바이러스 DB - 터보백신

2025 정부지원사업 2025 ICT 정보보호지원 사업으로 "화이트디펜더" 구축 비용 최대 80% 지원 받으세요!

바이러스 정보
터보백신에서 분석한 바이러스 위협 정보, 보안 통계를 확인할 수 있습니다.

이름: Trojan-W32/Maran.65628

바이러스 종류: Trojan

실행환경: Windows

증상요약: 윈도우 취약점을 이용해 전파되며 감염된 시스템은 다른 악성코드를 드랍시킨후 특정 온라인 게임에 접속하면 사용자 정보를 특정 메일 주소로 전송한다.

위험등급: 보통

확산방법: Explorer 보안취약점

치료방법: 터보백신 제품군으로 진단/치료 가능합니다.

※ 상세 설명: <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>*감염 경로 MS 보안 패치를 적용하지 않은 인터넷 사용자가 해킹된 사이트에 접속하면 자동으로 다운로드 되어 설치된다.<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left> *증상 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>-파일생성 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>윈도우 폴더에 alg.exe (Trojan-W32/Maran.34826.C) 라는 파일을 생성한다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 27pt; WORD-BREAK: keep-all; TEXT-INDENT: -27pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-char-indent-count: -3.0" align=left>- 윈도우 폴더란? <o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 95/98/ME/XP  -C:\Windows,<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 NT/2000      - C:\WinNT <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>윈도우 시스템 폴더에 okviewer4.dll(Trojan-W32/Maran/105984.B)라는 파일을 생성한다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 27pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-char-indent-count: 3.0" align=left>-윈도우 시스템 폴더? <o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 95/98/ME/XP  - C:\Windows\System,<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 NT/2000      -C:\WinNT\System32<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>-          윈도우 XP           - C:\Windows\System32 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 45pt; WORD-BREAK: keep-all; TEXT-INDENT: -18pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-list: l0 level1 lfo1; tab-stops: list 45.0pt" align=left>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p>-레지스트리 등록</o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p>레지스트리에 다음 value를 등록해 윈도우 구동시 자동 실행되도록 만든다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; TEXT-INDENT: 4.5pt; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan; mso-char-indent-count: .5" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PCIDown <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left> </o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>- (윈도우 폴더)\alg.exe - LSP(Layered Service Providers) 등록 <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left> 아래의 레지값을 변경하여 인터넷 실행시 okviewer4.dll이 실행되도록 한다.<o:p></o:p> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left> okviewer4.dll삭제시 lsp값을 복구 시켜줘야 정상적으로 네트워크 사용이 가능하다. <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left><o:p></o:p>  <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; WORD-BREAK: keep-all; LINE-HEIGHT: 13pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-ALIGN: left; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-pagination: widow-orphan" align=left>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2<o:p></o:p><SPAN lang=EN-US style="FONT-SIZE: 9pt; COLOR: #4b4c4c; FONT-FAMILY: 바탕; mso-bidi-font-family: ''''Times New Roman''''; mso-font-kerning: 1.0pt; mso-hansi-font-family: ''''Times New Roman''''; mso-ansi-language: EN-US; mso-fareast-language: KO; mso-bidi-language: AR-SA">\Parameters\Protocol_Catalog9\Catalog_Entries

※ 예방 및 수동 조치 방법

본 컨텐츠에 대한 이용 문의는 '에브리존'으로 문의하여 주십시요

이전글: Trojan-W32/Nilage.6656.B

터보백신 개인용 TurboVaccine Introduce

터보백신 개인용
TurboVaccine Introduce