|
regedit.exe (5.1.2600.1106)
소프트웨어안에 포함하는 |
|---|
| 이름: | Windows XP Home Edition, Deutsch |
|---|
| 면허: | 상업 |
|---|
| 정보 연결: | http://www.microsoft.com/windowsxp/ |
|---|
파일 세부사항 |
|---|
| 파일 경로: | C:\WINDOWS\system32\dllcache \ regedit.exe |
|---|
| 파일 날짜: | 2002-08-29 14:00:00 |
|---|
| 버전: | 5.1.2600.1106 |
|---|
| 파일 사이즈: | 141.312 바이트 |
|---|
검사함과 파일은 잘게 썬다 |
|---|
| CRC32: | 2CD1203F |
|---|
| MD5: | FD95 FFEC C4B1 FE72 597D 7FA6 AF8C 2870 |
|---|
| SHA1: | 131D 51DC 0CE4 6941 4A20 5BA4 E9F3 E048 DC12 559C |
|---|
버전 자원 정보 |
|---|
| 회사명: | Microsoft Corporation |
|---|
| 파일 설명: | Registrierungs-Editor |
|---|
| 파일 운영 체계: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
|---|
| 파일 유형: | Application |
|---|
| 파일 버전: | 5.1.2600.1106 |
|---|
| 내부 이름: | REGEDIT |
|---|
| 법적인 저작권: | Microsoft Corporation. Alle Rechte vorbehalten. |
|---|
| 원래 파일 이름: | REGEDIT.EXE |
|---|
| 제품 이름: | Betriebssystem Microsoft Windows |
|---|
| 제품 버전: | 5.1.2600.1106 |
|---|
regedit.exe은 뒤에 오는 보고안에 발견되었다:
|
|
|---|
W32.HLLW.Reckus |
|---|
W32.HLLW.Reckus에 관하여
...It overwrites Notepad.exe and Regedit.exe with copies of itself and terminates antivirus and firewall processes....
위협 평가
...Overwrites C:WindowsNotepad.exe and C:WindowsRegedit.exe; may delete other system files....
기술적 세부사항
...Notepad.exe Regedit.exe Note: The worm overwrites...
제거 지시
...Because this worm overwrites regedit.exe, it will be necessary to restore this file from a backup copy before performing...
...(The Run dialog box appears.) Type regedit Then click OK. (The Registry...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.reckus.html |
|---|
W32.Alcarys.B@mm |
|---|
W32.HLLW.Reckus에 관하여
...It also overwrites many system files, including Regedit.exe. This causes the computer to...
위협 평가
...Overwrites all .scr and .com files, as well as Regedit.exe, Regsvr32.exe, and Scanregw.exe...
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
기술적 세부사항
...Beautiful MindWatchme.exe C:WindowsRegedit.exe C:WindowsScanregw.exe...
...MenuProgramsWindows Updatefile###.###.exe Regedit C:windows
egedit.exe...
제거 지시
...If the worm has successfully overwritten system files such as Regedit.exe, you first must reinstall Windows or restore the overwritten files from a clean...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
...MenuProgramsWindows Updatefile###.###.exe Regedit C:windows
egedit.exe...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.alcarys.b@mm.html |
|---|
VBS.JongBoy@mm |
|---|
W32.HLLW.Reckus에 관하여
...VBS.JongBoy@mm deletes the Regedit.exe file and attempts to overwrite several other system files....
위협 평가
...Deletes files: Deletes Regedit.exe and overwrites .dll, .ocx, and .sys files in the WindowsSystem folder...
기술적 세부사항
...If executed, this worm deletes the Regedit.exe file, which will prevent you from editing the Windows registry....
...It then attempts to delete Regedit.exe. Finally, this worm checks...
근원: http://securityresponse.symantec.com/avcenter/venc/data/vbs.jongboy@mm.html |
|---|
PIF.Fable.Worm |
|---|
W32.HLLW.Reckus에 관하여
...When executed, the worm adds several files to the hard disk and deletes the file Regedit.exe. The worm spreads by means...
위협 평가
...When first executed, the worm deletes the file Regedit.exe located at WindowsRegedit.exe....
기술적 세부사항
...After these files are created, the worm deletes [WindowsDir]Regedit.exe and sets the hidden and read only attributes on the newly inserted files....
제거 지시
...Delele all infections. If necessary, restore Regedit.exe from a clean backup. Write-up by:...
근원: http://securityresponse.symantec.com/avcenter/venc/data/pif.fable.worm.html |
|---|
W32.Duksten.B@mm |
|---|
기술적 세부사항
...It first renames C:\%windir%Regedit.exe to C:\%windir%m-Regedit.exe, and then it copies itself as C:\%windir%Regedit.exe....
제거 지시
...C:\%system%m_WAB.XRF manually. Rename m-Regedit.exe back to Regedit.exe Remove the value...
...and C:\%system%m_WAB.XRF . To rename m-Regedit.exe back to Regedit.exe: Follow the instructions for...
...paste--the following file names: m-Regedit.exe Click Find Now or Search Now....
...found and then click Rename. Change the name to Regedit.exe. Windows XP...
...paste--the following file names: m-Regedit.exe Verify that "Look in"...
...found and then click Rename. Change the name to Regedit.exe. To remove the value from the...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.b@mm.html |
|---|
W32.Duksten.E@mm |
|---|
기술적 세부사항
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then copies itself as %windir%Regedit.exe....
제거 지시
...%system%P_Base64.xrf and %system%P_WAB.XRF. Rename m_Regedit.exe back to Regedit.exe. Remove the value...
...%system%P_Base64.xrf and %system%P_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.e@mm.html |
|---|
W32.Duksten.D@mm |
|---|
기술적 세부사항
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then it copies itself as %windir%Regedit.exe....
제거 지시
...%system%m_Base64.xrf and %system%m_WAB.XRF. Rename m_Regedit.exe to Regedit.exe Remove the value...
...%system%m_Base64.xrf and %system%m_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.d@mm.html |
|---|
W32.Vig.Worm |
|---|
위협 평가
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
기술적 세부사항
...W32.Vig.Worm also deletes C:WindowsRegedit.exe. The path is hard-coded and...
제거 지시
...detected as W32.Vig.Worm. 2. Restore the Regedit.exe file if it was deleted by the worm....
...W32.Vig.Worm, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. 2. Type regedit and then click OK. The Registry Editor opens....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.vig.worm.html |
|---|
W32.HLLW.Vig |
|---|
위협 평가
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
기술적 세부사항
...W32.HLLW.Vig also deletes C:WindowsRegedit.exe. The path is hard-coded and...
제거 지시
...detected as W32.HLLW.Vig. Restore the Regedit.exe file if it was deleted by the worm....
...W32.HLLW.Vig, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.vig.html |
|---|
W32.Bajar.Worm.Int |
|---|
기술적 세부사항
...C:WindowsSystemNERFIX.vbs C:WindowsSystemRegedit.exe C:WindowsSystemMtv.exe...
...C:WindowsSystemirkov.exe C:WindowsSystemRegedit.exe C:WindowsSystemFonts.exe...
...C:Autoexec.bat C:WindowsRegedit.exe C:WindowsRegedit.com...
제거 지시
...If the worm deleted Autoexec.bat, Rundll.exe (Windows 95/98/Me only), or Regedit.exe, you must restore them from a clean backup or reinstall them before you can...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
......
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.worm.int.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn regedit.exe]](/img/nix.gif){kind=small}
