {BLOCKED}97.206
• {BLOCKED}8.184.190
• {BLOCKED}2.41.254
• {BLOCKED}0.160.206
• {BLOCKED}.177.2
• {BLOCKED}3.125.239
• {BLOCKED}.155.145
• {BLOCKED}.203.62
• {BLOCKED}.115.227
• {BLOCKED}.189.228
• {BLOCKED}7.216.36
• {BLOCKED}31.79
• {BLOCKED}80.100
• {BLOCKED}166.150
• {BLOCKED}119.55
• {BLOCKED}.42.169
• {BLOCKED}141.78
• {BLOCKED}.159
• {BLOCKED}9.201.25
• {BLOCKED}.77.45
• {BLOCKED}5.247.208
• {BLOCKED}226.109
• {BLOCKED}3.255.180
• {BLOCKED}.211.209
• {BLOCKED}8.215.202
• {BLOCKED}6.96.251
• {BLOCKED}.222.52
• {BLOCKED}4.174.219
• {BLOCKED}0.231.247
• {BLOCKED}4.33.33
• {BLOCKED}17.109
• {BLOCKED}.53.20
• {BLOCKED}1.189.219
• {BLOCKED}.118.142
• {BLOCKED}2.77.85
• {BLOCKED}6.40.41
• {BLOCKED}2.97
• {BLOCKED}.216.28
• {BLOCKED}6.223.253
• {BLOCKED}6.4.210
• {BLOCKED}0.3.125
• {BLOCKED}88.90
• {BLOCKED}.25.8
• {BLOCKED}6.252.60
• {BLOCKED}1.249.48
• {BLOCKED}0.98.119
• {BLOCKED}.76.25
• {BLOCKED}27.205
• {BLOCKED}.138.148
• {BLOCKED}.175.220
• {BLOCKED}7.95.70
• {BLOCKED}8.175.21
• {BLOCKED}2.135.109
• {BLOCKED}0.133.18
• {BLOCKED}43.29
• {BLOCKED}2.205.246
• {BLOCKED}159.44
• {BLOCKED}.97.195
• {BLOCKED}1.41.101
• {BLOCKED}9.202.169
• {BLOCKED}190.157
• {BLOCKED}.254.90
• {BLOCKED}.63.102
• {BLOCKED}.239.248
• {BLOCKED}0.180.218
• {BLOCKED}4.192.134
• {BLOCKED}6.243.50
• {BLOCKED}7.80.189
• {BLOCKED}137.122
• {BLOCKED}1.92.54
• {BLOCKED}2.131.1
• {BLOCKED}5.20.49
• {BLOCKED}5.71
• {BLOCKED}.198.51
• {BLOCKED}4.250.66
• {BLOCKED}5.224.255
• {BLOCKED}.153.238
• {BLOCKED}28.44
• {BLOCKED}6.160.6
• {BLOCKED}4.176.67
• {BLOCKED}8.10.188
• {BLOCKED}9.136.128
• {BLOCKED}.67.15
• {BLOCKED}.54.76
• {BLOCKED}8.176.96
• {BLOCKED}119.25
• {BLOCKED}.132.114
• {BLOCKED}.69.38
• {BLOCKED}7.168.39
• {BLOCKED}62.201
• {BLOCKED}7.177.104
• {BLOCKED}.95.58
• {BLOCKED}.117.156
• {BLOCKED}.167.85
• {BLOCKED}8.85.202
• {BLOCKED}8.80
• {BLOCKED}.228.36
• {BLOCKED}.106.234
• {BLOCKED}3.183.167
• {BLOCKED}.247.130
• {BLOCKED}2.206.223
• {BLOCKED}.38.101
• {BLOCKED}.85.37
• {BLOCKED}5.171.161
• {BLOCKED}2.36.221
• {BLOCKED}9.226.118
• {BLOCKED}.58.47
• {BLOCKED}.24.45
• {BLOCKED}.75.181
• {BLOCKED}3.88.214
• {BLOCKED}.6.157
• {BLOCKED}.210.179
• {BLOCKED}.149.81
• {BLOCKED}136.82
• {BLOCKED}1.98.220
• {BLOCKED}.249.86
• {BLOCKED}226.3
• {BLOCKED}.91.156
• {BLOCKED}0.90.92
• {BLOCKED}.70.120
• {BLOCKED}.99.247
• {BLOCKED}.21.240
• {BLOCKED}118.195
• {BLOCKED}.49.182
• {BLOCKED}.148.2
• {BLOCKED}192.57
• {BLOCKED}57.70
• {BLOCKED}.230.51
• {BLOCKED}6.157.57
• {BLOCKED}.34.145
• {BLOCKED}5.173.218
• {BLOCKED}.227.90
• {BLOCKED}8.253.117
• {BLOCKED}.104.44
• {BLOCKED}68.122
• {BLOCKED}7.120.212
• {BLOCKED}5.123.179
• {BLOCKED}.39.216
• {BLOCKED}194.148
• {BLOCKED}.116.16
• {BLOCKED}116.32
• {BLOCKED}.60.193
• {BLOCKED}151.234
• {BLOCKED}2.79.221
• {BLOCKED}.99.209
• {BLOCKED}0.107.145
• {BLOCKED}.26.148
• {BLOCKED}110.47
• {BLOCKED}7.194.98
• {BLOCKED}.130.231
• {BLOCKED}.171.24
• {BLOCKED}4.121.102
• {BLOCKED}0.131.146
• {BLOCKED}.126.130
• {BLOCKED}.118.81
• {BLOCKED}.189.43
• {BLOCKED}.229.82
• {BLOCKED}1.142.6
• {BLOCKED}170.12

その他は、実行後、自身を削除します。

このウイルス情報は、自動解析システムにより作成されました。