TROJ_KOVTER.AUSKJZ

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

マルウェアは、実行後、自身を削除します。

侵入方法

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

マルウェアは、以下のフォルダを作成します。

• %Application Data%\xipaj
• %System Root%\_117218_
• %System Root%\a433ec7171f7a4f2df5f2bf386
• %System Root%\a433ec7171f7a4f2df5f2bf386\update

(註：%Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming" です。.. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

他のシステム変更

マルウェアは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION

HKEY_CURRENT_USER\Software\qanz

HKEY_LOCAL_MACHINE\SOFTWARE\qanz

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate\
OSUpgrade

HKEY_LOCAL_MACHINE\SOFTWARE\CA299E51D804699B71

HKEY_LOCAL_MACHINE\SOFTWARE\223733CDAB4A8DF6C3

マルウェアは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
regsvr32.exe = "22b8"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
iexplore.exe = "22b8"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
regsvr32.exe = "22b8"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
iexplore.exe = "22b8"

HKEY_CURRENT_USER\Software\qanz
zojewbdazo = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate
DisableOSUpgrade = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate\
OSUpgrade
ReservationsAllowed = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
ltpxeirzlt = "eWxD2ZdqWIqPnw=="

HKEY_CURRENT_USER\Software\qanz
ltpxeirzlt = "cmtHjcAwVYIkHw=="

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
bjtkim = "JTgSjsRtUZuXi5f1P7boaB8irsSm4cI="

HKEY_CURRENT_USER\Software\qanz
bjtkim = "JjoXgZ8wBbLMJjT7gS9t4KJRRD9yTzw="

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
eljz = "cjFCjZBqV/uk2YJrVpbfy5s="

HKEY_CURRENT_USER\Software\qanz
eljz = "JG1NiJY+B1Pr/N/2fk/Fd7s="

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
zojewbdazo = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\qanz
kqdg = "{random characters}"

HKEY_CURRENT_USER\Software\qanz
kqdg = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\CA299E51D804699B71
BF2F0D2F803ABFF75B9 = "BF2F0D2F803ABFF75B9"

HKEY_LOCAL_MACHINE\SOFTWARE\223733CDAB4A8DF6C3
EC12FEECE975E3558 = "EC12FEECE975E3558"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup
LogLevel = "2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup
LogLevel = "0"

マルウェアは、以下のレジストリ値を変更します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\3
1206 = "0"

(註：変更前の上記レジストリ値は、「3」となります。)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\3
2300 = "0"

(註：変更前の上記レジストリ値は、「1」となります。)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\3
1809 = "3"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\1
1206 = "0"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\1
2300 = "0"

(註：変更前の上記レジストリ値は、「1」となります。)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\1
1809 = "3"

(註：変更前の上記レジストリ値は、「3」となります。)

マルウェアは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SOFTWARE

作成活動

マルウェアは、以下のファイルを作成します。

• %Application Data%\xipaj\xipaj.exe
• %User Temp%\WindowsXP-KB968930-x86-ENG.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\eventforwarding.adm
• %System Root%\a433ec7171f7a4f2df5f2bf386\windowsremotemanagement.adm
• %System Root%\a433ec7171f7a4f2df5f2bf386\windowsremoteshell.adm
• %System Root%\a433ec7171f7a4f2df5f2bf386\windowspowershellhelp.chm
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrm.cmd
• %System Root%\a433ec7171f7a4f2df5f2bf386\compiledcomposition.microsoft.powershell.gpowershell.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.backgroundintelligenttransfer.management.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.backgroundintelligenttransfer.management.interop.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.backgroundintelligenttransfer.management.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.diagnostics.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.diagnostics.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.management.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.management.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.utility.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.utility.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.consolehost.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.consolehost.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.editor.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.editor.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.gpowershell.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.gpowershell.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.graphicalhost.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.graphicalhost.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.security.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.security.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.wsman.management.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.wsman.management.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.wsman.runtime.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\powershell_ise.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\pspluginwkr.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\pwrshmsg.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\pwrshplugin.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\pwrshsip.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\spmsg.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\system.management.automation.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\system.management.automation.resources.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\wevtfwd.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrmprov.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrscmd.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrsmgr.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrssrv.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmauto.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmplpxy.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmres.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmsvc.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmwmipl.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\powershell.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\powershell_ise.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\pscustomsetuputil.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\pssetupnativeutils.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\spuninst.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\spupdsvc.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrs.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrshost.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmanhttpconfig.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmprovhost.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\wtrinstaller.ico
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrm.ini
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrmprov.mof
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmauto.mof
• %System Root%\a433ec7171f7a4f2df5f2bf386\powershell.exe.mui
• %System Root%\a433ec7171f7a4f2df5f2bf386\profile.ps1
• %System Root%\a433ec7171f7a4f2df5f2bf386\bitstransfer.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\certificate.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\diagnostics.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\dotnettypes.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\filesystem.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\getevent.types.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\help.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\powershellcore.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\powershelltrace.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\registry.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\types.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsman.format.ps1xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\bitstransfer.psd1
• %System Root%\a433ec7171f7a4f2df5f2bf386\importallmodules.psd1
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_aliases.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_arithmetic_operators.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_arrays.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_assignment_operators.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_automatic_variables.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_bits_cmdlets.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_break.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_command_precedence.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_command_syntax.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_comment_based_help.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_commonparameters.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_comparison_operators.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_continue.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_core_commands.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_data_sections.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_debuggers.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_do.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_environment_variables.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_escape_characters.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_eventlogs.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_execution_policies.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_for.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_foreach.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_format.ps1xml.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_functions.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_functions_advanced.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_functions_advanced_methods.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_functions_advanced_parameters.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_functions_cmdletbindingattribute.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_hash_tables.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_history.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_if.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_job_details.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_jobs.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_join.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_language_keywords.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_line_editing.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_locations.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_logical_operators.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_methods.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_modules.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_objects.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_operators.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_parameters.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_parsing.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_path_syntax.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_pipelines.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_preference_variables.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_profiles.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_prompts.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_properties.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_providers.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_pssession_details.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_pssessions.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_pssnapins.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_quoting_rules.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_redirection.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_ref.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_regular_expressions.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_remote.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_remote_faq.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_remote_jobs.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_remote_output.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_remote_requirements.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_remote_troubleshooting.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_requires.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_reserved_words.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_return.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_scopes.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_script_blocks.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_script_internationalization.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_scripts.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_session_configurations.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_signing.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_special_characters.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_split.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_switch.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_throw.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_transactions.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_trap.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_try_catch_finally.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_type_operators.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_types.ps1xml.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_variables.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_while.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_wildcards.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_windows_powershell_2.0.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_windows_powershell_ise.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_wmi_cmdlets.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\about_ws-management_cmdlets.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\default.help.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\winrm.vbs
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.backgroundintelligenttransfer.management.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.diagnostics.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.management.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.commands.utility.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.consolehost.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.powershell.security.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\microsoft.wsman.management.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\system.management.automation.dll-help.xml
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmpty.xsl
• %System Root%\a433ec7171f7a4f2df5f2bf386\wsmtxt.xsl
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\kb968930xp.cat
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\spcustom.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\updspapi.dll
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\update.exe
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\update.inf
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\eula.txt
• %System Root%\a433ec7171f7a4f2df5f2bf386\update\update.ver
• %System Root%\a433ec7171f7a4f2df5f2bf386\$shtdwn$.req

その他

マルウェアは、以下の不正なWebサイトにアクセスします。

• http://{BLOCKED}7.72.90
• http://{BLOCKED}7.72.90/{random path}
• {BLOCKED}79.105
• {BLOCKED}124.105
• {BLOCKED}2.38.93
• {BLOCKED}4.104.15
• {BLOCKED}52.53
• {BLOCKED}7.119.221
• {BLOCKED}9.87.159
• {BLOCKED}21.59
• {BLOCKED}213.205
• {BLOCKED}0.36.45
• {BLOCKED}2.202.200
• {BLOCKED}.242.184
• {BLOCKED}.179.13
• {BLOCKED}2.34.130
• {BLOCKED}9.232.176
• {BLOCKED}212.154
• {BLOCKED}0.163.144
• {BLOCKED}6.185.153
• {BLOCKED}5.120.42
• {BLOCKED}0.54.86
• {BLOCKED}8.245.46
• {BLOCKED}7.79.57
• {BLOCKED}3.58.141
• {BLOCKED}.166.231
• {BLOCKED}8.18.150
• {BLOCKED}6.29.144
• {BLOCKED}6.77.175
• {BLOCKED}.248.238
• {BLOCKED}.243.7
• {BLOCKED}.197.200
• {BLOCKED}.77.221
• {BLOCKED}0.169.197
• {BLOCKED}.218.37
• {BLOCKED}.61.12
• {BLOCKED}3.190.214
• {BLOCKED}60.176
• {BLOCKED}161.209
• {BLOCKED}175.95
• {BLOCKED}6.110.84
• {BLOCKED}210.147
• {BLOCKED}9.118.69
• {BLOCKED}209.42
• {BLOCKED}.1.67
• {BLOCKED}54.168
• {BLOCKED}.243.63
• {BLOCKED}0.250.234
• {BLOCKED}68.142
• {BLOCKED}.187.114
• {BLOCKED}.4.158
• {BLOCKED}6.8.90
• {BLOCKED}.182.28
• {BLOCKED}.131.194
• {BLOCKED}.191.49
• {BLOCKED}2.104.46
• {BLOCKED}.6.29
• {BLOCKED}.241.49
• {BLOCKED}8.196.119
• {BLOCKED}9.5.29
• {BLOCKED}.213.76
• {BLOCKED}.22.223
• {BLOCKED}2.70.55
• {BLOCKED}74.19
• {BLOCKED}.164.146
• {BLOCKED}0.102.62
• {BLOCKED}6.152.66
• {BLOCKED}3.121.242
• {BLOCKED}4.232.226
• {BLOCKED}6.248.67
• {BLOCKED}3.230.35
• {BLOCKED}.227.107
• {BLOCKED}8.24.45
• {BLOCKED}4.210.15
• {BLOCKED}7.41.21
• {BLOCKED}.133.200
• {BLOCKED}11.92
• {BLOCKED}.5.240
• {BLOCKED}.24.88
• {BLOCKED}.104.54
• {BLOCKED}.251.227
• {BLOCKED}7.49.108
• {BLOCKED}.13.20
• {BLOCKED}192.37
• {BLOCKED}.115.139
• {BLOCKED}8.242
• {BLOCKED}.68.109
• {BLOCKED}5.114.168
• {BLOCKED}8.58.100
• {BLOCKED}2.131.116
• {BLOCKED}7.47.201
• {BLOCKED}129.74
• {BLOCKED}0.29.123
• {BLOCKED}.77.233
• {BLOCKED}7.184.113
• {BLOCKED}24.94
• {BLOCKED}8.62.155
• {BLOCKED}150.130
• {BLOCKED}.238.9
• {BLOCKED}.213.158
• {BLOCKED}5.219.31
• {BLOCKED}0.178.72
• {BLOCKED}.241.177
• {BLOCKED}1.65
• {BLOCKED}.22.95
• {BLOCKED}.75.222
• {BLOCKED}.152.51
• {BLOCKED}1.61.159
• {BLOCKED}.2.48
• {BLOCKED}231.162
• {BLOCKED}3.240.67
• {BLOCKED}5.132.73
• {BLOCKED}9.68.162
• {BLOCKED}9.213.139
• {BLOCKED}4.121.22
• {BLOCKED}.176.183
• {BLOCKED}9.208.248
• {BLOCKED}.92.197
• {BLOCKED}.12.142
• {BLOCKED}9.151.111
• {BLOCKED}.230.153
• {BLOCKED}5.236.83
• {BLOCKED}.203.81
• {BLOCKED}.81.91
• {BLOCKED}.130.66
• {BLOCKED}64.245
• {BLOCKED}.138.62
• {BLOCKED}.153.63
• {BLOCKED}3.212.80
• {BLOCKED}.203.213
• {BLOCKED}.179.81
• {BLOCKED}.106.240
• {BLOCKED}.242.223
• {BLOCKED}3.179.61
• {BLOCKED}9.14.213
• {BLOCKED}.119.186
• {BLOCKED}3.86.101
• {BLOCKED}207.168
• {BLOCKED}2.9.166
• {BLOCKED}.116.238
• {BLOCKED}.135.226
• {BLOCKED}3.225.36
• {BLOCKED}113.64
• {BLOCKED}3.99.24
• {BLOCKED}202.52
• {BLOCKED}1.151
• {BLOCKED}.45.75
• {BLOCKED}77.5
• {BLOCKED}.219.228
• {BLOCKED}.203.51
• {BLOCKED}.111.201
• {BLOCKED}8.51.49
• {BLOCKED}6.128.217
• {BLOCKED}7.211.82
• {BLOCKED}.192.159
• {BLOCKED}149.82
• {BLOCKED}.21.31
• {BLOCKED}49.242
• {BLOCKED}.129.80
• {BLOCKED}6.111.66
• {BLOCKED}128.233
• {BLOCKED}124.183
• {BLOCKED}.171.112
• {BLOCKED}1.37.28
• {BLOCKED}0.75.100
• {BLOCKED}0.19.141
• {BLOCKED}.47.133
• {BLOCKED}.16.151
• {BLOCKED}9.20.245
• {BLOCKED}.85.4
• {BLOCKED}.234.103
• {BLOCKED}4.45.95
• {BLOCKED}5.88.18
• {BLOCKED}.153.230
• {BLOCKED}.130.36
• {BLOCKED}.49.170
• {BLOCKED}.52.95
• {BLOCKED}0.178.236
• {BLOCKED}9.233.120
• {BLOCKED}8.26.191
• {BLOCKED}.156.20
• {BLOCKED}141.103
• {BLOCKED}0.35.255
• {BLOCKED}.202.62
• {BLOCKED}4.153.56
• {BLOCKED}.147.20
• {BLOCKED}.2.53
• {BLOCKED}6.152.120
• {BLOCKED}147.190
• {BLOCKED}2.229.236
• {BLOCKED}129.165
• {BLOCKED}4.186.190
• {BLOCKED}.149.90
• {BLOCKED}73.250
• {BLOCKED}.190.107
• {BLOCKED}5.193.156
• {BLOCKED}.41.211
• {BLOCKED}.131.241
• {BLOCKED}8.194.187
• {BLOCKED}.245.217
• {BLOCKED}9.180.246
• {BLOCKED}.6.157
• {BLOCKED}9.92.52
• {BLOCKED}.152.37
• {BLOCKED}18.135
• {BLOCKED}0.250.139
• {BLOCKED}7.113.186
• {BLOCKED}1.165.66
• {BLOCKED}0.254.69
• {BLOCKED}.173.218
• {BLOCKED}7.248.223
• {BLOCKED}.221.217
• {BLOCKED}8.254.129
• {BLOCKED}0.171.32
• {BLOCKED}.247.180
• {BLOCKED}0.242.242
• {BLOCKED}27.98
• {BLOCKED}.111.41
• {BLOCKED}.4.30
• {BLOCKED}.74.83
• {BLOCKED}187.166
• {BLOCKED}.255.75
• {BLOCKED}.124.123
• {BLOCKED}.66.181
• {BLOCKED}3.19.64
• {BLOCKED}223.12
• {BLOCKED}.25.114
• {BLOCKED}147.173
• {BLOCKED}3.218.149
• {BLOCKED}6.65.239
• {BLOCKED}15.157
• {BLOCKED}235.6
• {BLOCKED}7.42.102
• {BLOCKED}.68.183
• {BLOCKED}.30.80
• {BLOCKED}112.41

マルウェアは、実行後、自身を削除します。

このウイルス情報は、自動解析システムにより作成されました。