Win32/Trustezeb.K
公開日:2016年05月27日
危険度:2
定義名称 | Win32/Trustezeb.K |
---|---|
シグネチャ検査による結果だった場合 | Win32/Trustezeb.K |
種別 | トロイの木馬 |
アドバンスドヒューリスティック検査による結果だった場合 | このオリジナルのトロイを利用した新種、亜種が検出された場合は、「NewHeur_PE」もしくは「Win32/Trustezeb.Kの亜種 トロイの木馬」という名称で警告が出ます。 |
対応時期 | バージョン10789(20141127)以降 |
影響を受けるプラットフォーム | Microsoft Windows |
概要 | これは、リモートからコントロール可能なバックドア型のトロイの木馬です。詳しい活動内容については、下記をご参照ください。 |
検出した場合の対処方法
常駐監視を行っている各検査プログラムによって検出された場合は、駆除もしくは削除を行ってください。駆除もしくは削除ができない場合は、Windows のシステムの復元により修復しなければならない可能性があります。
対象のファイルが身に覚えのないファイル名の場合は、そのファイル自身がウイルスそのものである可能性が高いので、駆除ではなくすべて削除をしてください。これにより2次感染、3次感染を防げます。また、自分が作成したデータ等に感染していた場合は、駆除が可能な場合もありますが、駆除のボタンが押せない状態もしくは駆除しても失敗する場合は、すでに元のデータの戻せない状態までデータが書き換えられている場合もあります。この場合もすべて削除してください。
解説での表記(用語)について
以下の説明文では、環境変数を利用して各ファイルやディレクトリへのパスを表記しています。
例:
%windir% : Windowsオペレーティングシステムがインストールされたディレクトリのパス(インストール時の設定により異なる場合があります)。
%system% : %windir% のサブディレクトリである"System"や"System32"のパス。
%malwarefilepath% : マルウェアプログラムまでのパス。
%malwarefilename% : マルウェアプログラムまでのファイル名。
その他に関しては、以下のページも参考にしてください。
Microsoft Malware Protection Center - Malware help
Common Folder variables
解説
侵入(インストレーション)について
このトロイの木馬は、実行時に自身を次の場所へコピーします。
%temp%\%variable1%-%variable3%\%variable1%-%variable4%
%appdata%\%variable1%-%variable3%\%variable1%-%variable4%
%localappdata%\%variable1%-%variable3%\%variable1%-%variable4%
システムが起動するたびに実行されるよう、次のレジストリーエントリーを設定します。
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"%variable1%-%variable2%" = "%installfolder%\%variable1%-%variable3%\%variable1%-%variable4%"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"%variable1%-%variable2%" = "%malwarefilepath%"
%variable1%は次の文字列のいずれかになります。
abuse
accept
access
according
account
accuse
achieve
acquire
act
adapt
add
address
adjust
admire
admit
adopt
advance
advanced
advantage
affect
afford
age
agree
air
alarm
allow
amazing
amount
anger
angle
announce
answer
anticipate
apologize
appeal
appear
apply
appreciate
approach
appropriate
approve
are
argue
arise
arm
arrive
ask
assist
associate
assume
assure
attach
attack
attempt
attend
attract
author
average
avoid
award
baby
bag
bake
balance
ball
band
bank
bar
base
bat
bath
battle
be
beach
bear
beat
become
bed
been
begin
behave
being
believe
bell
belong
belt
bench
bend
benefit
bet
bicycle
bid
bike
bill
birth
bit
bite
black
blame
blank
blind
block
blow
blue
board
boat
body
bone
book
boot
border
born
borrow
boss
bother
bottle
bottom
bowl
box
brain
branch
break
breakfast
breast
brick
bridge
bring
brush
buddy
bug
build
building
bunch
burn
bus
busy
button
buy
cable
cake
calculate
calendar
call
camp
campaign
cancel
candidate
candle
candy
cap
card
care
career
carpet
carry
case
cash
cat
catch
cause
celebrate
chain
chair
challenge
champion
change
channel
charge
chart
check
chip
choose
claim
class
clerk
click
clock
closed
closet
cloud
club
clue
coach
coast
coat
code
collar
collect
combine
come
comfort
command
comment
commission
commit
communicate
company
compare
compete
complain
complete
complicated
concentrate
concern
concerned
concert
condition
conference
confirm
conflict
connect
consider
consist
consult
contact
contain
content
contest
continue
contribute
convert
convince
cook
copy
correct
cost
count
counter
couple
course
court
cover
cow
crack
craft
crash
cream
create
credit
crew
criticize
cross
cry
culture
cup
curve
cut
cycle
damage
dance
dare
date
deal
decide
delay
deliver
demand
depend
deposit
describe
deserve
design
desire
destroy
detail
detailed
determine
develop
devil
die
diet
differ
dig
dimension
dirty
disagree
disappointed
discipline
discount
discover
discuss
dish
display
distance
distribute
district
divide
doctor
document
does
dog
dot
doubt
draft
drag
draw
dream
drink
drive
drop
dry
dump
dust
earn
earth
ease
eat
edge
effect
egg
emphasize
employ
empty
enable
encourage
encouraging
end
engage
engineer
enhance
enjoy
ensure
enter
entrance
escape
essay
establish
estimate
even
evidence
exact
examine
example
exchange
excuse
exercise
exist
exit
expand
expect
experience
experienced
explain
explore
expose
express
extend
eye
face
factor
fail
fall
fan
farm
father
fault
fear
feature
fee
feed
feel
field
fight
figure
file
fill
film
finance
find
finger
finish
fire
firm
fish
fit
fix
fixed
floor
flow
flower
fly
focus
fold
follow
foot
force
forget
form
frame
frequent
friend
fruit
fuel
function
gain
gap
garage
garden
gas
gather
gear
generate
get
gift
give
glove
go
golf
grab
grade
grandfather
grass
ground
group
grow
guarantee
guard
guess
guide
guy
habit
hand
handle
hang
happen
harm
has
hate
have
hear
heat
help
hesitate
hide
highlight
hire
hit
hold
hole
hook
hope
horse
host
hunt
hurry
hurt
husband
ice
identify
ignore
illustrate
image
imagine
impact
implement
imply
impress
improve
include
incorporate
increase
indicate
influence
inform
insist
install
intend
interest
interested
interview
introduce
invest
investigate
invite
involve
involved
iron
is
island
isp
israel
israeli
issn
issue
issued
issues
ist
istanbul
it
italia
italian
italiano
italic
italy
item
items
its
itsa
itself
itunes
iv
ivory
ix
j
ja
jack
jacket
jackets
jackie
jackson
jacksonville
jacob
jade
jaguar
jail
jake
jam
jamaica
james
jamie
jan
jane
janet
january
japan
japanese
jar
jason
java
javascript
jay
jazz
jc
jd
je
jean
jeans
jeep
jeff
jefferson
jeffrey
jelsoft
jennifer
jenny
jeremy
jerry
jersey
jerusalem
jesse
jessica
jesus
jet
jets
jewel
jewellery
jewelry
jewish
jews
jill
jim
jimmy
jj
jm
jo
joan
job
jobs
joe
joel
john
johnny
johns
johnson
johnston
join
joined
joining
joins
joint
joke
jokes
jon
jonathan
jones
jordan
jose
joseph
josh
joshua
journal
journalism
journalist
journalists
journals
journey
joy
joyce
jp
jpeg
jpg
jr
js
juan
judge
judges
judgment
judicial
judy
juice
jul
julia
julian
julie
july
jump
jumping
jun
junction
june
jungle
junior
junk
jurisdiction
jury
just
justice
justify
justin
juvenile
jvc
k
ka
kai
kansas
karaoke
karen
karl
karma
kate
kathy
katie
katrina
kay
kazakhstan
kb
kde
keen
keep
keeping
keeps
keith
kelkoo
kelly
ken
kennedy
kenneth
kenny
keno
kent
kentucky
kenya
kept
kernel
kerry
kevin
key
keyboard
keyboards
keys
keyword
keywords
kg
kick
kid
kidney
kids
kijiji
kill
killed
killer
killing
kills
kilometers
kim
kinase
kind
kinda
kinds
king
kingdom
kings
kingston
kirk
kiss
kissing
kit
kitchen
kits
kitty
klein
km
knee
knew
knife
knight
knights
knit
knitting
knives
knock
know
knowing
knowledge
knowledgestorm
known
knows
ko
kodak
kong
korea
korean
kruger
ks
kurt
kuwait
kw
ky
kyle
l
la
lab
label
labeled
labels
labor
laboratories
laboratory
labour
labs
lace
lack
ladder
laden
ladies
lady
lafayette
laid
lake
lakes
lamb
lambda
lamp
lamps
lan
lancaster
lance
land
landing
lands
landscape
landscapes
lane
lanes
lang
language
languages
lanka
lap
laptop
laptops
large
largely
larger
largest
larry
las
laser
last
lasting
lat
late
lately
later
latest
latex
latin
latina
latinas
latino
latitude
latter
latvia
lauderdale
laugh
laughing
launch
launched
launches
laundry
laura
lauren
law
lawn
lawrence
laws
lawsuit
lawyer
lawyers
lay
layer
layers
layout
lazy
lb
lbs
lc
lcd
ld
le
lead
leader
leaders
leadership
leading
leads
leaf
league
lean
learn
learned
learners
learning
lease
leasing
least
leather
leave
leaves
leaving
lebanon
lecture
lectures
led
lee
leeds
left
leg
legacy
legal
legally
legend
legendary
legends
legislation
legislative
legislature
legitimate
legs
leisure
lemon
len
lender
lenders
lending
length
lens
lenses
leo
leon
leonard
leone
les
lesbian
lesbians
leslie
less
lesser
lesson
lessons
let
lets
letter
letters
letting
leu
level
levels
levitra
levy
lewis
lexington
lexmark
lexus
lf
lg
li
liabilities
liability
liable
lib
liberal
liberia
liberty
librarian
libraries
library
libs
licence
license
licensed
licenses
licensing
licking
lid
lie
liechtenstein
lies
life
lifestyle
lifetime
lift
light
lighter
lighting
lightning
lights
lightweight
like
liked
likelihood
likely
likes
likewise
lil
lime
limit
limitation
limitations
limited
limiting
limits
limousines
lincoln
linda
lindsay
line
linear
lined
lines
lingerie
link
linked
linking
links
linux
lion
lions
lip
lips
liquid
lisa
list
listed
listen
listening
listing
listings
listprice
lists
lit
lite
literacy
literally
literary
literature
lithuania
litigation
little
live
livecam
lived
liver
liverpool
lives
livesex
livestock
living
liz
ll
llc
lloyd
llp
lm
ln
lo
load
loaded
loading
loads
loan
loans
lobby
loc
local
locale
locally
locate
located
location
locations
locator
lock
locked
locking
locks
lodge
lodging
log
logan
logged
logging
logic
logical
login
logistics
logitech
logo
logos
logs
lol
lolita
london
lone
lonely
long
longer
longest
longitude
look
looked
looking
looks
looksmart
lookup
loop
loops
loose
lopez
lord
los
lose
losing
loss
losses
lost
lot
lots
lottery
lotus
lou
loud
louis
louise
louisiana
louisville
lounge
love
loved
lovely
lover
lovers
loves
loving
low
lower
lowest
lows
lp
ls
lt
ltd
lu
lucas
lucia
luck
lucky
lucy
luggage
luis
luke
lunch
lung
luther
luxembourg
luxury
lycos
lying
lynn
lyric
lyrics
m
ma
mac
macedonia
machine
machinery
machines
macintosh
macro
macromedia
mad
madagascar
made
madison
madness
madonna
madrid
mae
mag
magazine
magazines
magic
magical
magnet
magnetic
magnificent
magnitude
mai
maiden
mail
mailed
mailing
mailman
mails
mailto
main
maine
mainland
mainly
mainstream
maintain
maintained
maintaining
maintains
maintenance
major
majority
make
maker
makers
makes
makeup
making
malawi
malaysia
maldives
male
males
mali
mall
malpractice
malta
mambo
man
manage
managed
management
manager
managers
managing
manchester
mandate
mandatory
manga
manhattan
manitoba
manner
manor
manual
manually
manuals
manufacture
manufactured
manufacturer
manufacturers
manufacturing
many
map
maple
mapping
maps
mar
marathon
marble
marc
march
marco
marcus
mardi
margaret
margin
maria
mariah
marie
marijuana
marilyn
marina
marine
mario
marion
maritime
mark
marked
marker
markers
market
marketing
marketplace
markets
marking
marks
marriage
married
marriott
marry
mars
marshall
mart
martha
martial
martin
marvel
mary
maryland
mas
mask
mason
mass
massachusetts
massage
massive
master
mastercard
masters
masturbating
masturbation
mat
match
matched
matches
matching
mate
material
materials
maternity
math
mathematical
mathematics
mating
matrix
mats
matt
matter
matters
matthew
mattress
mature
maui
mauritius
max
maximize
maximum
may
maybe
mayor
mazda
mb
mba
mc
mcdonald
mean
meet
mention
mess
metal
milk
mind
mirror
miss
mistake
mix
mixed
model
monitor
months
montreal
mood
moon
moore
moral
more
moreover
morgan
morning
morocco
morris
morrison
mortality
mortgage
mortgages
moscow
moses
moss
most
mostly
motel
motels
mother
motherboard
mothers
motion
motivated
motivation
motor
motorcycle
motorcycles
motorola
motors
mount
mountain
mountains
mounted
mounting
mounts
mouse
mouth
move
moved
movement
movements
movers
moves
movie
movies
moving
mozambique
mozilla
mp
mpeg
mpegs
mpg
mph
mr
mrna
mrs
ms
msg
msgid
msgstr
msie
msn
mt
mtv
mu
much
mud
mug
multi
multimedia
multiple
mumbai
munich
municipal
municipality
murder
murphy
murray
muscle
muscles
museum
museums
music
musical
musician
musicians
muslim
muslims
must
mustang
mutual
muze
mv
mw
mx
my
myanmar
myers
myrtle
myself
mysimon
myspace
mysql
mysterious
mystery
myth
n
na
nail
nails
naked
nam
name
named
namely
names
namespace
namibia
nancy
nano
naples
narrative
narrow
nasa
nascar
nasdaq
nashville
nasty
nat
nathan
nation
national
nationally
nations
nationwide
native
nato
natural
naturally
naturals
nature
naughty
nav
naval
navigate
navigation
navigator
navy
nb
nba
nbc
nc
ncaa
nd
ne
near
nearby
nearest
nearly
nebraska
nec
necessarily
necessary
necessity
neck
necklace
need
needed
needle
needs
negative
negotiate
negotiation
negotiations
neighbor
neighborhood
neighbors
neil
neither
nelson
neo
neon
nepal
nerve
nervous
nest
nested
net
netherlands
netscape
network
networking
networks
neural
neutral
nevada
never
nevertheless
new
newark
newbie
newcastle
newer
newest
newfoundland
newly
newport
news
newscom
newsletter
newsletters
newspaper
newspapers
newton
next
nextel
nfl
ng
nh
nhl
nhs
ni
niagara
nicaragua
nice
nicholas
nick
nickel
nickname
nicole
niger
nigeria
night
nightlife
nightmare
nights
nike
nikon
nil
nine
nintendo
nipple
nipples
nirvana
nissan
nitrogen
nj
nl
nm
nn
no
noble
nobody
node
nodes
noise
nokia
nominated
nomination
nominations
non
none
nonprofit
noon
nor
norfolk
norm
normal
normally
norman
north
northeast
northern
northwest
norton
norway
norwegian
nos
nose
not
note
notebook
notebooks
noted
notes
nothing
notic
%variable2-4%は次の文字列のいずれかになります。
ability
access
accident
account
act
action
activity
address
advantage
affair
afternoon
age
agent
air
airline
airport
alarm
ambition
amount
analysis
analyst
anger
angle
animal
answer
appeal
apple
appointment
area
arm
army
arrival
art
article
aside
assessing
assessment
assessments
asset
assets
assign
assigned
assignment
assignments
assist
assistance
assistant
assisted
assists
associate
associated
associates
association
associations
assume
assumed
assumes
assuming
assumption
assumptions
assurance
assure
assured
asthma
astrology
astronomy
asus
at
ata
ate
athens
athletes
athletic
athletics
ati
atlanta
atlantic
atlas
atm
atmosphere
atmospheric
atom
atomic
attach
attached
attachment
attachments
attack
attacked
attacks
attempt
attempted
attempting
attempts
attend
attendance
attended
attending
attention
attitude
attitudes
attorney
attorneys
attract
attraction
attractions
attractive
attribute
attributes
au
auburn
auckland
auction
auctions
aud
audi
audience
audio
audit
auditor
aug
august
aurora
aus
austin
australia
australian
austria
authentic
authentication
author
authorities
authority
authorization
authorized
authors
auto
automated
automatic
automatically
automation
automobile
automobiles
automotive
autos
autumn
av
availability
available
avatar
ave
avenue
average
avg
avi
aviation
avoid
avoiding
avon
aw
award
awarded
awards
aware
awareness
away
awesome
awful
axis
aye
az
azerbaijan
b
ba
babe
babes
babies
baby
bachelor
back
backed
background
backgrounds
backing
backup
bacon
bacteria
bacterial
bad
badge
badly
bag
baghdad
bags
bahamas
bahrain
bailey
bake
baker
baking
balance
balanced
bald
bali
ball
ballet
balloon
ballot
balls
baltimore
ban
banana
band
bands
bandwidth
bang
bangbus
bangkok
bangladesh
bank
banking
bankruptcy
banks
banned
banner
banners
baptist
bar
barbados
barbara
barbie
barcelona
bare
barely
bargain
bargains
barn
barnes
barrel
barrier
barriers
barry
bars
base
baseball
based
baseline
basement
basename
bases
basic
basically
basics
basin
basis
basket
basketball
baskets
bass
bat
batch
bath
bathroom
bathrooms
baths
batman
batteries
battery
battle
battlefield
bay
bb
bbc
bbs
bbw
bc
bd
bdsm
be
beach
beaches
beads
beam
bean
beans
bear
bearing
bears
beast
beastality
beastiality
beat
beatles
beats
beautiful
beautifully
beauty
beaver
became
because
become
becomes
becoming
bed
bedding
bedford
bedroom
bedrooms
beds
bee
beef
been
beer
before
began
begin
beginner
beginners
beginning
begins
begun
behalf
behavior
behavioral
behaviour
behind
beijing
being
beings
belarus
belfast
belgium
belief
beliefs
believe
believed
believes
belize
belkin
bell
belle
belly
belong
belongs
below
belt
belts
ben
bench
benchmark
bend
beneath
beneficial
benefit
benefits
benjamin
bennett
benz
berkeley
berlin
bermuda
bernard
berry
beside
besides
best
bestiality
bestsellers
bet
beta
beth
better
betting
betty
between
beverage
beverages
beverly
beyond
bg
bhutan
bi
bias
bible
biblical
bibliographic
bibliography
bicycle
bid
bidder
bidding
bids
big
bigger
biggest
bike
bikes
bikini
bill
billing
billion
bills
billy
bin
binary
bind
binding
bingo
bio
biodiversity
biographies
biography
biol
biological
biology
bios
biotechnology
bird
birds
birmingham
birth
birthday
bishop
bit
bitch
bite
bits
bitter
biz
bizarre
bizrate
bk
bl
black
blackberry
blackjack
blacks
blade
blades
blah
blair
blake
blame
blank
blanket
blast
bleeding
blend
bless
blessed
blind
blink
block
blocked
blocking
blocks
blog
blogger
bloggers
blogging
blogs
blond
blonde
blood
bloody
bloom
bloomberg
blow
blowing
blowjob
blowjobs
blue
blues
bluetooth
blvd
bm
bmw
bo
board
boards
boat
boating
boats
bob
bobby
boc
bodies
body
bold
bolivia
bolt
bomb
bon
bond
bondage
bonds
bone
bones
bonus
boob
boobs
book
booking
bookings
bookmark
bookmarks
books
bookstore
bool
boolean
boom
boost
boot
booth
boots
booty
border
borders
bored
boring
born
borough
bosnia
boss
boston
both
bother
botswana
bottle
bottles
bottom
bought
boulder
boulevard
bound
boundaries
boundary
bouquet
boutique
bow
bowl
bowling
box
boxed
boxes
boxing
boy
boyfriend
boys
bp
br
bra
bracelet
bracelets
bracket
brad
bradford
bradley
brain
brake
brakes
branch
branches
brand
brandon
brands
bras
brass
brave
brazil
brazilian
breach
bread
break
breakdown
breakfast
breaking
breaks
breast
breasts
breath
breathing
breed
breeding
breeds
brian
brick
bridal
bride
bridge
bridges
brief
briefing
briefly
briefs
bright
brighton
brilliant
bring
bringing
brings
brisbane
bristol
britain
britannica
british
britney
broad
broadband
broadcast
broadcasting
broader
broadway
brochure
brochures
broke
broken
broker
brokers
bronze
brook
brooklyn
brooks
bros
brother
brothers
brought
brown
browse
browser
browsers
browsing
bruce
brunei
brunette
brunswick
brush
brussels
brutal
bryan
bryant
bs
bt
bubble
buck
bucks
budapest
buddy
budget
budgets
buf
buffalo
buffer
bufing
bug
bugs
build
builder
builders
building
buildings
builds
built
bukkake
bulgaria
bulgarian
bulk
bull
bullet
bulletin
bumper
bunch
bundle
bunny
burden
bureau
buried
burke
burlington
burn
burner
burning
burns
burst
burton
bus
buses
bush
business
businesses
busty
busy
but
butler
butt
butter
butterfly
button
buttons
butts
buy
buyer
buyers
buying
buys
buzz
bw
by
bye
byte
bytes
c
ca
cab
cabin
cabinet
cabinets
cable
cables
cache
cached
cad
cadillac
cafe
cage
cake
cakes
cal
calcium
calculate
calculated
calculation
calculations
calculator
calculators
calendar
calendars
calgary
calibration
calif
california
call
called
calling
calls
calm
calvin
cam
cambodia
cambridge
camcorder
camcorders
came
camel
camera
cameras
cameron
cameroon
camp
campaign
campaigns
campbell
camping
camps
campus
cams
can
canada
canadian
canal
canberra
cancel
cancellation
cancelled
cancer
candidate
candidates
candle
candles
candy
cannon
canon
cant
canvas
canyon
cap
capabilities
capability
capable
capacity
cape
capital
capitol
caps
captain
capture
captured
car
carb
carbon
card
cardiac
cardiff
cardiovascular
cards
care
career
careers
careful
carefully
carey
cargo
caribbean
caring
carl
carlo
carlos
carmen
carnival
carol
carolina
caroline
carpet
carried
carrier
carriers
carries
carroll
carry
carrying
cars
cart
carter
cartoon
cartoons
cartridge
cartridges
cas
casa
case
cases
casey
cash
cashiers
casino
casinos
casio
cassette
cast
casting
castle
casual
cat
catalog
catalogs
catalogue
catalyst
catch
categories
category
catering
cathedral
catherine
catholic
cats
cattle
caught
cause
caused
causes
causing
caution
cave
cayman
cb
cbs
cc
ccd
cd
cdna
cds
cdt
ce
cedar
ceiling
celebrate
celebration
celebrities
celebrity
celebs
cell
cells
cellular
celtic
cement
cemetery
census
cent
center
centered
centers
central
centre
centres
cents
centuries
century
ceo
ceramic
ceremony
certain
certainly
certificate
certificates
certification
certified
cest
cet
cf
cfr
cg
cgi
ch
chad
chain
chains
chair
chairman
chairs
challenge
challenged
challenges
challenging
chamber
chambers
champagne
champion
champions
championship
championships
chan
chance
chancellor
chances
change
changed
changelog
changes
changing
channel
channels
chaos
chapel
chapter
chapters
char
character
characteristic
characteristics
characterization
characterized
characters
charge
charged
charger
chargers
charges
charging
charitable
chart
cheek
chest
chicken
child
chip
chocolate
choice
class
clerk
click
client
clock
closet
cloud
club
clue
coach
coast
coat
code
collar
combination
comfort
comment
commission
committee
communication
community
company
computer
concert
conclusion
condition
conference
confidence
consequence
consideration
contact
contest
contribution
control
conversation
cookie
copy
corner
counter
country
couple
courage
course
court
cow
crack
craft
cream
credit
crew
cross
culture
cup
curve
cycle
dad
damage
data
database
date
daughter
day
definition
degree
demand
department
departure
design
designer
desire
desk
detail
development
devil
diamond
diet
difference
dimension
direction
dirt
discipline
discount
dish
distance
district
doctor
document
dog
door
dot
draft
drawer
dream
dress
drop
dust
duty
ear
earth
ease
east
economics
economy
edge
effect
egg
emergency
end
engineer
enthusiasm
entrance
environment
equipment
error
essay
establishment
evening
evidence
exam
examination
example
exchange
exercise
exit
experience
expert
explanation
extension
eye
face
fact
factor
failure
family
fan
farm
farmer
fat
father
fault
fear
feature
fee
feeling
field
fight
figure
file
film
finance
finger
fire
fish
fishing
floor
flower
focus
food
foot
force
form
fortune
frame
freedom
friend
friendship
front
fruit
fuel
fun
function
funeral
future
game
gap
garage
garbage
garden
gas
gate
gear
gene
gift
girl
girlfriend
glass
glove
goal
god
gold
golf
government
grade
grandfather
grass
grocery
ground
group
growth
guarantee
guide
guy
habit
half
hall
hand
harm
hat
head
health
heat
historian
history
hole
holiday
home
honey
hook
hope
horror
horse
hospital
host
hour
house
husband
ice
idea
ideal
image
impact
implement
impression
improvement
income
independence
indication
industry
influence
information
injury
insect
inside
inspection
inspector
instance
instruction
intention
interest
internet
interview
investment
iron
issue
item
jacket
job
joint
judge
juice
key
kid
kind
king
kitchen
knee
knife
knowledge
lack
ladder
lady
land
landscape
language
law
lawyer
layer
league
leather
lecture
lesson
letter
level
library
lie
life
light
line
link
list
literature
living
load
loan
lock
log
love
luck
lunch
machine
mail
maintenance
man
management
manner
manufacturer
map
mark
market
marketing
marriage
master
material
matter
maximum
meal
meaning
meat
media
medicine
medium
meeting
menu
mess
metal
method
midnight
milk
mind
minimum
minute
mirror
mission
mistake
model
money
monitor
month
mood
morning
mortgage
mother
mountain
mouse
mouth
movie
muscle
music
nail
name
native
nature
neck
negotiation
net
network
news
noise
north
nose
note
nothing
notice
novel
number
nurse
object
obligation
occasion
officer
oil
opening
option
order
organization
outside
oven
pace
pack
package
page
pain
paint
pair
panic
paper
parent
park
parking
part
partner
party
passenger
path
patient
pattern
pause
peace
peak
penalty
pension
people
perception
period
person
phase
philosophy
phrase
physics
piano
picture
pie
piece
pin
pipe
pizza
place
plan
plane
plant
plastic
plate
platform
player
pleasure
plenty
poem
poet
point
policy
pollution
pool
position
post
pot
potato
pound
power
practice
presence
pressure
price
principle
problem
process
product
profession
professor
profile
profit
program
progress
project
proof
proposal
purple
purpose
quality
quantity
quarter
question
race
radio
rain
range
rate
reaction
reading
reason
reception
recognition
record
red
reference
register
relation
relative
relief
rent
replacement
reputation
request
requirement
research
restaurant
result
review
revolution
reward
rice
risk
river
rock
room
routine
row
ruin
rule
safety
salad
salary
sale
salt
sand
sandwich
satisfaction
saving
scale
schedule
次のプロセスを起動します。
utilman.exe
dwwin.exe
grpconv.exe
w32tm.exe
gpupdate.exe
eventcreate.exe
これらの実行中のプロセスに自身のコードを挿入して新たなスレッドを作成、実行します。
インストール終了後、元の実行ファイルを削除します。
情報の取得
このトロイの木馬は、次の情報を収集します。
ユーザー名
コンピューター名
ビデオコントローラの種類
OSのバージョン
言語設定
CPUの情報
ディスクデバイスとそのタイプの一覧
インストールされているアンチウイルスソフトウェア
OSとシステム設定に関する情報
収集した情報をリモートのコンピューターに送信しようとします。
その他の情報
このトロイの木馬は、リモートのコンピューターもしくはインターネットからデータや命令を受け取ります。
さまざまなURLを生成します。通信にはHTTPプロトコルが使用されます。
次を実行します。
リモートのコンピューターもしくはインターネットからファイルをダウンロードする
実行ファイルを実行する
自身をバージョンアップする
コンピューターをシャットダウン/再起動する
実行中のプロセスの一覧をリモートのコンピューターに送信する
特定のドライブに保存されているファイルの一覧をリモートのコンピューターに送信する
次の偽のエラーメッセージを表示します。