• Email
• Facebook
• Twitter
• Google+
• Linkedin

PUA.Win32.SoftCNApp.ASHGI

---

• マルウェアタイプ: 潜在的に迷惑なアプリケーション
• 破壊活動の有無: なし
• 暗号化:  
• 感染報告の有無: はい

---

  概要

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

---

  詳細

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のフォルダを追加します。

• %Program Files%\LuDaShi
• %Application Data%\ludashi
• %Application Data%\ludashi\trans_helper
• %User Temp%\{Random Characters}.tmp
• %User Temp%\{Random Characters}.tmp
• %All Users Profile%\{Random Characters}.tmp
• %User Temp%\{Random Characters}.tmp
• %All Users Profile%\{Random Characters}.tmp\BenchmarkData
• %All Users Profile%\{Random Characters}.tmp\DrvMgr
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\config
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\defaultskin
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback
• %All Users Profile%\{Random Characters}.tmp\game
• %All Users Profile%\{Random Characters}.tmp\Hardware
• %All Users Profile%\{Random Characters}.tmp\lpi
• %All Users Profile%\{Random Characters}.tmp\nBench
• %All Users Profile%\{Random Characters}.tmp\Plugin
• %All Users Profile%\{Random Characters}.tmp\softmgr
• %All Users Profile%\{Random Characters}.tmp\sweeper
• %All Users Profile%\{Random Characters}.tmp\Themes
• %All Users Profile%\{Random Characters}.tmp\Themes\Default
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\BenchmarkPage
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\CleanPage
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\DownMgr
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\GamePage
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\LdsLite
• %All Users Profile%\{Random Characters}.tmp\Utils
• %All Users Profile%\{Random Characters}.tmp\Utils\ie
• %Program Files%\LuDaShi\BenchmarkData
• %Program Files%\LuDaShi\DrvMgr
• %Program Files%\LuDaShi\DrvMgr\config
• %Program Files%\LuDaShi\DrvMgr\config\defaultskin
• %Program Files%\LuDaShi\DrvMgr\feedback
• %Program Files%\LuDaShi\game
• %Program Files%\LuDaShi\nBench
• %Program Files%\LuDaShi\Plugin
• %Program Files%\LuDaShi\sweeper
• %Program Files%\LuDaShi\Themes
• %Program Files%\LuDaShi\Themes\Default
• %Program Files%\LuDaShi\Themes\Default\BenchmarkPage
• %Program Files%\LuDaShi\Themes\Default\CleanPage
• %Program Files%\LuDaShi\Themes\Default\DownMgr
• %Program Files%\LuDaShi\Themes\Default\GamePage
• %Program Files%\LuDaShi\Themes\Default\LdsLite
• %Program Files%\LuDaShi\Utils
• %Program Files%\LuDaShi\Hardware
• %Program Files%\LuDaShi\lpi
• %Program Files%\LuDaShi\softmgr
• %Program Files%\LuDaShi\Utils\ie
• %Application Data%\lds
• %System%\config\systemprofile\AppData\Roaming\lds
• %Application Data%\lockhomepage

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.)

プログラムは、以下のファイルを作成します。

• %User Temp%\{Random Characters}.tf
• %User Temp%\lud7789.tmp
• %User Temp%\NetBridge.dll
• %Application Data%\360NetUL\{Random Characters}.netul.log
• %Program Files%\LuDaShi\{Random Characters}.tf
• %User Temp%\lud87BC.tmp
• %Application Data%\ludashi\trans_helper\trans_sdk.dll
• %Temporary Internet Files%\Content.IE5\E6P952NO\url2[1].txt
• %Application Data%\ludashi\trans_helper\pub_store.dat
• %Application Data%\ludashi\trans_helper\CidStore.DB
• %Application Data%\ludashi\trans_helper\CidStore.DB-journal
• %Temporary Internet Files%\Content.IE5\U90PRGHH\url2[1].txt
• %Application Data%\ludashi\trans_helper\setting.cfg
• %Temporary Internet Files%\Content.IE5\01JIXJH3\url2[1].txt
• %Application Data%\ludashi\trans_helper\dht.id
• %Temporary Internet Files%\Content.IE5\I5U7DXRH\url2[1].txt
• %Application Data%\ludashi\.setup.dll.js
• %Application Data%\ludashi\setup.dll
• %Application Data%\ludashi\trans_helper\statstorage_v5.xml
• %Application Data%\ludashi\trans_helper\seq_id
• %Application Data%\ludashi\trans_helper\xl_sdk_statstorage_v5.xml
• %Application Data%\ludashi\trans_helper\dhtnodes.dat
• %Application Data%\ludashi\trans_helper\dhtnodes6.dat
• %Temporary Internet Files%\Content.IE5\U90PRGHH\url2[2].txt
• %User Temp%\{Random Characters}.tmp\7z.dll
• %User Temp%\{Random Characters}.tmp\NetBridge.dll
• %Temporary Internet Files%\Content.IE5\U90PRGHH\pc[1].php
• %All Users Profile%\{Random Characters}.tmp\{Random Characters}.tf
• %User Temp%\{Random Characters}.tmp
• %User Temp%\{Random Characters}.tmp\FileList.xml
• %User Temp%\{Random Characters}.tmp\LDS.LDSPRJ
• %User Temp%\{Random Characters}.tmp\UninstallRootDirFileList.xml
• %Program Files%\LuDaShi\lds_setup.log
• %All Users Profile%\{Random Characters}.tmp\BenchmarkData\core.spk
• %All Users Profile%\{Random Characters}.tmp\BenchmarkData\lds.spk
• %All Users Profile%\{Random Characters}.tmp\BenchmarkData\shaders_sm_3_0.cache
• %All Users Profile%\{Random Characters}.tmp\BenchmarkData\shaders_sm_5_0.cache
• %All Users Profile%\{Random Characters}.tmp\deviceid.ini
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\360LibDrvmgr.dat
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\config.xml
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\defaultskin\defaultskin.ui
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\defaultskin\MiniUI.xml
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LuDaShiFeedback.ui
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LuDaShiFeedBack.xml
• %All Users Profile%\{Random Characters}.tmp\game\ModeIdentify.dat
• %All Users Profile%\{Random Characters}.tmp\Monitors.dat
• %All Users Profile%\{Random Characters}.tmp\motherboard.dat
• %All Users Profile%\{Random Characters}.tmp\nBench\NNET.DAT
• %All Users Profile%\{Random Characters}.tmp\Plugin\Basic.tpi
• %All Users Profile%\{Random Characters}.tmp\Plugin\BrowserBasic.tpi
• %All Users Profile%\{Random Characters}.tmp\Plugin\CleanTip.tpi
• %All Users Profile%\{Random Characters}.tmp\Plugin\Misc.tpi
• %All Users Profile%\{Random Characters}.tmp\Plugin\NetShield.tpi
• %All Users Profile%\{Random Characters}.tmp\Plugin\PopMgr.tpi
• %All Users Profile%\{Random Characters}.tmp\Plugin\RunExtention.tpi
• %All Users Profile%\{Random Characters}.tmp\ProcSpecial.dat
• %All Users Profile%\{Random Characters}.tmp\SchemeLib.dat
• %All Users Profile%\{Random Characters}.tmp\sweeper\RubbishCleanEngine.dat
• %All Users Profile%\{Random Characters}.tmp\sweeper\SysSweeper.dat
• %All Users Profile%\{Random Characters}.tmp\sweeper\tracesweeper.dat
• %All Users Profile%\{Random Characters}.tmp\sweeper\WhiteList.dat
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\BenchmarkPage\BenchmarkPage_theme.ui
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\BenchmarkPage\BenchmarkPage_theme.xml
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\CleanPage\CleanPage_Theme.ui
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\CleanPage\clean_page_theme.xml
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\default_theme.ui
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\DownMgr\DownMgr_theme.ui
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\DownMgr\downmgr_theme.xml
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\GamePage\GamePage_Theme.ui
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\GamePage\GamePage_theme.xml
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\LdsLite\LdsLite_theme.ui
• %All Users Profile%\{Random Characters}.tmp\Themes\Default\LdsLite\LdsLite_theme.xml
• %All Users Profile%\{Random Characters}.tmp\updatecfg.ini
• %All Users Profile%\{Random Characters}.tmp\Utils\gamecenter.json
• %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiPreview.ui
• %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiPreview.xml
• %All Users Profile%\{Random Characters}.tmp\Utils\navskin.ui
• %All Users Profile%\{Random Characters}.tmp\360Base.dll
• %All Users Profile%\{Random Characters}.tmp\360Base64.dll
• %All Users Profile%\{Random Characters}.tmp\360Common.dll
• %All Users Profile%\{Random Characters}.tmp\360Conf.dll
• %All Users Profile%\{Random Characters}.tmp\360net.dll
• %All Users Profile%\{Random Characters}.tmp\360P2SP.dll
• %All Users Profile%\{Random Characters}.tmp\aapt.exe
• %All Users Profile%\{Random Characters}.tmp\AMDRyzenMasterDriver.sys
• %All Users Profile%\{Random Characters}.tmp\atiags32.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerMonZ.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ.sys
• %All Users Profile%\{Random Characters}.tmp\ComputerZ1.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ10.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ11.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ2.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ5.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ7.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ7_x64.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZBrowser.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerZHelper_x64.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerZService.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerzService_x64.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerZTinyTray.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerZTray.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerZ_Accelerator.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ_CN.exe
• %All Users Profile%\{Random Characters}.tmp\ComputerZ_HardwareDll.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ_PowerSaveDll.dll
• %All Users Profile%\{Random Characters}.tmp\ComputerZ_x64.sys
• %All Users Profile%\{Random Characters}.tmp\DataMgr.dll
• %All Users Profile%\{Random Characters}.tmp\DataMgr_x64.dll
• %All Users Profile%\{Random Characters}.tmp\Device.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\360NetBase.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\360NetUL.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\7za.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\cloudcom2.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\DIFxAPI_x86.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\DownloadMgr.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvInst64.exe
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvMgr.exe
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvmgrCore.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvMgrUI.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\dynlenv.dll
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\360ScreenCapture.exe
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\DrvMgrFeedBack.exe
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LdsMMFeedback.exe
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LuDaShiFeedBack.exe
• %All Users Profile%\{Random Characters}.tmp\DrvMgr\ScriptExecute.exe
• %All Users Profile%\{Random Characters}.tmp\game\GamePage.dll
• %All Users Profile%\{Random Characters}.tmp\game\GameTray.dll
• %All Users Profile%\{Random Characters}.tmp\game\ModeIdentify.dll
• %All Users Profile%\{Random Characters}.tmp\Hardware\hdw_battery.dll
• %All Users Profile%\{Random Characters}.tmp\Hardware\hdw_gpu.dll
• %All Users Profile%\{Random Characters}.tmp\Hardware\hdw_launcher.dll
• %All Users Profile%\{Random Characters}.tmp\HardwareEx_x64.dll
• %All Users Profile%\{Random Characters}.tmp\HardwareProtectEx.sys
• %All Users Profile%\{Random Characters}.tmp\HardwareProtectEx_x64.sys
• %All Users Profile%\{Random Characters}.tmp\HardwareProtectSlim.sys
• %All Users Profile%\{Random Characters}.tmp\HardwareProtectSlim_x64.sys
• %All Users Profile%\{Random Characters}.tmp\LDSBenchmark.dll
• %All Users Profile%\{Random Characters}.tmp\LdsLite.exe
• %All Users Profile%\{Random Characters}.tmp\LiteUninst.exe
• %All Users Profile%\{Random Characters}.tmp\LiveUpd360.dll
• %All Users Profile%\{Random Characters}.tmp\LiveUpdate360.exe
• %All Users Profile%\{Random Characters}.tmp\lpi\CheckHp.dll
• %All Users Profile%\{Random Characters}.tmp\lpi\HpSvc.dll
• %All Users Profile%\{Random Characters}.tmp\lpi\TmSvc.dll
• %All Users Profile%\{Random Characters}.tmp\MiniUI.dll
• %All Users Profile%\{Random Characters}.tmp\ModuleUpdate.exe
• %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkLauncher.exe
• %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkLauncher_x64.exe
• %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkPage.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkSuite.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\ComputerZ_Bench.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\ComputerZ_Bench_x64.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\D3DCompiler_43.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\d3dx11_43.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\D3DX9_43.dll
• %All Users Profile%\{Random Characters}.tmp\nBench\Display3DEx.exe
• %All Users Profile%\{Random Characters}.tmp\nBench\OCLBenchmark.dll
• %All Users Profile%\{Random Characters}.tmp\NetBridge.dll
• %All Users Profile%\{Random Characters}.tmp\PDown.dll
• %All Users Profile%\{Random Characters}.tmp\Platform.dll
• %All Users Profile%\{Random Characters}.tmp\Plugin\ConfigCenter.dll
• %All Users Profile%\{Random Characters}.tmp\Plugin\ConfigCenterStub.dll
• %All Users Profile%\{Random Characters}.tmp\Plugin\PopMgrStub.dll
• %All Users Profile%\{Random Characters}.tmp\PowerSaveZ.sys
• %All Users Profile%\{Random Characters}.tmp\PowerSaveZ_x64.sys
• %All Users Profile%\{Random Characters}.tmp\Safelive.dll
• %All Users Profile%\{Random Characters}.tmp\SignHelper.dll
• %All Users Profile%\{Random Characters}.tmp\sites.dll
• %All Users Profile%\{Random Characters}.tmp\SiteUIHelper.dll
• %All Users Profile%\{Random Characters}.tmp\softmgr\DownMgr.dll
• %All Users Profile%\{Random Characters}.tmp\softmgr\SoftMgr.dll
• %All Users Profile%\{Random Characters}.tmp\softmgr\SoftMgrInst.exe
• %All Users Profile%\{Random Characters}.tmp\softmgr\SoftMgrPage.dll
• %All Users Profile%\{Random Characters}.tmp\sqlite3.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\CleanHelper64.exe
• %All Users Profile%\{Random Characters}.tmp\sweeper\CleanPage.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\CleanPageEngine.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\ComputerZS1.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\HardwareCleaner.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\heavygate.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\MemoryOptimizer.exe
• %All Users Profile%\{Random Characters}.tmp\sweeper\SysSweeper.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\TEngine.dll
• %All Users Profile%\{Random Characters}.tmp\sweeper\Tracehelper.exe
• %All Users Profile%\{Random Characters}.tmp\sweeper\TrashClean.dll
• %All Users Profile%\{Random Characters}.tmp\TrayHelper.exe
• %All Users Profile%\{Random Characters}.tmp\uninst.exe
• %All Users Profile%\{Random Characters}.tmp\update.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\arctrl.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\CefHelper.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\CommonBrowser.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ12.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ12_x64.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ14.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ8.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ8_x64.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\DisPatchMini.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\Down.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\DumpUper.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\guardhp.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\ie\IeView.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\iosdb.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\iosdb64.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\KitTip.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\Launcher.del.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\LDSBasic.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\LdsDrvInst32.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\LdsDrvInst64.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\Ldshelper.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\LdsMobile.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\LdsVolumeCtrl.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiHelper.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiPreview.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\MedalWall.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\mininews.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\MobileDeviceSrv.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\NavAd.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\NavLauncher.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\NavLauncher64.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\NavPlugin.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\NavProxy64.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\PageMgr.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\pgstation.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\Pop.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\PopEx.dll
• %All Users Profile%\{Random Characters}.tmp\Utils\RunDll.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\SoulDancer.exe
• %All Users Profile%\{Random Characters}.tmp\Utils\WebView.dll
• %Application Data%\lds\lds.set
• %Application Data%\lds\ComputerZ.set
• %System%\config\systemprofile\AppData\Roaming\lds\lds.set
• %Program Files%\LuDaShi\ComputerZ.set
• %Program Files%\LuDaShi\lpi\svc.dat
• %System%\config\systemprofile\AppData\Roaming\360NetUL\svchost.netul.log
• %Application Data%\ludashi\ComputerZ.set
• %Application Data%\360NetUL\ComputerZ14.netul.log
• %Application Data%\ludashi\invaildhp_temp.dat
• %Application Data%\lockhomepage\LockHomePage.ini
• %Application Data%\ludashi\external.dat
• %Program Files%\LuDaShi\BenchmarkData\core.spk
• %Program Files%\LuDaShi\BenchmarkData\lds.spk
• %Program Files%\LuDaShi\BenchmarkData\shaders_sm_3_0.cache
• %Program Files%\LuDaShi\BenchmarkData\shaders_sm_5_0.cache
• %Program Files%\LuDaShi\deviceid.ini
• %Program Files%\LuDaShi\DrvMgr\360LibDrvmgr.dat
• %Program Files%\LuDaShi\DrvMgr\config\config.xml
• %Program Files%\LuDaShi\DrvMgr\config\defaultskin\defaultskin.ui
• %Program Files%\LuDaShi\DrvMgr\config\defaultskin\MiniUI.xml
• %Program Files%\LuDaShi\DrvMgr\feedback\LuDaShiFeedback.ui
• %Program Files%\LuDaShi\DrvMgr\feedback\LuDaShiFeedBack.xml
• %Program Files%\LuDaShi\game\ModeIdentify.dat
• %Program Files%\LuDaShi\Monitors.dat
• %Program Files%\LuDaShi\motherboard.dat
• %Program Files%\LuDaShi\nBench\NNET.DAT
• %Program Files%\LuDaShi\Plugin\Basic.tpi
• %Program Files%\LuDaShi\Plugin\BrowserBasic.tpi
• %Program Files%\LuDaShi\Plugin\CleanTip.tpi
• %Program Files%\LuDaShi\Plugin\Misc.tpi
• %Program Files%\LuDaShi\Plugin\NetShield.tpi
• %Program Files%\LuDaShi\Plugin\PopMgr.tpi
• %Program Files%\LuDaShi\Plugin\RunExtention.tpi
• %Program Files%\LuDaShi\ProcSpecial.dat
• %Program Files%\LuDaShi\SchemeLib.dat
• %Program Files%\LuDaShi\sweeper\RubbishCleanEngine.dat
• %Program Files%\LuDaShi\sweeper\SysSweeper.dat
• %Program Files%\LuDaShi\sweeper\tracesweeper.dat
• %Program Files%\LuDaShi\sweeper\WhiteList.dat
• %Program Files%\LuDaShi\Themes\Default\BenchmarkPage\BenchmarkPage_theme.ui
• %Program Files%\LuDaShi\Themes\Default\BenchmarkPage\BenchmarkPage_theme.xml
• %Program Files%\LuDaShi\Themes\Default\CleanPage\CleanPage_Theme.ui
• %Program Files%\LuDaShi\Themes\Default\CleanPage\clean_page_theme.xml
• %Program Files%\LuDaShi\Themes\Default\default_theme.ui
• %Program Files%\LuDaShi\Themes\Default\DownMgr\DownMgr_theme.ui
• %Program Files%\LuDaShi\Themes\Default\DownMgr\downmgr_theme.xml
• %Program Files%\LuDaShi\Themes\Default\GamePage\GamePage_Theme.ui
• %Program Files%\LuDaShi\Themes\Default\GamePage\GamePage_theme.xml
• %Program Files%\LuDaShi\Themes\Default\LdsLite\LdsLite_theme.ui
• %Program Files%\LuDaShi\Themes\Default\LdsLite\LdsLite_theme.xml
• %Program Files%\LuDaShi\updatecfg.ini
• %Program Files%\LuDaShi\Utils\gamecenter.json
• %Program Files%\LuDaShi\Utils\LuDaShiPreview.ui
• %Program Files%\LuDaShi\Utils\LuDaShiPreview.xml
• %Program Files%\LuDaShi\Utils\navskin.ui
• %Program Files%\LuDaShi\360Base.dll
• %Program Files%\LuDaShi\360Base64.dll
• %Program Files%\LuDaShi\360Common.dll
• %Program Files%\LuDaShi\360Conf.dll
• %Program Files%\LuDaShi\360net.dll
• %Program Files%\LuDaShi\360P2SP.dll
• %Program Files%\LuDaShi\aapt.exe
• %Program Files%\LuDaShi\AMDRyzenMasterDriver.sys
• %Program Files%\LuDaShi\atiags32.dll
• %Program Files%\LuDaShi\ComputerMonZ.dll
• %Program Files%\LuDaShi\ComputerZ.sys
• %Program Files%\LuDaShi\ComputerZ1.dll
• %Program Files%\LuDaShi\ComputerZ10.dll
• %Program Files%\LuDaShi\ComputerZ11.dll
• %Program Files%\LuDaShi\ComputerZ2.dll
• %Program Files%\LuDaShi\ComputerZ5.dll
• %Program Files%\LuDaShi\ComputerZ7.dll
• %Program Files%\LuDaShi\ComputerZ7_x64.dll
• %Program Files%\LuDaShi\ComputerZBrowser.exe
• %Program Files%\LuDaShi\ComputerZHelper_x64.exe
• %Program Files%\LuDaShi\ComputerZService.exe
• %Program Files%\LuDaShi\ComputerzService_x64.exe
• %Program Files%\LuDaShi\ComputerZTinyTray.exe
• %Program Files%\LuDaShi\ComputerZTray.exe
• %Program Files%\LuDaShi\ComputerZ_Accelerator.dll
• %Program Files%\LuDaShi\ComputerZ_CN.exe
• %Program Files%\LuDaShi\ComputerZ_HardwareDll.dll
• %Program Files%\LuDaShi\ComputerZ_PowerSaveDll.dll
• %Program Files%\LuDaShi\ComputerZ_x64.sys
• %Program Files%\LuDaShi\DataMgr.dll
• %Program Files%\LuDaShi\DataMgr_x64.dll
• %Program Files%\LuDaShi\Device.dll
• %Program Files%\LuDaShi\DrvMgr\360NetBase.dll
• %Program Files%\LuDaShi\DrvMgr\360NetUL.dll
• %Program Files%\LuDaShi\DrvMgr\7za.dll
• %Program Files%\LuDaShi\DrvMgr\cloudcom2.dll
• %Program Files%\LuDaShi\DrvMgr\DIFxAPI_x86.dll
• %Program Files%\LuDaShi\DrvMgr\DownloadMgr.dll
• %Program Files%\LuDaShi\DrvMgr\DrvInst64.exe
• %Program Files%\LuDaShi\DrvMgr\DrvMgr.exe
• %Program Files%\LuDaShi\DrvMgr\DrvmgrCore.dll
• %Program Files%\LuDaShi\DrvMgr\DrvMgrUI.dll
• %Program Files%\LuDaShi\DrvMgr\dynlenv.dll
• %Program Files%\LuDaShi\DrvMgr\feedback\360ScreenCapture.exe
• %Program Files%\LuDaShi\DrvMgr\feedback\DrvMgrFeedBack.exe
• %Program Files%\LuDaShi\DrvMgr\feedback\LdsMMFeedback.exe
• %Program Files%\LuDaShi\DrvMgr\feedback\LuDaShiFeedBack.exe
• %Program Files%\LuDaShi\DrvMgr\ScriptExecute.exe
• %Program Files%\LuDaShi\game\GamePage.dll
• %Program Files%\LuDaShi\game\GameTray.dll
• %Program Files%\LuDaShi\game\ModeIdentify.dll
• %Program Files%\LuDaShi\Hardware\hdw_battery.dll
• %Program Files%\LuDaShi\Hardware\hdw_gpu.dll
• %Program Files%\LuDaShi\Hardware\hdw_launcher.dll
• %Program Files%\LuDaShi\HardwareEx_x64.dll
• %Program Files%\LuDaShi\HardwareProtectEx.sys
• %Program Files%\LuDaShi\HardwareProtectEx_x64.sys
• %Program Files%\LuDaShi\HardwareProtectSlim.sys
• %Program Files%\LuDaShi\HardwareProtectSlim_x64.sys
• %Program Files%\LuDaShi\LDSBenchmark.dll
• %Program Files%\LuDaShi\LdsLite.exe
• %Program Files%\LuDaShi\LiteUninst.exe
• %Program Files%\LuDaShi\LiveUpd360.dll
• %Program Files%\LuDaShi\LiveUpdate360.exe
• %Program Files%\LuDaShi\lpi\CheckHp.dll
• %Program Files%\LuDaShi\lpi\HpSvc.dll
• %Program Files%\LuDaShi\lpi\TmSvc.dll
• %Program Files%\LuDaShi\MiniUI.dll
• %Program Files%\LuDaShi\ModuleUpdate.exe
• %Program Files%\LuDaShi\nBench\BenchmarkLauncher.exe
• %Program Files%\LuDaShi\nBench\BenchmarkLauncher_x64.exe
• %Program Files%\LuDaShi\nBench\BenchmarkPage.dll
• %Program Files%\LuDaShi\nBench\BenchmarkSuite.dll
• %Program Files%\LuDaShi\nBench\ComputerZ_Bench.dll
• %Program Files%\LuDaShi\nBench\ComputerZ_Bench_x64.dll
• %Program Files%\LuDaShi\nBench\D3DCompiler_43.dll
• %Program Files%\LuDaShi\nBench\d3dx11_43.dll
• %Program Files%\LuDaShi\nBench\D3DX9_43.dll
• %Program Files%\LuDaShi\nBench\Display3DEx.exe
• %Program Files%\LuDaShi\nBench\OCLBenchmark.dll
• %Program Files%\LuDaShi\NetBridge.dll
• %Program Files%\LuDaShi\PDown.dll
• %Program Files%\LuDaShi\Platform.dll
• %Program Files%\LuDaShi\Plugin\ConfigCenter.dll
• %Program Files%\LuDaShi\Plugin\ConfigCenterStub.dll
• %Program Files%\LuDaShi\Plugin\PopMgrStub.dll
• %Program Files%\LuDaShi\PowerSaveZ.sys
• %Program Files%\LuDaShi\PowerSaveZ_x64.sys
• %Program Files%\LuDaShi\Safelive.dll
• %Program Files%\LuDaShi\SignHelper.dll
• %Program Files%\LuDaShi\sites.dll
• %Program Files%\LuDaShi\SiteUIHelper.dll
• %Program Files%\LuDaShi\softmgr\DownMgr.dll
• %Program Files%\LuDaShi\softmgr\SoftMgr.dll
• %Program Files%\LuDaShi\softmgr\SoftMgrInst.exe
• %Program Files%\LuDaShi\softmgr\SoftMgrPage.dll
• %Program Files%\LuDaShi\sqlite3.dll
• %Program Files%\LuDaShi\sweeper\CleanHelper64.exe
• %Program Files%\LuDaShi\sweeper\CleanPage.dll
• %Program Files%\LuDaShi\sweeper\CleanPageEngine.dll
• %Program Files%\LuDaShi\sweeper\ComputerZS1.dll
• %Program Files%\LuDaShi\sweeper\HardwareCleaner.dll
• %Program Files%\LuDaShi\sweeper\heavygate.dll
• %Program Files%\LuDaShi\sweeper\MemoryOptimizer.exe
• %Program Files%\LuDaShi\sweeper\SysSweeper.dll
• %Program Files%\LuDaShi\sweeper\TEngine.dll
• %Program Files%\LuDaShi\sweeper\Tracehelper.exe
• %Program Files%\LuDaShi\sweeper\TrashClean.dll
• %Program Files%\LuDaShi\TrayHelper.exe
• %Program Files%\LuDaShi\uninst.exe
• %Program Files%\LuDaShi\update.exe
• %Program Files%\LuDaShi\Utils\arctrl.dll
• %Program Files%\LuDaShi\Utils\CefHelper.dll
• %Program Files%\LuDaShi\Utils\CommonBrowser.exe
• %Program Files%\LuDaShi\Utils\ComputerZ12.dll
• %Program Files%\LuDaShi\Utils\ComputerZ12_x64.dll
• %Program Files%\LuDaShi\Utils\ComputerZ14.exe
• %Program Files%\LuDaShi\Utils\ComputerZ8.dll
• %Program Files%\LuDaShi\Utils\ComputerZ8_x64.dll
• %Program Files%\LuDaShi\Utils\DisPatchMini.dll
• %Program Files%\LuDaShi\Utils\Down.exe
• %Program Files%\LuDaShi\Utils\DumpUper.exe
• %Program Files%\LuDaShi\Utils\guardhp.exe
• %Program Files%\LuDaShi\Utils\ie\IeView.exe
• %Program Files%\LuDaShi\Utils\iosdb.exe
• %Program Files%\LuDaShi\Utils\iosdb64.exe
• %Program Files%\LuDaShi\Utils\KitTip.dll
• %Program Files%\LuDaShi\Utils\Launcher.del.exe
• %Program Files%\LuDaShi\Utils\LDSBasic.dll
• %Program Files%\LuDaShi\Utils\LdsDrvInst32.exe
• %Program Files%\LuDaShi\Utils\LdsDrvInst64.exe
• %Program Files%\LuDaShi\Utils\Ldshelper.exe
• %Program Files%\LuDaShi\Utils\LdsMobile.exe
• %Program Files%\LuDaShi\Utils\LdsVolumeCtrl.dll
• %Program Files%\LuDaShi\Utils\LuDaShiHelper.dll
• %Program Files%\LuDaShi\Utils\LuDaShiPreview.exe
• %Program Files%\LuDaShi\Utils\MedalWall.exe
• %Program Files%\LuDaShi\Utils\mininews.exe
• %Program Files%\LuDaShi\Utils\MobileDeviceSrv.exe
• %Program Files%\LuDaShi\Utils\NavAd.dll
• %Program Files%\LuDaShi\Utils\NavLauncher.dll
• %Program Files%\LuDaShi\Utils\NavLauncher64.dll
• %Program Files%\LuDaShi\Utils\NavPlugin.exe
• %Program Files%\LuDaShi\Utils\NavProxy64.exe
• %Program Files%\LuDaShi\Utils\PageMgr.dll
• %Program Files%\LuDaShi\Utils\pgstation.dll
• %Program Files%\LuDaShi\Utils\Pop.dll
• %Program Files%\LuDaShi\Utils\PopEx.dll
• %Program Files%\LuDaShi\Utils\RunDll.exe
• %Program Files%\LuDaShi\Utils\SoulDancer.exe
• %Program Files%\LuDaShi\Utils\WebView.dll
• %Program Files%\LuDaShi\Utils\7z.dll
• %Program Files%\LuDaShi\HardwareProtect.sys
• %Program Files%\LuDaShi\HardwareProtect_x64.sys
• %Application Data%\ludashi\invalidhp.dat

(註：%User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.)

自動実行方法

プログラムは、以下のサービスを開始します。

• Service Name: HpSvc
  Display Name: Hardware Protection Service
  Start Type: SERVICE_DEMAND_START
  Binary Pathname: %SystemRoot%\System32\svchost.exe -k netsvcs

他のシステム変更

プログラムは、以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
(Default) = %Program Files%\LuDaShi\ComputerZ_CN.exe

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerZ
(Default) = %Program Files%\LuDaShi\ComputerZ_CN.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
ReadyFor360START = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
DisplayIcon = %Program Files%\LuDaShi\ComputerZ_CN.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
DisplayName = {Hex Values}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc
ImagePath = %SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc
Start = 2

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc
DelayedAutostart = 0

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc
Description = {Hex Values}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters
ServiceDll = %Program Files%\LuDaShi\lpi\HpSvc.dll

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters
ServiceMain = SM

HKEY_LOCAL_MACHINE\SOFTWARE\360Safe\
Liveup
mid = {Random Characters}

HKEY_LOCAL_MACHINE\SOFTWARE\ComMaster
m2 = {Random Characters}

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
CreateShortcut = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
VendorID = buychannel_27

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
AppType = normal

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
Type = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
buy = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Svchost
netsvcs = {Hex Values}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters
ServiceDll = %Program Files%\LuDaShi\lpi\HpSvc.dll

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters
ServiceMain = SM

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi
Setup Path = %Program Files%\LuDaShi

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerZ
Setup Path = %Program Files%\LuDaShi

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
DisplayVersion = 5.1021.1300.610

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
Publisher = {Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
UninstallString = %Program Files%\LuDaShi\uninst.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
URLInfoAbout = www.ludashi.com

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1
InstallLocation = %Program Files%\LuDaShi

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect
Type = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect
Start = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect
ErrorControl = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect
ImagePath = %Program Files%\LuDaShi\HardwareProtect.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect
DisplayName = HardwareProtect

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters
Port = 19531

その他

プログラムは、以下のレジストリキーを追加します。

HKEY_LOCAL_MACHINE\Software\360Safe\
Liveup

HKEY_LOCAL_MACHINE\SOFTWARE\360Safe\
Liveup\mid

HKEY_LOCAL_MACHINE\SOFTWARE\ComMaster

HKEY_LOCAL_MACHINE\SOFTWARE\ComMaster\
m2

HKEY_LOCAL_MACHINE\SOFTWARE\LiveUpdate360

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
CreateShortcut

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
VendorID

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
AppType

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
Type

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
buy

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\ImagePath

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Start

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\DelayedAutostart

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Description

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters\
ServiceDll

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters\
ServiceMain

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
Setup Path

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerZ

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerZ\
Setup Path

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
InstallDate

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
FirstInstallDate

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
(Default)

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerZ\
(Default)

HKEY_LOCAL_MACHINE\SOFTWARE\Ludashi\
ReadyFor360START

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\DisplayIcon

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\DisplayName

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\DisplayVersion

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\Publisher

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\UninstallString

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\URLInfoAbout

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Ludashi_is1\InstallLocation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect\Type

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect\Start

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect\Type

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect\ErrorControl

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect\ImagePath

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HardwareProtect\DisplayName

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\HpSvc\Parameters\
Port

プログラムは、以下の不正なWebサイトにアクセスします。

• http://s.{BLOCKED}i.com/url2?pid=buychannel_27&mid=fb7118215b3e3c3594151ede1dfd306f&mid2=9f99c19f8bf6ad7ddc2294c1fd178b9900989db5293e&appver=5.1021.1300.610&modver=5.1021.1300.610&type=svc&action=start_inst
• http://www.{BLOCKED}i.com/stat/pc.php?pid=buychannel_27&type=instnew&action=install_success&appver=5.1021.1300.610&modver=5.1021.1300.610&mid=fb7118215b3e3c3594151ede1dfd306f&sign_name=pc&sign=32a5ab29a44a1d99c9f92c307c219ad5
• http://s.{BLOCKED}i.com/url2?pid=buychannel_27&type=instonline&action=inst_succ&appver=6.1021.1065.824&modver=6.1021.1065.824&mid=fb7118215b3e3c3594151ede1dfd306f&ex_ary[method]=thunder&ex_ary[os]=6_1_7601_32&ex_ary[sr]=0
• http://cdn-file.{BLOCKED}i.com/pc/scripts/1630055722.dat
• http://www.{BLOCKED}i.com/cms/pc_mobile/quickxiaolu.php?channel=buychannel_27&s=0&q=0&k=0&h=0
• http://l.public.{BLOCKED{i.com/pc/ud/dogsun
• http://www1.{BLOCKED}i.com/pc/cloudDown/Url
• http://www1.{BLOCKED}i.com/pc/Xunlei/Login

---

  対応方法

ご利用はいかがでしたか？　アンケートにご協力ください