Trend Micro Security

ADW_DELBAR

2015年7月29日
 解析者: Jimelle Monteser   
 別名:

AdWare.Win32.DelBar.a (Kaspersky); Montiera (fs) (Sunbelt)

 プラットフォーム:

Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)

 危険度:
 ダメージ度:
 感染力:
 感染確認数:
 情報漏えい:


  • マルウェアタイプ: アドウェア
  • 破壊活動の有無: なし
  • 暗号化:  
  • 感染報告の有無: はい

  概要


アドウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

  詳細

ファイルサイズ 1,903,392 bytes
タイプ EXE
メモリ常駐 なし
発見日 2013年9月5日

侵入方法

アドウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

アドウェアは、以下のフォルダを作成します。

  • %User Temp%\nsd3.tmp
  • %User Temp%\Delta
  • %User Temp%\Delta\delta
  • %User Temp%\Delta\delta\1.8.24.6
  • %User Temp%\nsu17.tmp
  • %Program Files%\Delta
  • %Program Files%\Delta\delta
  • %Program Files%\Delta\delta\1.8.24.6
  • %Program Files%\Delta\delta\1.8.24.6\bh
  • %User Temp%\nsv1E.tmp
  • %User Temp%\mt_ffx
  • %User Temp%\mt_ffx\Delta
  • %User Temp%\mt_ffx\Delta\delta
  • %User Temp%\mt_ffx\Delta\delta\1.8.24.6

(註：%User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。.. %Program Files%フォルダは、プログラムファイルのフォルダで、いずれのオペレーティングシステム(OS)でも通常、 "C:\Program Files"、64bitのOS上で32bitのアプリケーションを実行している場合、 "C:\Program Files (x86)" です。.)

自動実行方法

アドウェアは、以下のレジストリキーを追加し、自身をBrowser Helper Object（BHO）として登録します。これにより、Internet Explorer（IE）が起動するとアドウェアが自動実行されます。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

他のシステム変更

アドウェアは、以下のレジストリキーを追加します。

HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\
instl\data

HKEY_CURRENT_USER\SOFTWARE\Delta\
delta

HKEY_LOCAL_MACHINE\SOFTWARE\Delta\
delta\Instl

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escorTlbr.DLL

HKEY_CLASSES_ROOT\delta.deltadskBnd.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltadskBnd.1\CLSID

HKEY_CLASSES_ROOT\delta.deltadskBnd

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltadskBnd\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltadskBnd\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escort.DLL

HKEY_CLASSES_ROOT\escort.escortIEPane.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
escort.escortIEPane.1\CLSID

HKEY_CLASSES_ROOT\escort.escortIEPane

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
escort.escortIEPane\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
escort.escortIEPane\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\TypeLib

HKEY_CLASSES_ROOT\delta.deltaHlpr.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltaHlpr.1\CLSID

HKEY_CLASSES_ROOT\delta.deltaHlpr

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltaHlpr\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltaHlpr\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escortApp.DLL

HKEY_CLASSES_ROOT\delta.deltaappCore.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltaappCore.1\CLSID

HKEY_CLASSES_ROOT\delta.deltaappCore

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltaappCore\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
delta.deltaappCore\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1231839B-064E-4788-B865-465A1B5266FD}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1231839B-064E-4788-B865-465A1B5266FD}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1231839B-064E-4788-B865-465A1B5266FD}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1231839B-064E-4788-B865-465A1B5266FD}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{57C91446-8D81-4156-A70E-624551442DE9}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{57C91446-8D81-4156-A70E-624551442DE9}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{57C91446-8D81-4156-A70E-624551442DE9}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{57C91446-8D81-4156-A70E-624551442DE9}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escortEng.DLL

HKEY_CLASSES_ROOT\d

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
d\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
d\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\TypeLib

HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\
instl\dfltLng

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
delta

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{39CB8175-E224-4446-8746-00566302DF8D}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\esrv.EXE

HKEY_CLASSES_ROOT\esrv.deltaESrvc.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
esrv.deltaESrvc.1\CLSID

HKEY_CLASSES_ROOT\esrv.deltaESrvc

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
esrv.deltaESrvc\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
esrv.deltaESrvc\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\LocalServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0\
HELPDIR

アドウェアは、以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
trace = "0"

HKEY_CURRENT_USER\Software\Delta\
delta
lastB = "http://www.{BLOCKED}oft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
run4ie = "start"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escorTlbr.DLL
AppID = "{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\InprocServer32
ThreadingModel = "apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
AppID = "{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Toolbar
{82E1477C-B154-48D3-9891-33D83C26BCD3} = "Delta Toolbar"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
AppName = "deltasrv.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
AppPath = "%Program Files%\Delta\delta\1.8.24.6"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
NoExplorer = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escort.DLL
AppID = "{09C554C3-109B-483C-A06B-F14172F1A947}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\InprocServer32
ThreadingModel = "apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
AppID = "{09C554C3-109B-483C-A06B-F14172F1A947}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\InprocServer32
ThreadingModel = "apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
AppID = "{09C554C3-109B-483C-A06B-F14172F1A947}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escortApp.DLL
AppID = "{D7EE8177-D51E-4F89-92B6-83EA2EC40800}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\InprocServer32
ThreadingModel = "apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
AppID = "{D7EE8177-D51E-4F89-92B6-83EA2EC40800}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
hrdId = "68ad0fd00000000000000050569f260a"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
instlDay = "3e5"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1231839B-064E-4788-B865-465A1B5266FD}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{57C91446-8D81-4156-A70E-624551442DE9}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\escortEng.DLL
AppID = "{B12E99ED-69BD-437C-86BE-C862B9E5444D}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\InprocServer32
ThreadingModel = "apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
AppID = "{B12E99ED-69BD-437C-86BE-C862B9E5444D}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
vrsni = "1.8.24.6"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
afltId = "orgnl"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
aflt = "orgnl"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
smplGrp = "none"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
tlbrId = "base"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
vrsnTs = "1.8.24.68:46:33"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
uninstallAll = "true"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
autoRvrt = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
rvrt = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
admin = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
newTab = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
excTlbr = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
ffxUnstlRst = "true"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
chrInstl = "all"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
ffxInstl = "all"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
ieInstl = "all"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
uninstExt = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
dsFFX = "Delta Search"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
dpk = "70875bd03b0fdd95371f04647b4734fd"

HKEY_LOCAL_MACHINE\SOFTWARE\Delta\
delta\Instl
InstallDir = "%Program Files%\Delta\delta\1.8.24.6"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
DisplayName = "Delta toolbar "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
UninstallString = "%Program Files%\Delta\delta\1.8.24.6\uninstall.exe "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
DisplayIcon = "%Program Files%\Delta\delta\1.8.24.6\deltasrv.exe "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
DisplayVersion = "1.8.24.6"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
Comments = "Delta toolbar "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
Publisher = "Delta"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
NoModify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
NoRepair = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
delta
EstimatedSize = "9c4"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
uninstaller = "%Program Files%\Delta\delta\1.8.24.6\uninstall.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\
data
run4ie = "end"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\esrv.EXE
AppID = "{39CB8175-E224-4446-8746-00566302DF8D}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\LocalServer32
ThreadingModel = "apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
AppID = "{39CB8175-E224-4446-8746-00566302DF8D}"

作成活動

アドウェアは、以下のファイルを作成します。

  • %User Temp%\nsd3.tmp\UserInfo.dll
  • %User Temp%\nsd3.tmp\System.dll
  • %User Temp%\nsd3.tmp\nsisos.dll
  • %User Temp%\nsd3.tmp\chrmPref.dll
  • %User Temp%\nsd3.tmp\mt.dll
  • %User Temp%\nsd3.tmp\Time.dll
  • %User Temp%\Delta\delta\1.8.24.6\delta4ie.exe
  • %User Temp%\Delta\delta\1.8.24.6\delta4ffx.exe
  • %User Temp%\nsd3.tmp\Processes.dll
  • %User Temp%\nsd3.tmp\InetLoad.dll
  • %User Temp%\Delta\delta\1.8.24.6\nsis.js
  • %User Temp%\nsu17.tmp\UserInfo.dll
  • %User Temp%\nsu17.tmp\System.dll
  • %User Temp%\nsu17.tmp\nsisos.dll
  • %User Temp%\nsu17.tmp\mt.dll
  • %User Temp%\nsu17.tmp\Time.dll
  • %Program Files%\Delta\delta\1.8.24.6\deltaEng.dll
  • %Program Files%\Delta\delta\1.8.24.6\bh\delta.dll
  • %Program Files%\Delta\delta\1.8.24.6\deltaApp.dll
  • %Program Files%\Delta\delta\1.8.24.6\deltaTlbr.dll
  • %Program Files%\Delta\delta\1.8.24.6\deltasrv.exe
  • %User Temp%\nsu17.tmp\md5dll.dll
  • %Program Files%\Delta\delta\1.8.24.6\uninstall.exe
  • %User Temp%\nsv1E.tmp\System.dll
  • %User Temp%\nsv1E.tmp\nsisos.dll
  • %User Temp%\nsv1E.tmp\mt.dll
  • %User Temp%\nsv1E.tmp\Time.dll

(註：%User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。.. %Program Files%フォルダは、プログラムファイルのフォルダで、いずれのオペレーティングシステム(OS)でも通常、 "C:\Program Files"、64bitのOS上で32bitのアプリケーションを実行している場合、 "C:\Program Files (x86)" です。.)

その他

アドウェアは、以下の不正なWebサイトにアクセスします。

  • http://reports.{BLOCKED}ra.com/reports/jsRprt.srf?{random characters}
  • {BLOCKED}5.82.29

  対応方法

対応検索エンジン: 9.700
SSAPI パターンバージョン: 1.444.36
SSAPI パターンリリース日: 2013年9月5日

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

起動中ブラウザのウインドウを全て閉じてください。

手順 3

不明なレジストリキーを削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl
    • data
  • In HKEY_CURRENT_USER\SOFTWARE\Delta
    • delta
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Delta\delta
    • Instl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • {4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • escorTlbr.DLL
  • In HKEY_CLASSES_ROOT
    • delta.deltadskBnd.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltadskBnd.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • delta.deltadskBnd
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltadskBnd
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltadskBnd
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {82E1477C-B154-48D3-9891-33D83C26BCD3}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • {09C554C3-109B-483C-A06B-F14172F1A947}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • escort.DLL
  • In HKEY_CLASSES_ROOT
    • escort.escortIEPane.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\escort.escortIEPane.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • escort.escortIEPane
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\escort.escortIEPane
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\escort.escortIEPane
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    • TypeLib
  • In HKEY_CLASSES_ROOT
    • delta.deltaHlpr.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltaHlpr.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • delta.deltaHlpr
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltaHlpr
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltaHlpr
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {C1AF5FA5-852C-4C90-812E-A7F75E011D87}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • {D7EE8177-D51E-4F89-92B6-83EA2EC40800}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • escortApp.DLL
  • In HKEY_CLASSES_ROOT
    • delta.deltaappCore.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltaappCore.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • delta.deltaappCore
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltaappCore
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\delta.deltaappCore
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {D7EE8177-D51E-4F89-92B6-83EA2EC40800}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {4599D05A-D545-4069-BB42-5895B4EAE05B}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {1231839B-064E-4788-B865-465A1B5266FD}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {B177446D-54A4-4869-BABC-8566110B4BE0}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {F05B12E1-ADE8-4485-B45B-898748B53C37}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {7AD65FD1-79E0-406D-B03C-DD7C14726D69}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {2DAC2231-CC35-482B-97C5-CED1D4185080}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {97DD820D-2E20-40AD-B01E-6730B2FCE630}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {57C91446-8D81-4156-A70E-624551442DE9}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • {B12E99ED-69BD-437C-86BE-C862B9E5444D}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • escortEng.DLL
  • In HKEY_CLASSES_ROOT
    • d
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\d
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\d
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {86838207-681D-469D-9511-D0DCC6F19F9B}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    • TypeLib
  • In HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl
    • dfltLng
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • delta
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • {39CB8175-E224-4446-8746-00566302DF8D}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
    • esrv.EXE
  • In HKEY_CLASSES_ROOT
    • esrv.deltaESrvc.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.deltaESrvc.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • esrv.deltaESrvc
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.deltaESrvc
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.deltaESrvc
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {261DD098-8A3E-43D4-87AA-63324FA897D8}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    • LocalServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {39CB8175-E224-4446-8746-00566302DF8D}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}\1.0
    • HELPDIR

手順 4

このレジストリ値を削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • trace = "0"
  • In HKEY_CURRENT_USER\Software\Delta\delta
    • lastB = "http://www.{BLOCKED}oft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • run4ie = "start"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escorTlbr.DLL
    • AppID = "{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}\InprocServer32
    • ThreadingModel = "apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    • AppID = "{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
    • {82E1477C-B154-48D3-9891-33D83C26BCD3} = "Delta Toolbar"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
    • AppName = "deltasrv.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
    • AppPath = "%Program Files%\Delta\delta\1.8.24.6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • NoExplorer = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escort.DLL
    • AppID = "{09C554C3-109B-483C-A06B-F14172F1A947}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}\InprocServer32
    • ThreadingModel = "apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    • AppID = "{09C554C3-109B-483C-A06B-F14172F1A947}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\InprocServer32
    • ThreadingModel = "apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    • AppID = "{09C554C3-109B-483C-A06B-F14172F1A947}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escortApp.DLL
    • AppID = "{D7EE8177-D51E-4F89-92B6-83EA2EC40800}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}\InprocServer32
    • ThreadingModel = "apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    • AppID = "{D7EE8177-D51E-4F89-92B6-83EA2EC40800}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • hrdId = "68ad0fd00000000000000050569f260a"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • instlDay = "3e5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escortEng.DLL
    • AppID = "{B12E99ED-69BD-437C-86BE-C862B9E5444D}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}\InprocServer32
    • ThreadingModel = "apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    • AppID = "{B12E99ED-69BD-437C-86BE-C862B9E5444D}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • vrsni = "1.8.24.6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • afltId = "orgnl"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • aflt = "orgnl"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • smplGrp = "none"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • tlbrId = "base"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • vrsnTs = "1.8.24.68:46:33"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • uninstallAll = "true"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • autoRvrt = "false"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • rvrt = "false"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • admin = "false"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • newTab = "false"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • excTlbr = "false"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • ffxUnstlRst = "true"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • chrInstl = "all"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • ffxInstl = "all"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • ieInstl = "all"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • uninstExt = "false"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • dsFFX = "Delta Search"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • dpk = "70875bd03b0fdd95371f04647b4734fd"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Delta\delta\Instl
    • InstallDir = "%Program Files%\Delta\delta\1.8.24.6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • DisplayName = "Delta toolbar "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • UninstallString = "%Program Files%\Delta\delta\1.8.24.6\uninstall.exe "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • DisplayIcon = "%Program Files%\Delta\delta\1.8.24.6\deltasrv.exe "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • DisplayVersion = "1.8.24.6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • Comments = "Delta toolbar "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • Publisher = "Delta"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • NoModify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • NoRepair = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta
    • EstimatedSize = "9c4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • uninstaller = "%Program Files%\Delta\delta\1.8.24.6\uninstall.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\instl\data
    • run4ie = "end"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\esrv.EXE
    • AppID = "{39CB8175-E224-4446-8746-00566302DF8D}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\LocalServer32
    • ThreadingModel = "apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    • AppID = "{39CB8175-E224-4446-8746-00566302DF8D}"

手順 5

以下のフォルダを検索し削除します。

[ 詳細 ]
フォルダが隠しフォルダ属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %User Temp%\nsd3.tmp
  • %User Temp%\Delta
  • %User Temp%\nsu17.tmp
  • %Program Files%\Delta
  • %User Temp%\nsv1E.tmp
  • %User Temp%\mt_ffx

手順 6

最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「ADW_DELBAR」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。


ご利用はいかがでしたか？　アンケートにご協力ください