|
rundll.exe
ファイルrundll.exe は私達のデータベースにまだない。
rundll.exe は次のレポートで見つけられた:
|
Backdoor.LoxoScam |
技術的詳細 ...It attempts to replace %windir%Rundll.exe and C:Progra~1Micros~1OfficeFindfast.exe with the file Exec.hlp.... ...It modifies the value from LoadPowerProfile Rundll32.exe powerprof.dll,LoadCurrentPwrScheme... ...to LoadPowerProfile Rundll.exe powerprof.dll,LoadCurrentPwrScheme... 取り外しの指示 ...%windir%Sys.bat if they exist. Restore Rundll.exe and Findfast.exe. Reverse the changes that it... ...%windir%Sys.bat if they exist. To restore Rundll.exe and Findfast.exe: Using Windows Explorer, copy... ...If the vlaue LoadPowerProfile Rundll.exe powerprof.dll,LoadCurrentPwrScheme... ...exists, modiify it to LoadPowerProfile Rundll32.exe powerprof.dll,LoadCurrentPwrScheme... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.loxoscam.html |
Backdoor.SchoolBus.B |
技術的詳細 ...Copies code that is contained in the Trojan as %System%Rundll.exe. NOTES:... ...C:WindowsSystem32 (Windows XP). Rundll.exe itself is a Trojan. It attempts to do the following:... ...%System%Explorer.exe (This file is executed by Rundll.exe, and is used to send system information to a hacker.)... ...Adds the value: rundll "c:windowssystem
undll.exe"... ...Adds the values: rundll "c:windowssystem
undll.exe"... ...rundll32 "c:windowssystem
undll32.exe" to the registry key:... ...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsActive Setup Installed ComponentsRundll Creates the WindowsVCM folder... 取り外しの指示 ...right pane, delete the value: rundll "c:windowssystem
undll.exe"... ...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsActive Setup Installed ComponentsRundll In the right pane, delete... ...the value: rundll "c:windowssystem
undll.exe"... ...rundll32 "c:windowssystem
undll32.exe" Exit the Registry Editor.... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.schoolbus.b.html |
Backdoor.LittleWitch.B |
Backdoor.LittleWitch.B について ...to a compromised computer. The presence of the file Rundll.exe is an indicator of a possible infection.... 技術的詳細 ...It copies itself as %system%Rundll.exe. It creates the file %windir%Usr.dat.... ...The Trojan creates the value Rundll Rundll.exe in the registry key... 取り外しの指示 ...Scroll through the list, and look for Rundll.exe. If you find the file, click... ...right pane, delete the value Rundll Rundll.exe Exit the Registry Editor.... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.littlewitch.b.html |
Backdoor.LittleWitch.C |
Backdoor.LittleWitch.B について ...The presence of the file, Rundll.exe, in the %System% folder is an indicator of a possible infection.... 技術的詳細 ...Copies itself as %System%Rundll.exe. Creates the file, %Windir%Usr.dat.... ...Creates the value: Rundll Rundll.exe in the registry key:... 取り外しの指示 ...Scroll through the list and look for Rundll.exe. If you find the file, click... ...right pane, delete the value: Rundll Rundll.exe Exit the Registry Editor.... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.littlewitch.c.html |
W32.Bajar.Worm.Int |
技術的詳細 ...The .vbs script also deletes the file C:WindowsRundll.exe. Finally, after executing the... 取り外しの指示 ...If the worm deleted Autoexec.bat, Rundll.exe (Windows 95/98/Me only), or Regedit.exe, you must restore them from a clean backup... 源: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.worm.int.html |
VBS.Bajar.B@mm |
脅威の査定 ...deletes c:windowssystemWsock32.dll, c:windows
undll.exe, c:windows
undll32.exe, and overwrites other system files.... 技術的詳細 ...C:WindowsSystemWsock32.dll C:WindowsRundll32.exe C:WindowsRundll.exe... 源: http://securityresponse.symantec.com/avcenter/venc/data/vbs.bajar.b@mm.html |
W32.Bajar.B@mm |
脅威の査定 ...deletes c:windowssystemWsock32.dll, c:windows
undll.exe, c:windows
undll32.exe, and overwrites other system files.... 技術的詳細 ...C:WindowsSystemWsock32.dll C:WindowsRundll32.exe C:WindowsRundll.exe... 源: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.b@mm.html |
VBS.Over.Trojan |
技術的詳細 ...User.exe Rundll.exe Rundll32.exe... 源: http://securityresponse.symantec.com/avcenter/venc/data/vbs.over.trojan.html |
Trojan.Zeraf |
技術的詳細 ...C:WindowsSystem.ini C:WindowsRundll.exe C:WindowsRundll32.exe... 源: http://securityresponse.symantec.com/avcenter/venc/data/trojan.zeraf.html |
W97M.Mandir.A |
技術的詳細 ...SystemTrays rundll.exe user,exitwindows to the registry key... 取り外しの指示 ...SystemTrays rundll.exe user,exitwindows Click Registry, and then click... ...... 源: http://securityresponse.symantec.com/avcenter/venc/data/w97m.mandir.a.html |
|
|