WORM_PRASH.DEM
HEUR:Trojan.Win32.Generic (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt)
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
マルウェアタイプ:
ワーム
破壊活動の有無:
なし
暗号化:
感染報告の有無 :
はい
概要
ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。
詳細
侵入方法
ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。
自動実行方法
ワームは、自身のコピーがWindows起動時に自動実行されるよう以下のレジストリ値を追加します。
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
bootStart = "{malware path and file name}"
他のシステム変更
ワームは、以下のファイルを削除します。
- %User Profile%\Templates\Tcpz-x86.sys
(註:%User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザ名>"、Windows Vista および 7 の場合、"C:\Users\<ユーザ名>" です。)
その他
ワームは、以下の不正なWebサイトにアクセスします。
- {BLOCKED}.127.134
- {BLOCKED}5.3
- {BLOCKED}5.10
- {BLOCKED}5.6
- {BLOCKED}5.15
- {BLOCKED}5.8
- {BLOCKED}5.16
- {BLOCKED}5.9
- {BLOCKED}5.14
- {BLOCKED}5.4
- {BLOCKED}5.7
- {BLOCKED}5.12
- {BLOCKED}5.13
- {BLOCKED}5.11
- {BLOCKED}5.2
- {BLOCKED}5.5
- {BLOCKED}5.17
- {BLOCKED}5.18
- {BLOCKED}5.19
- {BLOCKED}5.20
- {BLOCKED}5.21
- {BLOCKED}5.22
- {BLOCKED}5.23
- {BLOCKED}5.24
- {BLOCKED}5.25
- {BLOCKED}5.26
- {BLOCKED}5.27
- {BLOCKED}5.28
- {BLOCKED}5.29
- {BLOCKED}5.30
- {BLOCKED}5.31
- {BLOCKED}5.32
- {BLOCKED}5.33
- {BLOCKED}5.34
- {BLOCKED}5.35
- {BLOCKED}5.36
- {BLOCKED}5.37
- {BLOCKED}5.38
- {BLOCKED}5.39
- {BLOCKED}5.40
- {BLOCKED}5.41
- {BLOCKED}5.42
- {BLOCKED}5.43
- {BLOCKED}5.44
- {BLOCKED}5.45
- {BLOCKED}5.46
- {BLOCKED}5.47
- {BLOCKED}5.48
- {BLOCKED}5.49
- {BLOCKED}5.50
- {BLOCKED}5.51
- {BLOCKED}5.52
- {BLOCKED}5.53
- {BLOCKED}5.54
- {BLOCKED}5.55
- {BLOCKED}5.56
- {BLOCKED}5.57
- {BLOCKED}5.58
- {BLOCKED}5.59
- {BLOCKED}5.60
- {BLOCKED}5.61
- {BLOCKED}5.62
- {BLOCKED}5.63
- {BLOCKED}5.64
- {BLOCKED}5.65
- {BLOCKED}5.66
- {BLOCKED}5.67
- {BLOCKED}5.68
- {BLOCKED}5.69
- {BLOCKED}5.70
- {BLOCKED}5.71
- {BLOCKED}5.72
- {BLOCKED}5.73
- {BLOCKED}5.74
- {BLOCKED}5.75
- {BLOCKED}5.76
- {BLOCKED}5.77
- {BLOCKED}5.78
- {BLOCKED}5.79
- {BLOCKED}5.80
- {BLOCKED}5.81
- {BLOCKED}5.82
- {BLOCKED}5.83
- {BLOCKED}5.84
- {BLOCKED}5.85
- {BLOCKED}5.86
- {BLOCKED}5.87
- {BLOCKED}5.88
- {BLOCKED}5.89
- {BLOCKED}5.90
- {BLOCKED}5.91
- {BLOCKED}5.92
- {BLOCKED}5.93
- {BLOCKED}5.94
- {BLOCKED}5.95
- {BLOCKED}5.96
- {BLOCKED}5.97
- {BLOCKED}5.98
- {BLOCKED}5.99
- {BLOCKED}5.100
- {BLOCKED}5.101
- {BLOCKED}5.102
- {BLOCKED}5.103
- {BLOCKED}5.104
- {BLOCKED}5.105
- {BLOCKED}5.106
- {BLOCKED}5.107
- {BLOCKED}5.108
- {BLOCKED}5.109
- {BLOCKED}5.110
- {BLOCKED}5.111
- {BLOCKED}5.112
- {BLOCKED}5.113
- {BLOCKED}5.114
- {BLOCKED}5.115
- {BLOCKED}5.116
- {BLOCKED}5.117
- {BLOCKED}5.118
- {BLOCKED}5.119
- {BLOCKED}5.120
- {BLOCKED}5.121
- {BLOCKED}5.122
- {BLOCKED}5.123
- {BLOCKED}5.124
- {BLOCKED}5.125
- {BLOCKED}5.126
- {BLOCKED}5.127
- {BLOCKED}5.128
- {BLOCKED}5.129
- {BLOCKED}5.130
- {BLOCKED}5.131
- {BLOCKED}5.132
- {BLOCKED}5.133
- {BLOCKED}5.134
- {BLOCKED}5.135
- {BLOCKED}5.136
- {BLOCKED}5.137
- {BLOCKED}5.138
- {BLOCKED}5.139
- {BLOCKED}5.140
- {BLOCKED}5.141
- {BLOCKED}5.142
- {BLOCKED}5.143
- {BLOCKED}5.144
- {BLOCKED}5.145
- {BLOCKED}5.146
- {BLOCKED}5.147
- {BLOCKED}5.148
- {BLOCKED}5.149
- {BLOCKED}5.150
- {BLOCKED}5.151
- {BLOCKED}5.152
- {BLOCKED}5.153
- {BLOCKED}5.154
- {BLOCKED}5.155
- {BLOCKED}5.156
- {BLOCKED}5.157
- {BLOCKED}5.158
- {BLOCKED}5.159
- {BLOCKED}5.160
- {BLOCKED}5.161
- {BLOCKED}5.162
- {BLOCKED}5.163
- {BLOCKED}5.164
- {BLOCKED}5.165
- {BLOCKED}5.166
- {BLOCKED}5.167
- {BLOCKED}5.168
- {BLOCKED}5.169
- {BLOCKED}5.170
- {BLOCKED}5.171
- {BLOCKED}5.172
- {BLOCKED}5.173
- {BLOCKED}5.174
- {BLOCKED}5.175
- {BLOCKED}5.176
- {BLOCKED}5.177
- {BLOCKED}5.178
- {BLOCKED}5.179
- {BLOCKED}5.180
- {BLOCKED}5.181
- {BLOCKED}5.182
- {BLOCKED}5.183
- {BLOCKED}5.184
- {BLOCKED}5.185
- {BLOCKED}5.186
- {BLOCKED}5.187
- {BLOCKED}5.188
- {BLOCKED}5.189
- {BLOCKED}5.190
- {BLOCKED}5.191
- {BLOCKED}5.192
- {BLOCKED}5.193
- {BLOCKED}5.194
- {BLOCKED}5.195
- {BLOCKED}5.196
- {BLOCKED}5.197
- {BLOCKED}5.198
- {BLOCKED}5.199
- {BLOCKED}5.200
- {BLOCKED}5.201
- {BLOCKED}5.202
- {BLOCKED}5.203
- {BLOCKED}5.204
- {BLOCKED}5.205
- {BLOCKED}5.206
- {BLOCKED}5.207
- {BLOCKED}5.208
- {BLOCKED}5.209
- {BLOCKED}5.210
- {BLOCKED}5.211
- {BLOCKED}5.212
- {BLOCKED}5.213
- {BLOCKED}5.214
- {BLOCKED}5.215
- {BLOCKED}5.216
- {BLOCKED}5.217
- {BLOCKED}5.218
- {BLOCKED}5.219
- {BLOCKED}5.220
- {BLOCKED}5.221
- {BLOCKED}5.222
- {BLOCKED}5.223
- {BLOCKED}5.224
- {BLOCKED}5.225
- {BLOCKED}5.226
- {BLOCKED}5.227
- {BLOCKED}5.228
- {BLOCKED}5.229
- {BLOCKED}5.230
- {BLOCKED}5.231
- {BLOCKED}5.232
- {BLOCKED}5.233
- {BLOCKED}5.234
- {BLOCKED}5.235
- {BLOCKED}5.236
- {BLOCKED}5.237
- {BLOCKED}5.238
- {BLOCKED}5.239
- {BLOCKED}5.240
- {BLOCKED}5.241
- {BLOCKED}5.242
- {BLOCKED}5.243
- {BLOCKED}5.244
- {BLOCKED}5.245
- {BLOCKED}5.246
- {BLOCKED}5.247
- {BLOCKED}5.248
- {BLOCKED}5.249
- {BLOCKED}5.250
- {BLOCKED}5.251
- {BLOCKED}5.252
- {BLOCKED}5.253
- {BLOCKED}5.254
- {BLOCKED}5.255
- {BLOCKED}6.0
- {BLOCKED}6.1
- {BLOCKED}6.2
- {BLOCKED}6.3
- {BLOCKED}6.4
- {BLOCKED}6.5
- {BLOCKED}6.6
- {BLOCKED}6.7
- {BLOCKED}6.8
- {BLOCKED}6.9
- {BLOCKED}6.10
- {BLOCKED}6.11
- {BLOCKED}6.12
- {BLOCKED}6.13
- {BLOCKED}6.14
- {BLOCKED}6.15
- {BLOCKED}6.16
- {BLOCKED}6.17
- {BLOCKED}6.18
- {BLOCKED}6.19
- {BLOCKED}6.20
- {BLOCKED}6.21
- {BLOCKED}6.22
- {BLOCKED}6.23
- {BLOCKED}6.24
- {BLOCKED}6.25
- {BLOCKED}6.26
- {BLOCKED}6.27
- {BLOCKED}6.28
- {BLOCKED}6.29
- {BLOCKED}6.30
- {BLOCKED}6.31
- {BLOCKED}6.32
- {BLOCKED}6.33
- {BLOCKED}6.34
- {BLOCKED}6.35
- {BLOCKED}6.36
- {BLOCKED}6.37
- {BLOCKED}6.38
- {BLOCKED}6.39
- {BLOCKED}6.40
- {BLOCKED}6.41
- {BLOCKED}6.42
- {BLOCKED}6.43
- {BLOCKED}6.44
- {BLOCKED}6.45
- {BLOCKED}6.46
- {BLOCKED}6.47
- {BLOCKED}6.48
- {BLOCKED}6.49
- {BLOCKED}6.50
- {BLOCKED}6.51
- {BLOCKED}6.52
- {BLOCKED}6.53
- {BLOCKED}6.54
- {BLOCKED}6.55
- {BLOCKED}6.56
- {BLOCKED}6.57
- {BLOCKED}6.58
- {BLOCKED}6.59
- {BLOCKED}6.60
- {BLOCKED}6.61
- {BLOCKED}6.62
- {BLOCKED}6.63
- {BLOCKED}6.64
- {BLOCKED}6.65
- {BLOCKED}6.66
- {BLOCKED}6.67
- {BLOCKED}6.68
- {BLOCKED}6.69
- {BLOCKED}6.70
- {BLOCKED}6.71
- {BLOCKED}6.72
- {BLOCKED}6.73
- {BLOCKED}6.74
- {BLOCKED}6.75
- {BLOCKED}6.76
- {BLOCKED}6.77
- {BLOCKED}6.78
- {BLOCKED}6.79
- {BLOCKED}6.80
- {BLOCKED}6.81
- {BLOCKED}6.82
- {BLOCKED}6.83
- {BLOCKED}6.84
- {BLOCKED}6.85
- {BLOCKED}6.86
- {BLOCKED}6.87
- {BLOCKED}6.88
- {BLOCKED}6.89
- {BLOCKED}6.90
- {BLOCKED}6.91
- {BLOCKED}6.92
- {BLOCKED}6.93
- {BLOCKED}6.94
- {BLOCKED}6.95
- {BLOCKED}6.96
- {BLOCKED}6.97
- {BLOCKED}6.98
- {BLOCKED}6.99
- {BLOCKED}6.100
- {BLOCKED}6.101
- {BLOCKED}6.102
- {BLOCKED}6.103
- {BLOCKED}6.104
- {BLOCKED}6.105
- {BLOCKED}6.106
- {BLOCKED}6.107
- {BLOCKED}6.108
- {BLOCKED}6.109
- {BLOCKED}6.110
- {BLOCKED}6.111
- {BLOCKED}6.112
- {BLOCKED}6.113
- {BLOCKED}6.114
- {BLOCKED}6.115
- {BLOCKED}6.116
- {BLOCKED}6.117
- {BLOCKED}6.118
- {BLOCKED}6.119
- {BLOCKED}6.120
- {BLOCKED}6.121
- {BLOCKED}6.122
- {BLOCKED}6.123
- {BLOCKED}6.124
- {BLOCKED}6.125
- {BLOCKED}6.126
- {BLOCKED}6.127
- {BLOCKED}6.128
- {BLOCKED}6.129
- {BLOCKED}6.130
- {BLOCKED}6.131
- {BLOCKED}6.132
- {BLOCKED}6.133
- {BLOCKED}6.134
- {BLOCKED}6.135
- {BLOCKED}6.136
- {BLOCKED}6.137
- {BLOCKED}6.138
- {BLOCKED}6.139
- {BLOCKED}6.140
- {BLOCKED}6.141
- {BLOCKED}6.142
- {BLOCKED}6.143
- {BLOCKED}6.144
- {BLOCKED}6.145
- {BLOCKED}6.146
- {BLOCKED}6.147
- {BLOCKED}6.148
- {BLOCKED}6.149
- {BLOCKED}6.150
- {BLOCKED}6.151
- {BLOCKED}6.152
- {BLOCKED}6.153
- {BLOCKED}6.154
- {BLOCKED}6.155
- {BLOCKED}6.156
- {BLOCKED}6.157
- {BLOCKED}6.158
- {BLOCKED}6.159
- {BLOCKED}6.160
- {BLOCKED}6.161
- {BLOCKED}6.162
- {BLOCKED}6.163
- {BLOCKED}6.164
- {BLOCKED}6.165
- {BLOCKED}6.166
- {BLOCKED}6.167
- {BLOCKED}6.168
- {BLOCKED}6.169
- {BLOCKED}6.170
- {BLOCKED}6.171
- {BLOCKED}6.172
- {BLOCKED}6.173
- {BLOCKED}6.174
- {BLOCKED}6.175
- {BLOCKED}6.176
- {BLOCKED}6.177
- {BLOCKED}6.178
- {BLOCKED}6.179
- {BLOCKED}6.180
- {BLOCKED}6.181
- {BLOCKED}6.182
- {BLOCKED}6.183
- {BLOCKED}6.184
- {BLOCKED}6.185
- {BLOCKED}6.186
- {BLOCKED}6.187
- {BLOCKED}6.188
- {BLOCKED}6.189
- {BLOCKED}6.190
- {BLOCKED}6.191
- {BLOCKED}6.192
- {BLOCKED}6.193
- {BLOCKED}6.194
- {BLOCKED}6.195
- {BLOCKED}6.196
- {BLOCKED}6.197
- {BLOCKED}6.198
- {BLOCKED}6.199
- {BLOCKED}6.200
- {BLOCKED}6.201
- {BLOCKED}6.202
- {BLOCKED}6.203
- {BLOCKED}6.204
- {BLOCKED}6.205
- {BLOCKED}6.206
- {BLOCKED}6.207
- {BLOCKED}6.208
- {BLOCKED}6.209
- {BLOCKED}6.210
- {BLOCKED}6.211
- {BLOCKED}6.212
- {BLOCKED}6.213
- {BLOCKED}6.214
- {BLOCKED}6.215
- {BLOCKED}6.216
- {BLOCKED}6.217
- {BLOCKED}6.218
- {BLOCKED}6.219
- {BLOCKED}6.220
- {BLOCKED}6.221
- {BLOCKED}6.222
- {BLOCKED}6.223
- {BLOCKED}6.224
- {BLOCKED}6.225
- {BLOCKED}6.226
- {BLOCKED}6.227
- {BLOCKED}6.228
- {BLOCKED}6.229
- {BLOCKED}6.230
- {BLOCKED}6.231
- {BLOCKED}6.232
- {BLOCKED}6.233
- {BLOCKED}6.234
- {BLOCKED}6.235
- {BLOCKED}6.236
- {BLOCKED}6.237
- {BLOCKED}6.238
- {BLOCKED}6.239
- {BLOCKED}6.240
- {BLOCKED}6.241
- {BLOCKED}6.242
- {BLOCKED}6.243
- {BLOCKED}6.244
- {BLOCKED}6.245
- {BLOCKED}6.246
- {BLOCKED}6.247
- {BLOCKED}6.248
- {BLOCKED}6.249
- {BLOCKED}6.250
- {BLOCKED}6.251
- {BLOCKED}6.252
- {BLOCKED}6.253
- {BLOCKED}6.254
- {BLOCKED}6.255
- {BLOCKED}7.0
- {BLOCKED}7.1
- {BLOCKED}7.2
- {BLOCKED}7.3
- {BLOCKED}7.4
- {BLOCKED}7.5
- {BLOCKED}7.6
- {BLOCKED}7.7
- {BLOCKED}7.8
- {BLOCKED}7.9
- {BLOCKED}7.10
- {BLOCKED}7.11
- {BLOCKED}7.12
- {BLOCKED}7.13
- {BLOCKED}7.14
- {BLOCKED}7.15
- {BLOCKED}7.16
- {BLOCKED}7.17
- {BLOCKED}7.18
- {BLOCKED}7.19
- {BLOCKED}7.20
- {BLOCKED}7.21
- {BLOCKED}7.22
- {BLOCKED}7.23
- {BLOCKED}7.24
- {BLOCKED}7.25
- {BLOCKED}7.26
- {BLOCKED}7.27
- {BLOCKED}7.28
- {BLOCKED}7.29
- {BLOCKED}7.30
- {BLOCKED}7.31
- {BLOCKED}7.32
- {BLOCKED}7.33
- {BLOCKED}7.34
- {BLOCKED}7.35
- {BLOCKED}7.36
- {BLOCKED}7.37
- {BLOCKED}7.38
- {BLOCKED}7.39
- {BLOCKED}7.40
- {BLOCKED}7.41
- {BLOCKED}7.42
- {BLOCKED}7.43
- {BLOCKED}7.44
- {BLOCKED}7.45
- {BLOCKED}7.46
- {BLOCKED}7.47
- {BLOCKED}7.48
- {BLOCKED}7.49
- {BLOCKED}7.50
- {BLOCKED}7.51
- {BLOCKED}7.52
- {BLOCKED}7.53
- {BLOCKED}7.54
- {BLOCKED}7.55
- {BLOCKED}7.56
- {BLOCKED}7.57
- {BLOCKED}7.58
- {BLOCKED}7.59
- {BLOCKED}7.60
- {BLOCKED}7.61
- {BLOCKED}7.62
- {BLOCKED}7.63
- {BLOCKED}7.64
- {BLOCKED}7.65
- {BLOCKED}7.66
- {BLOCKED}7.67
- {BLOCKED}7.68
- {BLOCKED}7.69
- {BLOCKED}7.70
- {BLOCKED}7.71
- {BLOCKED}7.72
- {BLOCKED}7.73
- {BLOCKED}7.74
- {BLOCKED}7.75
- {BLOCKED}7.76
- {BLOCKED}7.77
- {BLOCKED}7.78
- {BLOCKED}7.79
- {BLOCKED}7.80
- {BLOCKED}7.81
- {BLOCKED}7.82
- {BLOCKED}7.83
- {BLOCKED}7.84
- {BLOCKED}7.85
- {BLOCKED}7.86
- {BLOCKED}7.87
- {BLOCKED}7.88
- {BLOCKED}7.89
- {BLOCKED}7.90
- {BLOCKED}7.91
- {BLOCKED}7.92
- {BLOCKED}7.93
- {BLOCKED}7.94
- {BLOCKED}7.95
- {BLOCKED}7.96
- {BLOCKED}7.97
- {BLOCKED}7.98
- {BLOCKED}7.99
- {BLOCKED}7.100
- {BLOCKED}7.101
- {BLOCKED}7.102
- {BLOCKED}7.103
- {BLOCKED}7.104
- {BLOCKED}7.105
- {BLOCKED}7.106
- {BLOCKED}7.107
- {BLOCKED}7.108
- {BLOCKED}7.109
- {BLOCKED}7.110
- {BLOCKED}7.111
- {BLOCKED}7.112
- {BLOCKED}7.113
- {BLOCKED}7.114
- {BLOCKED}7.115
- {BLOCKED}7.116
- {BLOCKED}7.117
- {BLOCKED}7.118
- {BLOCKED}7.119
- {BLOCKED}7.120
- {BLOCKED}7.121
- {BLOCKED}7.122
- {BLOCKED}7.123
- {BLOCKED}7.124
- {BLOCKED}7.125
- {BLOCKED}7.126
- {BLOCKED}7.127
- {BLOCKED}7.128
- {BLOCKED}7.129
- {BLOCKED}7.130
- {BLOCKED}7.131
- {BLOCKED}7.132
- {BLOCKED}7.133
- {BLOCKED}7.134
- {BLOCKED}7.135
- {BLOCKED}7.136
- {BLOCKED}7.137
- {BLOCKED}7.138
- {BLOCKED}7.139
- {BLOCKED}7.140
- {BLOCKED}7.141
- {BLOCKED}7.142
- {BLOCKED}7.143
- {BLOCKED}7.144
- {BLOCKED}7.145
- {BLOCKED}7.146
- {BLOCKED}7.147
- {BLOCKED}7.148
- {BLOCKED}7.149
- {BLOCKED}7.150
- {BLOCKED}7.151
- {BLOCKED}7.152
- {BLOCKED}7.153
- {BLOCKED}7.154
- {BLOCKED}7.155
- {BLOCKED}7.156
- {BLOCKED}7.157
- {BLOCKED}7.158
- {BLOCKED}7.159
- {BLOCKED}7.160
- {BLOCKED}7.161
- {BLOCKED}7.162
- {BLOCKED}7.163
- {BLOCKED}7.164
- {BLOCKED}7.165
- {BLOCKED}7.166
- {BLOCKED}7.167
- {BLOCKED}7.168
- {BLOCKED}7.169
- {BLOCKED}7.170
- {BLOCKED}7.171
- {BLOCKED}7.172
- {BLOCKED}7.173
- {BLOCKED}7.174
- {BLOCKED}7.175
- {BLOCKED}7.176
- {BLOCKED}7.177
- {BLOCKED}7.178
- {BLOCKED}7.179
- {BLOCKED}7.180
- {BLOCKED}7.181
- {BLOCKED}7.182
- {BLOCKED}7.183
- {BLOCKED}7.184
- {BLOCKED}7.185
- {BLOCKED}7.186
- {BLOCKED}7.187
- {BLOCKED}7.188
- {BLOCKED}7.189
- {BLOCKED}7.190
- {BLOCKED}7.191
- {BLOCKED}7.192
- {BLOCKED}7.193
- {BLOCKED}7.194
- {BLOCKED}7.195
- {BLOCKED}7.196
- {BLOCKED}7.197
- {BLOCKED}7.198
- {BLOCKED}7.199
- {BLOCKED}7.200
- {BLOCKED}7.201
- {BLOCKED}7.202
- {BLOCKED}7.203
- {BLOCKED}7.204
- {BLOCKED}7.205
- {BLOCKED}7.206
- {BLOCKED}7.207
- {BLOCKED}7.208
- {BLOCKED}7.209
- {BLOCKED}7.210
- {BLOCKED}7.211
- {BLOCKED}7.212
- {BLOCKED}7.213
- {BLOCKED}7.214
- {BLOCKED}7.215
- {BLOCKED}7.216
- {BLOCKED}7.217
- {BLOCKED}7.218
- {BLOCKED}7.219
- {BLOCKED}7.220
- {BLOCKED}7.221
- {BLOCKED}7.222
- {BLOCKED}7.223
- {BLOCKED}7.224
- {BLOCKED}7.225
- {BLOCKED}7.226
- {BLOCKED}7.227
- {BLOCKED}7.228
- {BLOCKED}7.229
- {BLOCKED}7.230
- {BLOCKED}7.231
- {BLOCKED}7.232
- {BLOCKED}7.233
- {BLOCKED}7.234
- {BLOCKED}7.235
- {BLOCKED}7.236
- {BLOCKED}7.237
- {BLOCKED}7.238
- {BLOCKED}7.239
- {BLOCKED}7.240
- {BLOCKED}7.241
- {BLOCKED}7.242
- {BLOCKED}7.243
- {BLOCKED}7.244
- {BLOCKED}7.245
- {BLOCKED}7.246
- {BLOCKED}7.247
- {BLOCKED}7.248
- {BLOCKED}7.249
- {BLOCKED}7.250
- {BLOCKED}7.251
- {BLOCKED}7.252
- {BLOCKED}7.253
- {BLOCKED}7.254
- {BLOCKED}7.255
- {BLOCKED}8.0
- {BLOCKED}8.1
- {BLOCKED}8.2
- {BLOCKED}8.3
- {BLOCKED}8.4
- {BLOCKED}8.5
- {BLOCKED}8.6
- {BLOCKED}8.7
- {BLOCKED}8.8
- {BLOCKED}8.9
- {BLOCKED}8.10
- {BLOCKED}8.11
- {BLOCKED}8.12
- {BLOCKED}8.13
- {BLOCKED}8.14
- {BLOCKED}8.15
- {BLOCKED}8.16
- {BLOCKED}8.17
- {BLOCKED}8.18
- {BLOCKED}8.19
- {BLOCKED}8.20
- {BLOCKED}8.21
- {BLOCKED}8.22
- {BLOCKED}8.23
- {BLOCKED}8.24
- {BLOCKED}8.25
- {BLOCKED}8.26
- {BLOCKED}8.27
- {BLOCKED}8.28
- {BLOCKED}8.29
- {BLOCKED}8.30
- {BLOCKED}8.31
- {BLOCKED}8.32
- {BLOCKED}8.33
- {BLOCKED}8.34
- {BLOCKED}8.35
- {BLOCKED}8.36
- {BLOCKED}8.37
- {BLOCKED}8.38
- {BLOCKED}8.39
- {BLOCKED}8.40
- {BLOCKED}8.41
- {BLOCKED}8.42
- {BLOCKED}8.43
- {BLOCKED}8.44
- {BLOCKED}8.45
- {BLOCKED}8.46
- {BLOCKED}8.47
- {BLOCKED}8.48
- {BLOCKED}8.49
- {BLOCKED}8.50
- {BLOCKED}8.51
- {BLOCKED}8.52
- {BLOCKED}8.53
- {BLOCKED}8.54
- {BLOCKED}8.55
- {BLOCKED}8.56
- {BLOCKED}8.57
- {BLOCKED}8.58
- {BLOCKED}8.59
- {BLOCKED}8.60
- {BLOCKED}8.61
- {BLOCKED}8.62
- {BLOCKED}8.63
- {BLOCKED}8.64
- {BLOCKED}8.65
- {BLOCKED}8.66
- {BLOCKED}8.67
- {BLOCKED}8.68
- {BLOCKED}8.69
- {BLOCKED}8.70
- {BLOCKED}8.71
- {BLOCKED}8.72
- {BLOCKED}8.73
- {BLOCKED}8.74
- {BLOCKED}8.75
- {BLOCKED}8.76
- {BLOCKED}8.77
- {BLOCKED}8.78
- {BLOCKED}8.79
- {BLOCKED}8.80
- {BLOCKED}8.81
- {BLOCKED}8.82
- {BLOCKED}8.83
- {BLOCKED}8.84
- {BLOCKED}8.85
- {BLOCKED}8.86
- {BLOCKED}8.87
- {BLOCKED}8.88
- {BLOCKED}8.89
- {BLOCKED}8.90
- {BLOCKED}8.91
- {BLOCKED}8.92
- {BLOCKED}8.93
- {BLOCKED}8.94
- {BLOCKED}8.95
- {BLOCKED}8.96
- {BLOCKED}8.97
- {BLOCKED}8.98
- {BLOCKED}8.99
- {BLOCKED}8.100
- {BLOCKED}8.101
- {BLOCKED}8.102
- {BLOCKED}8.103
- {BLOCKED}8.104
- {BLOCKED}8.105
- {BLOCKED}8.106
- {BLOCKED}8.107
- {BLOCKED}8.108
- {BLOCKED}8.109
- {BLOCKED}8.110
- {BLOCKED}8.111
- {BLOCKED}8.112
- {BLOCKED}8.113
- {BLOCKED}8.114
- {BLOCKED}8.115
- {BLOCKED}8.116
- {BLOCKED}8.117
- {BLOCKED}8.118
- {BLOCKED}8.119
- {BLOCKED}8.120
- {BLOCKED}8.121
- {BLOCKED}8.122
- {BLOCKED}8.123
- {BLOCKED}8.124
- {BLOCKED}8.125
- {BLOCKED}8.126
- {BLOCKED}8.127
- {BLOCKED}8.128
- {BLOCKED}8.129
- {BLOCKED}8.130
- {BLOCKED}8.131
- {BLOCKED}8.132
- {BLOCKED}8.133
- {BLOCKED}8.134
- {BLOCKED}8.135
- {BLOCKED}8.136
- {BLOCKED}8.137
- {BLOCKED}8.138
- {BLOCKED}8.139
- {BLOCKED}8.140
- {BLOCKED}8.141
- {BLOCKED}8.142
- {BLOCKED}8.143
- {BLOCKED}8.144
- {BLOCKED}8.145
- {BLOCKED}8.146
- {BLOCKED}8.147
- {BLOCKED}8.148
- {BLOCKED}8.149
- {BLOCKED}8.150
- {BLOCKED}8.151
- {BLOCKED}8.152
- {BLOCKED}8.153
- {BLOCKED}8.154
- {BLOCKED}8.155
- {BLOCKED}8.156
- {BLOCKED}8.157
- {BLOCKED}8.158
- {BLOCKED}8.159
- {BLOCKED}8.160
- {BLOCKED}8.161
- {BLOCKED}8.162
- {BLOCKED}8.163
- {BLOCKED}8.164
- {BLOCKED}8.165
- {BLOCKED}8.166
- {BLOCKED}8.167
- {BLOCKED}8.168
- {BLOCKED}8.169
- {BLOCKED}8.170
- {BLOCKED}8.171
- {BLOCKED}8.172
- {BLOCKED}8.173
- {BLOCKED}8.174
- {BLOCKED}8.175
- {BLOCKED}8.176
- {BLOCKED}8.177
- {BLOCKED}8.178
- {BLOCKED}8.179
- {BLOCKED}8.180
- {BLOCKED}8.181
- {BLOCKED}8.182
- {BLOCKED}8.183
- {BLOCKED}8.184
- {BLOCKED}8.185
- {BLOCKED}8.186
- {BLOCKED}8.187
- {BLOCKED}8.188
- {BLOCKED}8.189
- {BLOCKED}8.190
- {BLOCKED}8.191
- {BLOCKED}8.192
- {BLOCKED}8.193
- {BLOCKED}8.194
- {BLOCKED}8.195
- {BLOCKED}8.196
- {BLOCKED}8.197
- {BLOCKED}8.198
- {BLOCKED}8.199
- {BLOCKED}8.200
- {BLOCKED}8.201
- {BLOCKED}8.202
- {BLOCKED}8.203
- {BLOCKED}8.204
- {BLOCKED}8.205
- {BLOCKED}8.206
- {BLOCKED}8.207
- {BLOCKED}8.208
- {BLOCKED}8.209
- {BLOCKED}8.210
- {BLOCKED}8.211
- {BLOCKED}8.212
- {BLOCKED}8.213
- {BLOCKED}8.214
- {BLOCKED}8.215
- {BLOCKED}8.216
- {BLOCKED}8.217
- {BLOCKED}8.218
- {BLOCKED}8.219
- {BLOCKED}8.220
- {BLOCKED}8.221
- {BLOCKED}8.222
- {BLOCKED}8.223
- {BLOCKED}8.224
- {BLOCKED}8.225
- {BLOCKED}8.226
- {BLOCKED}8.227
- {BLOCKED}8.228
- {BLOCKED}8.229
- {BLOCKED}8.230
- {BLOCKED}8.231
- {BLOCKED}8.232
- {BLOCKED}8.233
- {BLOCKED}8.234
- {BLOCKED}8.235
- {BLOCKED}8.236
- {BLOCKED}8.237
- {BLOCKED}8.238
- {BLOCKED}8.239
- {BLOCKED}8.240
- {BLOCKED}8.241
- {BLOCKED}8.242
- {BLOCKED}8.243
- {BLOCKED}8.244
- {BLOCKED}8.245
- {BLOCKED}8.246
- {BLOCKED}8.247
- {BLOCKED}8.248
- {BLOCKED}8.249
このウイルス情報は、自動解析システムにより作成されました。
対応方法
手順 1
Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。
手順 2
Windowsをセーフモードで再起動します。
手順 3
このレジストリ値を削除します。
警告:レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- bootStart = "{malware path and file name}"
手順 4
コンピュータを通常モードで再起動し、最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、「WORM_PRASH.DEM」と検出したファイルの検索を実行してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。
手順 5
以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア/グレイウェア/スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。
- %User Profile%\Templates\Tcpz-x86.sys
ご利用はいかがでしたか? アンケートにご協力ください