|
ftp.exe (5.1.2600.1106)
Содержали в средстве программирования |
|---|
| Имя: | Windows XP Home Edition, Deutsch |
|---|
| Лицензия: | коммерчески |
|---|
| Соединение информации: | http://www.microsoft.com/windowsxp/ |
|---|
Детали архива |
|---|
| Курс архива: | C:\WINDOWS\system32 \ ftp.exe |
|---|
| Дата архива: | 2002-08-29 14:00:00 |
|---|
| Вариант: | 5.1.2600.1106 |
|---|
| Размер архива: | 43.008 байты |
|---|
Hashes checksum и архива |
|---|
| CRC32: | 4ECE4C3B |
|---|
| MD5: | 156F C129 63B7 7DF5 2845 0B02 4434 6F76 |
|---|
| SHA1: | 6DDD 8053 5CE9 036D 6AE6 EEE9 EDF9 DBF3 B65C DA59 |
|---|
Данные по ресурса варианта |
|---|
| Имя компании: | Microsoft Corporation |
|---|
| Описание архива: | Programm zur Dateiübertragung |
|---|
| Оперативная система архива: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
|---|
| Тип архива: | Application |
|---|
| Вариант архива: | 5.1.2600.1106 |
|---|
| Внутренне имя: | ftp.exe |
|---|
| Законное авторское право: | © Microsoft Corporation. Alle Rechte vorbehalten. |
|---|
| Первоначально filename: | ftp.exe |
|---|
| Имя продукта: | Betriebssystem Microsoft® Windows® |
|---|
| Вариант продукта: | 5.1.2600.1106 |
|---|
ftp.exe было найдено в following рапортах:
|
|
|---|
Backdoor.FTP.AFtp |
|---|
Технически детали
...However, its file name, A-FTP.exe, is displayed in the Close Program dialog box (Windows 95/98/Me) or the Task Manager...
...You can remove Backdoor.FTP.AFtp from memory by selecting A-FTP.exe in the Close Program dialog box or the Task Manager and then clicking End Task....
Источник: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp.aftp.html |
|---|
PWSteal.Irftp |
|---|
Privacy Policy О PWSteal.Irftp Discovered on:...
...March 15, 2004 11:41:00 AM PWSteal.Irftp is a Trojan horse that mimics the online interfaces of Brazilian banks to try to...
...When it is executed, the archive installs the Trojan, which is usually named Ir_Ftp.exe. Type: Trojan Horse...
Технически детали
... When PWSteal.Irftp runs, it does the following:...
...Copies itself as %System%Ir_Ftp.exe. Note: %System% is a variable....
...Adds the value: "ir_ftp"="%System%ir_ftp.exe"...
Рекомендации
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
Инструкции удаления
...Run a full system scan and delete all the files detected as PWSteal.Irftp. Reverse the changes made to...
...Scroll through the list and look for Ir_Ftp.exe. If you find the file, click...
...If any files are detected as infected with PWSteal.Irftp, click Delete. 5. Reversing the changes made...
...right pane, delete the value: "ir_ftp"="%System%ir_ftp.exe"...
...email, which purports to be from Symantec but actually contains a link to PWSteal.Irftp: From (spoofed): "symantec"...
Источник: http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.irftp.html |
|---|
W97M.Marker.JG |
|---|
О PWSteal.Irftp
...file containing a small amount of information about the infected computer to an FTP server. Type: Macro...
Оценка угрозой
...Payload: ftp access Modifies files:...
Технически детали
...It attempts to upload this log file to an FTP server at a particular IP address, using a shell instruction and the application...
Рекомендации
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
Источник: http://securityresponse.symantec.com/avcenter/venc/data/w97m.marker.jg.html |
|---|
W97M.Marker.damaged |
|---|
О PWSteal.Irftp
...the text file C:Netldx.vxd with the commands to upload the log file to a remote FTP server. 4. Finally, it runs the Windows...
...This operation will fail because the IP address of the FTP server cannot be contacted....
Источник: http://securityresponse.symantec.com/avcenter/venc/data/w97m.marker.damaged.html |
|---|
W97M.Marker.KC.gen |
|---|
Технически детали
...the text file C:Netldx.vxd with the commands to upload the log file to a remote FTP server. Finally, it runs the Windows...
...This operation fails because the IP address of the FTP server cannot be contacted....
Источник: http://securityresponse.symantec.com/avcenter/venc/data/w97m.marker.kc.gen.html |
|---|
W32.Netsky.V@mm |
|---|
Технически детали
...listens on TCP port 5557. Installs an FTP server that listens on TCP port 5556....
...The viral index.html file launches ftp.exe, which is the default FTP client in Windows....
Рекомендации
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
Источник: http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.v@mm.html |
|---|
Backdoor.IRC.Aladinz.H |
|---|
Технически детали
...Fast.txt (a harmless text file) Ftp.exe (a legitimate Microsoft FTP client)...
Рекомендации
...many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server....
...that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services. Enforce a password policy....
Источник: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.h.html |
|---|
W32.Tkbot.Worm |
|---|
Технически детали
...Deletes the files: C:WinntSystem32Ftp.exe C:WinntSystem32Tftp.exe...
Источник: http://securityresponse.symantec.com/avcenter/venc/data/w32.tkbot.worm.html |
|---|
W32.HLLW.Mantas |
|---|
Технически детали
...command.com ftp.exe runhidden.exe...
......
Источник: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mantas.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn ftp.exe]](/img/nix.gif){kind=small}
