Comcastのスパイウェアもどきの詳細

どのようなファイルに変更があったのかSandbox内に追加されたファイルのリストです。

まずはCドライブ

Directory of C:\\
2007/08/22  11:41    <DIR>          .
2007/08/22  11:41    <DIR>          ..
2007/08/22  11:41             1,449 net_save.dna
2007/08/22  11:40    <DIR>          Program Files
2007/08/22  11:39    <DIR>          WINDOWS
1 File(s)          1,449 bytes
Directory of C:\Program Files
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2007/08/22  11:40    <DIR>          support.com
0 File(s)              0 bytes
Directory of C:\Program Files\support.com
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2007/08/22  11:40    <DIR>          backup
2007/08/22  11:40    <DIR>          bin
2007/08/22  11:40    <DIR>          dnaback
2007/08/22  11:40    <DIR>          help
2007/08/22  11:40    <DIR>          misc
2007/08/22  11:40    <DIR>          pub
2007/08/22  11:40    <DIR>          scripts
2007/08/22  11:40    <DIR>          shared
2007/08/22  11:40    <DIR>          temp
2007/08/22  11:40    <DIR>          uninstall
2007/08/22  11:40    <DIR>          vault
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\backup
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\bin
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2005/01/18  05:55           202,320 sdcnetcheck.dll
2005/01/18  05:55           292,432 ssctlnwk.dll
2005/01/18  05:55           222,800 tgctlcm.dll
2005/01/18  05:55           112,208 tgctlpw.dll
2005/01/18  05:55         1,701,456 tgctlsi.dll
2005/01/18  05:55         2,180,688 tglib.dll
6 File(s)      4,711,904 bytes
Directory of C:\Program Files\support.com\dnaback
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\help
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\misc
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2005/03/04  04:52            28,838 comcast.ico
1 File(s)         28,838 bytes
Directory of C:\Program Files\support.com\pub
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\scripts
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\shared
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\temp
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Program Files\support.com\uninstall
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2005/07/22  07:01           330,312 chsi_uninstaller.exe
1 File(s)        330,312 bytes
Directory of C:\Program Files\support.com\vault
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\WINDOWS
2007/08/22  11:39    <DIR>          .
2007/08/22  11:39    <DIR>          ..
2007/08/22  11:35    <DIR>          system32
0 File(s)              0 bytes
Directory of C:\WINDOWS\system32
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35    <DIR>          WBEM
0 File(s)              0 bytes
Directory of C:\WINDOWS\system32\WBEM
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35    <DIR>          Logs
0 File(s)              0 bytes
Directory of C:\WINDOWS\system32\WBEM\Logs
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35            21,457 wbemprox.log
1 File(s)         21,457 bytes

ユーザーディレクトリ(All Users)には以下のような変更が。

Directory of C:\Documents and Settings\All Users
2007/09/14  15:26    <DIR>          .
2007/09/14  15:26    <DIR>          ..
2007/08/22  11:39    <DIR>          Application Data
2007/09/14  15:26                 0 filelist2.txt
1 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data
2007/08/22  11:39    <DIR>          .
2007/08/22  11:39    <DIR>          ..
2007/08/22  11:35    <DIR>          Microsoft
2007/08/22  11:39    <DIR>          Support.com
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Microsoft
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35    <DIR>          Network
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Microsoft\Network
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35    <DIR>          Connections
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35    <DIR>          Pbk
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk
2007/08/22  11:35    <DIR>          .
2007/08/22  11:35    <DIR>          ..
2007/08/22  11:35                 0 rasphone.pbk
1 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com
2007/08/22  11:39    <DIR>          .
2007/08/22  11:39    <DIR>          ..
2007/08/22  11:40    <DIR>          profiles
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2007/08/22  11:41    <DIR>          [username]
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]
2007/08/22  11:41    <DIR>          .
2007/08/22  11:41    <DIR>          ..
2007/08/22  11:41    <DIR>          SdCommon
2007/08/22  11:40    <DIR>          {INSTALL}
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\SdCommon
2007/08/22  11:41    <DIR>          .
2007/08/22  11:41    <DIR>          ..
2007/08/22  11:42    <DIR>          logs
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\SdCommon\logs
2007/08/22  11:42    <DIR>          .
2007/08/22  11:42    <DIR>          ..
2007/08/22  11:41                 0 err89F.tmp
2007/08/22  11:41                 0 err8A1.tmp
2007/08/22  11:42                 0 err8AF.tmp
2007/08/22  11:42                 0 err8B1.tmp
2007/08/22  11:42                 0 err8BF.tmp
2007/08/22  11:42                 0 err8C1.tmp
2007/08/22  11:41               277 out89E.tmp
2007/08/22  11:41               277 out8A0.tmp
2007/08/22  11:42               277 out8AE.tmp
2007/08/22  11:42               277 out8B0.tmp
2007/08/22  11:42               277 out8BE.tmp
2007/08/22  11:42               277 out8C0.tmp
12 File(s)          1,662 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2007/08/22  11:40    <DIR>          actions
2005/01/18  06:02             3,257 config.cfg
2007/08/22  11:40    <DIR>          dnaback
2007/08/22  11:43    <DIR>          issues
2007/08/22  11:40    <DIR>          lastrun
2007/08/22  11:40    <DIR>          logs
2007/08/22  11:40    <DIR>          prefs
1 File(s)          3,257 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}\actions
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}\dnaback
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}\issues
2007/08/22  11:43    <DIR>          .
2007/08/22  11:43    <DIR>          ..
2007/08/22  11:42           162,518 0828d971-83fa-466e-8bac-dc240209f3bc.xml
2007/08/22  11:41           162,518 0fb6f4d1-a5a5-40b3-8ccf-4c03e9c1d83f.xml
2007/08/22  11:41           162,518 13829b74-957c-42c1-84e7-91cfcc5834db.xml
2007/08/22  11:41           162,518 185145ca-64b2-4d40-bb3e-064d31739edc.xml
2007/08/22  11:42           162,518 1ad62063-dfbe-4698-9559-a61c8f7936b3.xml
2007/08/22  11:42           162,518 1ce033b7-fd42-4996-a6eb-9bac3c4a46db.xml
2007/08/22  11:43           148,966 1dda67e9-ab9f-44ab-bedb-aedee5acb0d2.xml
2007/08/22  11:41           162,518 265e7871-5e4d-411c-80c2-db68355a1ee9.xml
2007/08/22  11:41           162,518 2b53591c-3f0c-4a34-8828-7076914bfa77.xml
2007/08/22  11:40           162,518 356bfba4-7a10-4f71-83df-5af71c58f4bb.xml
2007/08/22  11:40           162,518 36fc9c73-2e26-4fa0-ab8f-61426fce8bac.xml
2007/08/22  11:43             7,374 3a41ac0d-36a7-495a-96ce-d09dc6fd6209.cab
2007/08/22  11:43           166,222 3a41ac0d-36a7-495a-96ce-d09dc6fd6209.xml
2007/08/22  11:43           148,966 45490d5b-5970-4545-b246-f9abfe3ec952.xml
2007/08/22  11:41           162,518 486290d6-57a4-4c9a-9ccb-c5e4e35b5155.xml
2007/08/22  11:41           162,518 50d6a579-5185-4a3b-832c-2d2e465fac00.xml
2007/08/22  11:40           162,518 58ed714e-8d11-43ba-a824-6a1861a011c7.xml
2007/08/22  11:40           162,518 59fc6b33-29a6-4138-a967-2a24092b5ca0.xml
2007/08/22  11:42           162,518 5b5babdb-2bd4-4f41-85c7-1077aa17d92a.xml
2007/08/22  11:41           162,518 618f3f77-fe28-4d75-9833-d17a37eba491.xml
2007/08/22  11:40           162,518 65909d31-4159-4bd3-80b1-f67fede4c51f.xml
2007/08/22  11:42           164,174 666401a6-ef5d-4a77-b8a8-29682c6b6623.xml
2007/08/22  11:41           162,518 6931c213-4f8e-4231-9690-47c7749aeca2.xml
2007/08/22  11:42           164,174 6a0c30da-8809-4119-b6e0-ed3bcd68e191.xml
2007/08/22  11:40           162,518 6ba8d1a5-19be-40d0-a4f9-3311ab5e502e.xml
2007/08/22  11:41           162,518 6e5299eb-b8d2-4f24-9024-8a5187fd5b5b.xml
2007/08/22  11:40           162,518 72d5c32b-2a01-47ae-a052-31e875068241.xml
2007/08/22  11:40           162,518 732c7876-8d2f-4ec1-88ea-6ccb97d676ee.xml
2007/08/22  11:42           162,518 7bd483aa-dd1b-4a47-97ce-daed992f2a91.xml
2007/08/22  11:42           162,518 82bb4965-511d-401e-90f1-d51a35737a81.xml
2007/08/22  11:41           162,518 862d262a-fe95-4083-bb93-a1fdaf734f8c.xml
2007/08/22  11:42           162,518 88ba25df-46c2-4020-a24c-e014663cfdb1.xml
2007/08/22  11:42           164,174 8a4f8e2c-010b-4aad-87f6-cd7abfd0e7bf.xml
2007/08/22  11:42           164,174 8bf3b8cd-1a84-4774-9857-42c30a794908.xml
2007/08/22  11:40           162,518 8efd5e4e-8e5c-45f3-9a1a-eb2b15ea92d1.xml
2007/08/22  11:41           162,518 9145dca7-96ab-4e6b-ad49-73e55b753c6b.xml
2007/08/22  11:41           162,518 9161b6a3-eb98-48e9-8a13-1338b7f4f90f.xml
2007/08/22  11:40           162,518 95429e4a-e29a-4466-ba88-0200f905a527.xml
2007/08/22  11:42           162,518 95e3f722-59a4-4a89-9201-1b2eac02ef13.xml
2007/08/22  11:40           162,518 9ad8ded1-7b9f-4805-a792-abb5c21f11c8.xml
2007/08/22  11:42           164,174 9b33acaa-ec5a-4bc7-9ee2-0da7ad4cb516.xml
2007/08/22  11:41           162,518 9b5b9b27-b4ca-490d-b18f-ef3f910c23e9.xml
2007/08/22  11:41           162,518 9c161e45-bf9c-4d53-ad70-8fbdcec0791d.xml
2007/08/22  11:40           162,518 9c9298c4-9330-46c4-80e8-97115fa4933d.xml
2007/08/22  11:41           162,518 a04107e4-e8b1-44fa-b12b-c05b191243af.xml
2007/08/22  11:42           162,518 a0bcff0e-3bfc-4016-a3e7-4d5a159a9d1a.xml
2007/08/22  11:41           162,518 a33df661-6048-4c9b-b2e2-c7ed90e8488f.xml
2007/08/22  11:42           164,174 a89e80c5-7754-4f02-9c91-bb96a28dad6e.xml
2007/08/22  11:42           164,174 ace5c000-8bec-4714-8bde-fee76f76c4ee.xml
2007/08/22  11:41           162,518 b75b4c6b-2593-49cc-9e57-ad74fe858b03.xml
2007/08/22  11:40           162,518 ba5e53b0-5ae2-4775-bcaa-6918f35efc01.xml
2007/08/22  11:40           162,518 bc2065a8-4507-4dfe-9cc9-dd39f74313ff.xml
2007/08/22  11:41           162,518 bc245372-da8c-499b-9cbc-5c0e8f24ef9c.xml
2007/08/22  11:40           162,518 bc9c9853-e664-4b81-b1c9-4dba42caca4c.xml
2007/08/22  11:41           162,518 bceaefd3-7921-4c81-96d8-1da291bf92db.xml
2007/08/22  11:42           164,174 bfa1afec-f0cd-4070-a3ea-62faf16a8a57.xml
2007/08/22  11:42           164,174 c0ac04b9-6ffa-46b0-91b0-1e1c214e86e9.xml
2007/08/22  11:42           164,174 c1f7ba8f-11b4-4970-9113-db68c4256107.xml
2007/08/22  11:40           162,518 c20be2ce-d615-424c-a699-fcfac6cd3daf.xml
2007/08/22  11:41           162,518 c3a353a2-042d-4bc9-b3d6-d817802f7bca.xml
2007/08/22  11:40           162,518 c78f34ce-c655-4e94-9ff8-3a00b5cd6353.xml
2007/08/22  11:41           162,518 cb9c77ff-1060-4a61-af6f-3fbf3d969650.xml
2007/08/22  11:42           164,174 d5455307-887d-4e65-ab77-e7b11f7754fc.xml
2007/08/22  11:42           162,518 d5c29a67-9c95-4359-82fe-eb75447ece2b.xml
2007/08/22  11:42           162,518 d6838d60-4d27-438c-b247-5ad1d8306318.xml
2007/08/22  11:41           162,518 d7294303-03c0-44ef-83b6-ab86d7ef9c7c.xml
2007/08/22  11:41           162,518 d7f95d1c-d85e-40a6-ba77-a4838b4cc5e0.xml
2007/08/22  11:40           162,518 d9e5b844-9093-499e-bbc7-f3d2dcf0d6ec.xml
2007/08/22  11:40           162,518 dfdfa329-9fb8-47e4-b5c3-b8bf0b5eb815.xml
2007/08/22  11:41           162,518 e1a446d7-d82e-44fd-9a9f-88b36ccb7245.xml
2007/08/22  11:41           162,518 e1da241f-c6e5-4578-9047-49281e19b059.xml
2007/08/22  11:40           162,518 e4d15c16-f01b-4878-9055-b04d1af5154d.xml
2007/08/22  11:41           162,518 e6d4cfd9-2ac5-4c3e-a666-145c4ebc2424.xml
2007/08/22  11:40           162,518 e7c8dc8f-1662-4f81-870f-2852784fb2ff.xml
2007/08/22  11:41           162,518 e9d55489-c154-4a6e-8772-b72ed581791b.xml
2007/08/22  11:40           162,518 f166d2ba-5440-4921-9fc7-853bb1c89f42.xml
2007/08/22  11:42           162,518 f381d570-c384-4abc-b47c-45e00e28e49b.xml
2007/08/22  11:41           162,518 f66d550e-d8f9-4e2a-b0ee-d031ca69c608.xml
2007/08/22  11:42           162,518 f79e3bbd-4d1a-4ab9-9e31-7dbd71bbef97.xml
2007/08/22  11:41           162,518 ff486354-006a-410a-93a5-fedd6e02e813.xml
2007/08/22  11:40             2,274 siidx.xml
81 File(s)     12,843,386 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}\lastrun
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}\logs
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
0 File(s)              0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Support.com\profiles\[username]\{INSTALL}\prefs
2007/08/22  11:40    <DIR>          .
2007/08/22  11:40    <DIR>          ..
2005/01/18  06:02             4,808 default.xml
1 File(s)          4,808 bytes

RASに変更って・・・・・・恐ろしい。

問題なのは、サポートスタッフは自分が何をしているのか分からずにこれを顧客にインストールしろと言っていることですよね。