윈도우 팁/악성코드 정보

2016.06.01 16:53

[Trojan] remote manipulator system

gratolab https://www.gratolabv2.com/3329
조회 수 81999 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 댓글로 가기 인쇄

 

Trojan. remote manipulator system

 

* registry path

HKEY_LOCAL_MACHINE\SOFTWARE\RMSPrinter
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\13A941B963765914F811F4CD6F8DD41E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1abe421e8cfc34144AACB9676F71902E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A013281E9DC1714CA1DA3DE2D061AF5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6364F69515D55F943B4B3F3C669ECD32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EDC4423414699340B5D245426472701
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45BAE6295648E74689FC47BF4E730EB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5052F47A02BDEA469F8EAB572D83BA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13A941B963765914F811F4CD6F8DD41E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B149A31-6736-4195-8F11-4FDCF6D84DE1}
HKEY_LOCAL_MACHINE\SYSTEM\Remote Manipulator System

 

 

* files path

 

c:\ProgramData^Microsoft^Windows^Start Menu^Programs\Remote Manipulator System - Host\Остановить Host.lnk
c:\ProgramData^Microsoft^Windows^Start Menu^Programs\Remote Manipulator System - Host\Настройка Host.lnk
c:\ProgramData^Microsoft^Windows^Start Menu^Programs\Remote Manipulator System - Host\Запустить Host.lnk
c:\ProgramData^Microsoft^Windows^Start Menu^Programs\Remote Manipulator System - Host\Деинсталлировать Remote Manipulator System - Host.lnk
c:\ProgramData^Microsoft^Windows^Start Menu^Programs\Remote Manipulator System - Host

c:\log\install.bat
c:\log\log.txt
c:\log\regedit.reg
c:\log\rfusclient.exe
c:\log\rutserv.exe
c:\log\start.vbs
c:\log\vp8decoder.dll
c:\log\vp8encoder.dll
c:\program files\radmin\help.cnt
c:\program files\radmin\help.hlp
c:\program files\radmin\license.txt
c:\program files\radmin\r_server.exe
c:\program files\radmin\raddrv.dll
c:\program files\radmin\radmin.exe
c:\program files\radmin\readme.txt
c:\program files\radmin\uninstal.exe
c:\program files\radmin\uninstal.ini
c:\program files\remote manipulator system - host\printer\x64\fwproc.exe
c:\program files\remote manipulator system - host\printer\x64\install.cmd
c:\program files\remote manipulator system - host\printer\x64\ntprint.inf
c:\program files\remote manipulator system - host\printer\x64\progress.exe
c:\program files\remote manipulator system - host\printer\x64\rms.gpd
c:\program files\remote manipulator system - host\printer\x64\rms.ini
c:\program files\remote manipulator system - host\printer\x64\rms.lng
c:\program files\remote manipulator system - host\printer\x64\rms_s.lng
c:\program files\remote manipulator system - host\printer\x64\rmspm.dll
c:\program files\remote manipulator system - host\printer\x64\rmsui.dll
c:\program files\remote manipulator system - host\printer\x64\rmsui2.exe
c:\program files\remote manipulator system - host\printer\x64\setupdrv.exe
c:\program files\remote manipulator system - host\printer\x64\srvinst_x64.exe
c:\program files\remote manipulator system - host\printer\x64\stdnames_vpd.gpd
c:\program files\remote manipulator system - host\printer\x64\unidrv_rms.dll
c:\program files\remote manipulator system - host\printer\x64\unidrv_rms.hlp
c:\program files\remote manipulator system - host\printer\x64\unidrv_rms.hlp
c:\program files\remote manipulator system - host\printer\x64\uninstall.cmd
c:\program files\remote manipulator system - host\printer\x64\unires_vpd.dll
c:\program files\remote manipulator system - host\printer\x64\vpdagent_x64.exe
c:\program files\remote manipulator system - host\printer\x86\fwproc.exe
c:\program files\remote manipulator system - host\printer\x86\install.cmd
c:\program files\remote manipulator system - host\printer\x86\ntprint.inf
c:\program files\remote manipulator system - host\printer\x86\progress.exe
c:\program files\remote manipulator system - host\printer\x86\rms.gpd
c:\program files\remote manipulator system - host\printer\x86\rms.ini
c:\program files\remote manipulator system - host\printer\x86\rms.lng
c:\program files\remote manipulator system - host\printer\x86\rms_s.lng
c:\program files\remote manipulator system - host\printer\x86\rmspm.dll
c:\program files\remote manipulator system - host\printer\x86\rmsui.dll
c:\program files\remote manipulator system - host\printer\x86\rmsui2.exe
c:\program files\remote manipulator system - host\printer\x86\setupdrv.exe
c:\program files\remote manipulator system - host\printer\x86\srvinst.exe
c:\program files\remote manipulator system - host\printer\x86\stdnames_vpd.gpd
c:\program files\remote manipulator system - host\printer\x86\unidrv_rms.dll
c:\program files\remote manipulator system - host\printer\x86\unidrv_rms.hlp
c:\program files\remote manipulator system - host\printer\x86\unidrv_rms.hlp
c:\program files\remote manipulator system - host\printer\x86\uninstall.cmd
c:\program files\remote manipulator system - host\printer\x86\unires_vpd.dll
c:\program files\remote manipulator system - host\printer\x86\vpdagent.exe
c:\program files\remote manipulator system - host\rfusclient.exe
c:\program files\remote manipulator system - host\ripcserver.dll
c:\program files\remote manipulator system - host\rutserv.exe
c:\program files\remote manipulator system - host\rwln.dll
c:\program files\remote manipulator system - host\vp8decoder.dll
c:\program files\remote manipulator system - host\vp8encoder.dll
c:\program files\remote manipulator system - host\webmmux.dll
c:\program files\remote manipulator system - host\webmvorbisdecoder.dll
c:\program files\remote manipulator system - host\webmvorbisencoder.dll
c:\program files\remote utilities - host\printer\x64\fwproc_x64.exe
c:\program files\remote utilities - host\printer\x64\install.cmd
c:\program files\remote utilities - host\printer\x64\ntprint.inf
c:\program files\remote utilities - host\printer\x64\progress.exe
c:\program files\remote utilities - host\printer\x64\rup.gpd
c:\program files\remote utilities - host\printer\x64\rup.ini
c:\program files\remote utilities - host\printer\x64\rup.lng
c:\program files\remote utilities - host\printer\x64\rup_s.lng
c:\program files\remote utilities - host\printer\x64\ruppm.dll
c:\program files\remote utilities - host\printer\x64\rupui.dll
c:\program files\remote utilities - host\printer\x64\rupui2.exe
c:\program files\remote utilities - host\printer\x64\setupdrv.exe
c:\program files\remote utilities - host\printer\x64\srvinst_x64.exe
c:\program files\remote utilities - host\printer\x64\stdnames_vpd.gpd
c:\program files\remote utilities - host\printer\x64\unidrv_rup.dll
c:\program files\remote utilities - host\printer\x64\unidrv_rup.hlp
c:\program files\remote utilities - host\printer\x64\unidrvui_rup.dll
c:\program files\remote utilities - host\printer\x64\uninstall.cmd
c:\program files\remote utilities - host\printer\x64\unires_vpd.dll
c:\program files\remote utilities - host\printer\x64\vpdagent_x64.exe
c:\program files\remote utilities - host\printer\x86\fwproc.exe
c:\program files\remote utilities - host\printer\x86\install.cmd
c:\program files\remote utilities - host\printer\x86\ntprint.inf
c:\program files\remote utilities - host\printer\x86\progress.exe
c:\program files\remote utilities - host\printer\x86\rup.gpd
c:\program files\assistance futurcom\unins000.exe
c:\program files\assistance futurcom\unins000.dat
TAG •
Facebook Twitter Google Pinterest
위로 아래로 댓글로 가기 인쇄
에디터 선택하기
?
List of Articles
번호 제목 글쓴이 조회 수
공지 샘플 업로드 방법.(How to upload a sample.) gratolab 3015
324 크롬 광고 pop.yeawindows.com 문제 해결 file gratolab 31
323 알아두면 편리한 컴퓨터 실행명령어 file gratolab 38
322 게임 또는 프로그램 실행시 mscvp숫자.dll 오류 뜰때 gratolab 40
321 윈도우 10(Windows 10) 단축키 모음 gratolab 41
320 크롬 시작페이지 New Tab 해결 방법 file gratolab 46
319 컴퓨터가 느려지거나 인터넷이 느려질 때 해결 방법 file gratolab 47
318 뉴스 클릭 후 광고창 file gratolab 57
317 istartsurf.com 시작페이지 고정 해결 방법 file gratolab 65
316 iStartsurf.com으로 시작페이지가 고정되는 문제 해결 방법 file gratolab 67
315 Windows application Topsadon, 애드웨어 입니다. file gratolab 72
314 유토렌트(utorrent) 제휴 프로그램 설치하지 않고 사용하는 방법 file gratolab 73
313 기본 브라우저 변경, 1분 내로 가능(크롬, 엣지, 파이어폭스, IE) file gratolab 73
312 윈도우 업데이트시 'wuapp.exe를 찾을 수 없습니다.' 에러 file gratolab 75
311 인터넷 익스플로러 비활성화 / 활성화 변경하는 방법 file gratolab 75
310 컴퓨터화면캡처, 한방에 해결(프로그램 설치 X) file gratolab 75
309 크롬 확장 프로그램 설치 오류, 해결 방법 file gratolab 75
308 오늘은 윈도우 10 기본브라우저를 손쉽게 변경하는 방법에 대해서 알아보도록 하겠습니다. file gratolab 76
307 WindowsAD 팝업창 삭제 방법 file gratolab 77
306 숨김폴더 속성 비활화를 활성화로 설정 file gratolab 78
305 윈도우10 업데이트 : FAQ file gratolab 78
쓰기
Board Pagination Prev 1 2 3 4 5 6 7 8 9 10 ... 17 Next
/ 17