[filename.info logo]
[cn winlogon.exe][de winlogon.exe][es winlogon.exe][fr winlogon.exe][gb winlogon.exe][it winlogon.exe][jp winlogon.exe][kr winlogon.exe][nl winlogon.exe][pt winlogon.exe][ru winlogon.exe][us winlogon.exe]
 

winlogon.exe (5.1.2600.1106)

소프트웨어안에 포함하는

이름:Windows XP Home Edition, Deutsch
면허:상업
정보 연결:http://www.microsoft.com/windowsxp/

파일 세부사항

파일 경로:C:\WINDOWS\system32 \ winlogon.exe
파일 날짜:2002-08-29 14:00:00
버전:5.1.2600.1106
파일 사이즈:521.728 바이트

검사함과 파일은 잘게 썬다

CRC32:EFFDF5E1
MD5:6168 96B7 0828 6DA9 8D6A 0992 93F1 81D7
SHA1:3185 27E4 C475 E203 B220 2C43 7482 EACC C542 0195

버전 자원 정보

회사명:Microsoft Corporation
파일 설명:Windows NT-Anmeldung
파일 운영 체계:Windows NT, Windows 2000, Windows XP, Windows 2003
파일 유형:Application
파일 버전:5.1.2600.1106
내부 이름:winlogon
법적인 저작권: Microsoft Corporation. Alle Rechte vorbehalten.
원래 파일 이름:WINLOGON.EXE
제품 이름:Betriebssystem Microsoft Windows
제품 버전:5.1.2600.1106

winlogon.exe은 뒤에 오는 보고안에 발견되었다:

W32.Neveg.A@mm

기술적 세부사항
...Copies itself as %Windir%systemwinlogon.exe. Note: %Windir% is a variable...
...".Prog" = "%Windir%systemwinlogon.exe" "BuildLab" = "%Windir%systemwinlogon.exe"...
..."ccApps" = "%Windir%systemwinlogon.exe" "FriendlyTypeName"...
..."Microsoft Visual SourceSafe"= "%Windir%systemwinlogon.exe" "RegDone" = "%Windir%systemwinlogon.exe"...
..."TEXTCONV" = "%Windir%systemwinlogon.exe" "WMAudio" = "%Windir%systemwinlogon.exe"...
제거 지시
...".Prog" = "%Windir%systemwinlogon.exe" "BuildLab" = "%Windir%systemwinlogon.exe"...
..."ccApps" = "%Windir%systemwinlogon.exe" "FriendlyTypeName"...
..."Microsoft Visual SourceSafe"= "%Windir%systemwinlogon.exe" "RegDone" = "%Windir%systemwinlogon.exe"...
..."TEXTCONV" = "%Windir%systemwinlogon.exe" "WMAudio" = "%Windir%systemwinlogon.exe"...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.neveg.a@mm.html

Backdoor.Graybird

기술적 세부사항
...%System%Svch0st.exe %System%Winlogon.exe %System%Explorer.exe...
..."winlogon"="%System%Winlogon.exe" "system"="%System%Explorer.exe"...
제거 지시
..."winlogon"="%System%Winlogon.exe" "system"="%System%Explorer.exe"...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.html

W32.Marol@mm

기술적 세부사항
...itself as the following files: %Windir%Winlogon.exe %Windir%Marisol.exe...
..."Apnt" = "%Windir%winlogon.exe" "WorksCache" = "%Windir% empWkCVX.exe"...
제거 지시
..."Apnt" = "%Windir%winlogon.exe" "WorksCache" = "%Windir% empWkCVX.exe"...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.marol@mm.html

Backdoor.Trodal

기술적 세부사항
...Copies itself to %Windir%Winlogon.exe. Note: %Windir% is a variable....
...Creates the registry value "winlogon"="%windir%winlogon.exe"...
...Sets the file timestamp of %Windir%Winlogon.exe to the same values as the file, %Windir%win.ini....
제거 지시
...right pane, delete the value: "winlogon"="%windir%winlogon.exe"...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.trodal.html

Backdoor.Dsklite

기술적 세부사항
...Copies itself as %Windir%Winlogon.exe. NOTE: %Windir% is a variable....
..."Windows Logon Application"="%Windir%winlogon.exe" to the registry key:...
제거 지시
...Scroll through the list and look for winlogon.exe. If you find the file, click...
..."Windows Logon Application"="%Windir%winlogon.exe" Exit the Registry Editor....
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dsklite.html

Trojan.Hazzer

기술적 세부사항
...or: "winlogon"=<path to trojan>...
...L2logon.exe Winlogon.exe Tries to delete C:Msdos.exe....
제거 지시
...or: "winlogon"=<path to trojan>...
근원: http://securityresponse.symantec.com/avcenter/venc/data/trojan.hazzer.html

Spyware.TrueActive

기술적 세부사항
..._.exe; tamset.exe; sem.dll; winsdoc.dll; winlogon.exe When Spyware.TrueActive is...
...detected as Spyware.TrueActive) %Windir%winlogon.exe (main logger, detected as Spyware.TrueActive)...
근원: http://securityresponse.symantec.com/avcenter/venc/data/spyware.trueactive.html

Backdoor.Prorat

기술적 세부사항
...%System%Sservice.exe %Windir%Winlogon.exe Notes:...
...HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon from:...
...May inject a .dll file into the Winlogon process as a thread, which will end the processes of various security products....
제거 지시
...HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon In the right pane, modify...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.prorat.html

Backdoor.Beasty.H

기술적 세부사항
...Systray.exe Winlogon.exe NOTE:...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.beasty.h.html

Intruder Alert 3.6 W32_Netsky_D_Worm Policy

following file to be monitored: #windirwinlogon.exe Last modified on:...
......
근원: http://securityresponse.symantec.com/avcenter/security/Content/2004.03.01.html



Valid HTML 4.01!