[filename.info logo]
[cn ftp.exe][de ftp.exe][es ftp.exe][fr ftp.exe][gb ftp.exe][it ftp.exe][jp ftp.exe][kr ftp.exe][nl ftp.exe][pt ftp.exe][ru ftp.exe][us ftp.exe]
 

ftp.exe (5.1.2600.1106)

소프트웨어안에 포함하는

이름:Windows XP Home Edition, Deutsch
면허:상업
정보 연결:http://www.microsoft.com/windowsxp/

파일 세부사항

파일 경로:C:\WINDOWS\system32 \ ftp.exe
파일 날짜:2002-08-29 14:00:00
버전:5.1.2600.1106
파일 사이즈:43.008 바이트

검사함과 파일은 잘게 썬다

CRC32:4ECE4C3B
MD5:156F C129 63B7 7DF5 2845 0B02 4434 6F76
SHA1:6DDD 8053 5CE9 036D 6AE6 EEE9 EDF9 DBF3 B65C DA59

버전 자원 정보

회사명:Microsoft Corporation
파일 설명:Programm zur Dateiübertragung
파일 운영 체계:Windows NT, Windows 2000, Windows XP, Windows 2003
파일 유형:Application
파일 버전:5.1.2600.1106
내부 이름:ftp.exe
법적인 저작권:© Microsoft Corporation. Alle Rechte vorbehalten.
원래 파일 이름:ftp.exe
제품 이름:Betriebssystem Microsoft® Windows®
제품 버전:5.1.2600.1106

ftp.exe은 뒤에 오는 보고안에 발견되었다:

Backdoor.FTP.AFtp

기술적 세부사항
...However, its file name, A-FTP.exe, is displayed in the Close Program dialog box (Windows 95/98/Me) or the Task Manager...
...You can remove Backdoor.FTP.AFtp from memory by selecting A-FTP.exe in the Close Program dialog box or the Task Manager and then clicking End Task....
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp.aftp.html

PWSteal.Irftp

Privacy Policy PWSteal.Irftp에 관하여 Discovered on:...
...March 15, 2004 11:41:00 AM PWSteal.Irftp is a Trojan horse that mimics the online interfaces of Brazilian banks to try to...
...When it is executed, the archive installs the Trojan, which is usually named Ir_Ftp.exe. Type: Trojan Horse...
기술적 세부사항
... When PWSteal.Irftp runs, it does the following:...
...Copies itself as %System%Ir_Ftp.exe. Note: %System% is a variable....
...Adds the value: "ir_ftp"="%System%ir_ftp.exe"...
권고
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
제거 지시
...Run a full system scan and delete all the files detected as PWSteal.Irftp. Reverse the changes made to...
...Scroll through the list and look for Ir_Ftp.exe. If you find the file, click...
...If any files are detected as infected with PWSteal.Irftp, click Delete. 5. Reversing the changes made...
...right pane, delete the value: "ir_ftp"="%System%ir_ftp.exe"...
...email, which purports to be from Symantec but actually contains a link to PWSteal.Irftp: From (spoofed): "symantec"...
근원: http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.irftp.html

W97M.Marker.JG

PWSteal.Irftp에 관하여
...file containing a small amount of information about the infected computer to an FTP server. Type: Macro...
위협 평가
...Payload: ftp access Modifies files:...
기술적 세부사항
...It attempts to upload this log file to an FTP server at a particular IP address, using a shell instruction and the application...
권고
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w97m.marker.jg.html

W97M.Marker.damaged

PWSteal.Irftp에 관하여
...the text file C:Netldx.vxd with the commands to upload the log file to a remote FTP server. 4. Finally, it runs the Windows...
...This operation will fail because the IP address of the FTP server cannot be contacted....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w97m.marker.damaged.html

W97M.Marker.KC.gen

기술적 세부사항
...the text file C:Netldx.vxd with the commands to upload the log file to a remote FTP server. Finally, it runs the Windows...
...This operation fails because the IP address of the FTP server cannot be contacted....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w97m.marker.kc.gen.html

W32.Netsky.V@mm

기술적 세부사항
...listens on TCP port 5557. Installs an FTP server that listens on TCP port 5556....
...The viral index.html file launches ftp.exe, which is the default FTP client in Windows....
권고
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.v@mm.html

Backdoor.IRC.Aladinz.H

기술적 세부사항
...Fast.txt (a harmless text file) Ftp.exe (a legitimate Microsoft FTP client)...
권고
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.h.html

W32.Tkbot.Worm

기술적 세부사항
...Deletes the files: C:WinntSystem32Ftp.exe C:WinntSystem32Tftp.exe...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.tkbot.worm.html

W32.HLLW.Mantas

기술적 세부사항
...command.com ftp.exe runhidden.exe...
......
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mantas.html



Valid HTML 4.01!