바이러스 DB - 터보백신

2025 정부지원사업 2025 ICT 정보보호지원 사업으로 "화이트디펜더" 구축 비용 최대 80% 지원 받으세요!

바이러스 정보
터보백신에서 분석한 바이러스 위협 정보, 보안 통계를 확인할 수 있습니다.

이름: Trojan-W32/KorHack.91136

바이러스 종류: Trojan

실행환경: Windows

증상요약: 사용자가 특정 게임에 접속하여 아이디와 비밀 번호를 입력하면 이를 가로채어 특정 메일로 전송 하여 사용자 정보 유출을 시도한다.

위험등급: 보통

확산방법: 파일 공유, explorer

치료방법: 터보백신 제품군으로 진단/치료 가능합니다.

※ 상세 설명: <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto" align=left>*감염 경로 해킹된 웹사이트 또는 파일 공유 등을 통하여 감염된다.<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto" align=left> *증상 -파일 생성 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 27pt; WORD-BREAK: keep-all; TEXT-INDENT: -27pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: -3.0" align=left>윈도우 폴더\inf\ 폴더에 runndll32.exe 라는 파일을 생성한다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 27pt; WORD-BREAK: keep-all; TEXT-INDENT: -27pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: -3.0" align=left> - 윈도우 폴더란? <o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 95/98/ME/XP  -C:\Windows,<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 NT/2000         - C:\WinNT <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto" align=left>윈도우 시스템 폴더에 hhdll.dll 라는 파일을 생성한다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 27pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: 3.0" align=left>-윈도우 시스템 폴더? <o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 95/98/ME/XP  - C:\Windows\System,<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 NT/2000          -C:\WinNT\System32<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 XP                  - C:\Windows\System32 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>-레지스트리 등록 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  레지스트리에 다음 value를 등록해 윈도우 구동시 자동 실행되도록 만든다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Rhg="windows\inf\rundll32.exe"     <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left> 감염된 시스템은 사용자가 특정 게임에 접속하면 사용자가 입력한 정보를 특정 메일에 전송한다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-pagination: widow-orphan; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-char-indent-count: .5" align=left>

※ 예방 및 수동 조치 방법

본 컨텐츠에 대한 이용 문의는 '에브리존'으로 문의하여 주십시요

이전글: W32/Warezov.150844@mm

다음글: W32/Viking.B

터보백신 개인용 TurboVaccine Introduce

터보백신 개인용
TurboVaccine Introduce