[filename.info logo]
[cn svchost.exe][de svchost.exe][es svchost.exe][fr svchost.exe][gb svchost.exe][it svchost.exe][jp svchost.exe][kr svchost.exe][nl svchost.exe][pt svchost.exe][ru svchost.exe][us svchost.exe]
 

svchost.exe (5.1.2600.0)

소프트웨어안에 포함하는

이름:Windows XP Home Edition, Deutsch
면허:상업
정보 연결:http://www.microsoft.com/windowsxp/

파일 세부사항

파일 경로:C:\WINDOWS\system32 \ svchost.exe
파일 날짜:2002-08-29 14:00:00
버전:5.1.2600.0
파일 사이즈:12.800 바이트

검사함과 파일은 잘게 썬다

CRC32:A799DDDB
MD5:ADBB 33D5 893B CF08 E75E A54B B566 9205
SHA1:23C5 5CF3 635D 2F77 B119 F639 853A 0A89 869E 30F3

버전 자원 정보

회사명:Microsoft Corporation
파일 설명:Generic Host Process for Win32 Services
파일 운영 체계:Windows NT, Windows 2000, Windows XP, Windows 2003
파일 유형:Application
파일 버전:5.1.2600.0
내부 이름:svchost.exe
법적인 저작권: Microsoft Corporation. All rights reserved.
원래 파일 이름:svchost.exe
제품 이름:Microsoft Windows Operating System
제품 버전:5.1.2600.0

svchost.exe은 뒤에 오는 보고안에 발견되었다:

Backdoor.Litmus.203.b

기술적 세부사항
...It copies itself as %windir%RandomSvchost.exe. NOTE: %windir% is a variable....
...LTM2    %windir%RandomSvchost.exe in the registry key...
제거 지시
...LTM2    %windir%RandomSvchost.exe from the registry key...
...Scroll through the list, and look for Svchost.exe If you find the file, click...
...LTM2    %windir%RandomSvchost.exe Exit the Registry Editor....
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.litmus.203.b.html

Backdoor.XTS

Backdoor.XTS에 관하여
...to the compromised system. The main module, Svchost.exe, is packed with UPX. Also Known As: Backdoor-ASL...
기술적 세부사항
...Drops the following files: %Windows%Svchost.exe %System%Extapi.dll...
...System Important Message. Path: %Windows%Svchost.exe -k ras. Injects Extapi.dll and Sysmsg.dll...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.xts.html

Spyware.Shopnav.dl

기술적 세부사항
...File names: Svchost.exe When Spyware.Shopnav is installed,...
근원: http://securityresponse.symantec.com/avcenter/venc/data/spyware.shopnav.dl.html

W32.BlueCode.Worm

기술적 세부사항
...Then, the .dll creates the C:Svchost.exe file and executes it. Svchost.exe performs the infection...
...First, the value Domain Manager C:svchost.exe is added to the registry key...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.bluecode.worm.html

W32.Jeefo

기술적 세부사항
...first-generation W32.Jeefo executable. Drop it as Svchost.exe (36,352 bytes) into the %Windir% folder....
...program parameter that specifies an infected application, which has dropped and run Svchost.exe. It will quit....
..."PowerManager"="%windir%svchost.exe" in the registry key:...
제거 지시
..."PowerManager"="%windir%svchost.exe" Exit the Registry Editor....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.jeefo.html

W32.Welchia.Worm

기술적 세부사항
...Makes a copy of %System%DllcacheTftpd.exe as %System%Winssvchost.exe. NOTE:...
...Service Binary: %System%winssvchost.exe This service will be set to...
...machine and instructs the victim machine to connect and download Dllhost.exe and Svchost.exe from the attacking machine....
...If the %System%dllcache ftpd.exe file exists, the worm may not download svchost.exe. Checks the computer's operating...
...The worm does not delete the file, %System%WinsSvchost.exe, which is a nonmalicious tftp server....
제거 지시
...values from the registry. Delete the Svchost.exe file. For details on each of these...
...Exit the Registry Editor. 6. Deleting the Svchost.exe file Navigate to the %System%Wins...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

Backdoor.Dewin

기술적 세부사항
...Some variants of this Trojan create the file, %Windows%svchost.exe. Adds the value:...
...SystemReg      C:\%Windows%svchost.exe run to the following registry...
제거 지시
...or: SystemReg C:\%Windows%svchost.exe run Click Registry, and then click...
...Added reference to minor variant which uses svchost.exe filename. Write-up by:...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dewin.html

W32.Assarm@mm

기술적 세부사항
...It determines whether the current file name is %windir%Svchost.exe. If it is, the worm then determines...
...If the current file name is not %windir%Svchost.exe, or if the argument "Install Me!" was passed to the worm, then the worm...
제거 지시
...95/98/Me, remove the line run=%windir%svchost.exe from the Win.ini file....
...similar to the following: run=%windir%svchost.exe If the line exists, select...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.assarm@mm.html

W32.HLLW.Cozit

Backdoor.XTS에 관하여
...It copies itself to the Windows folder as Svchost.exe and changes the registry to run this file whenever you start Windows....
기술적 세부사항
...When W32.HLLW.Cozit is executed, it copies itself to the Windows folder as Svchost.exe. If the HKEY_CURRENT_USERSoftwareKazaaLocalContent...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cozit.html

W32.Marol@mm

기술적 세부사항
...%Windir%TempWkCVX.exe %Windir% empSvchost.exe %System%COMD.exe...
..."admy" =  "%windir% empsvchost.exe" "MDriver" = "C:losiram.vbs"...
제거 지시
..."admy" =  "%windir% empsvchost.exe" "MDriver" = "C:losiram.vbs"...
......
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.marol@mm.html

항법

파일을 찾아보십시요

• 이름으로




Valid HTML 4.01!
Tegtmeier인터넷 해결책에의한 저작권2004 접대: NetGate