English
¢¸¢· µÚ·Î
Ãë¾àÁ¡ID 24059
À§Çèµµ 40
Æ÷Æ® 139,445
ÇÁ·ÎÅäÄÝ TCP
ºÐ·ù BackDoor
»ó¼¼¼³¸í ÇØ´ç À©µµ¿ìÁî ½Ã½ºÅÛÀº ¹ÙÀÌ·¯½º, ȤÀº ¿ú¿¡ ÀÇÇØ °¨¿°µÈ °ÍÀ¸·Î ³ªÅ¸³­´Ù. ÀÌ Á¡°ËÇ׸ñÀº ´ÙÀ½°ú °°Àº ¹ÙÀÌ·¯½º(, ȤÀº ¿ú)µé¿¡ ´ëÇØ¼­ Á¡°ËÇÑ´Ù:

- W32/Badtrans-B, JS_GIGGER.A@mm, W32/Vote-A, CodeRed
- W32.Sircam.Worm@mm, W32.Nimda.A@mm, W32.Goner.A@mm
- W32.Lovgate, W32.Deloder, W32.NiceHello.A, Win32/Sobig.worm.B
- Win32/Sobig.worm.C, Win32/Spybot.worm, Win32/Magold.worm
- Win32/Naco.worm, W32/Fizzer.gen@MM, W32/Kickin@MM
- Win32/Lovelorn.worm, Win32/Coronex.worm, Win32/Morbex.worm
- W32/Wanor@MM, W32/Yaha.q@MM, Win32/Ganda.worm
- Win32/Yaha.worm

* Note: ÀÌ Á¡°ËÇ׸ñÀº Á¡°ËÇϱâ À§ÇÑ È£½ºÆ®·Î ·Î±×ÀÎ ÇÒ ¼ö ÀÖ´Â °ü¸®ÀÚ ±ÇÇÑÀ» °¡Áø °èÁ¤À» ÇÊ¿ä·Î ÇÑ´Ù. ÀÌ·¯ÇÑ Á¶°ÇÀÌ ¾ÈµÇ¸é Á¡°ËÀ» ¼öÇàÇÒ ¼ö ¾øÀ¸¸ç ¸ðµç Ãë¾àÇÑ È£½ºÆ®µé¿¡ ´ëÇØ¼­ °ÅÁþ À½¼º¹ÝÀÀ(False Negative)À» º¸ÀÏ ¼ö ÀÖ´Ù.

* Âü°í »çÀÌÆ®:
http://www.infos3000.com/infosvirus/badtransb.htm
http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html
http://www.infos3000.com/infosvirus/jsgiggera.htm
http://securityresponse.symantec.com/avcenter/venc/data/js.gigger.a@mm.html
http://www.infos3000.com/infosvirus/vote%20a.htm
http://www.symantec.com/avcenter/venc/data/w32.vote.a@mm.html
http://www.infos3000.com/infosvirus/codered.htm
http://www.symantec.com/avcenter/venc/data/codered.worm.html
http://www.infos3000.com/infosvirus/w32sircam.htm
http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html
http://www.infos3000.com/infosvirus/nimda.htm
http://www.symantec.com/avcenter/venc/data/w32.nimda.a@mm.html
http://www.infos3000.com/infosvirus/goner%20a.htm
http://www.symantec.com/avcenter/venc/data/w32.goner.a@mm.html

* ¿µÇâÀ» ¹Þ´Â Ç÷§Æû:
Microsoft Windows Any version
ÇØ°áÃ¥ ¹é½Å ÇÁ·Î±×·¥ (¾ÈƼ¹ÙÀÌ·¯½º ÇÁ·Î±×·¥)À» ÀÌ¿ëÇÏ¿© °¨¿°µÈ ÄÄÇ»ÅͷκÎÅÍ ¹ÙÀÌ·¯½ºµéÀ» Á¦°ÅÇÏ¿©¾ß ÇÑ´Ù.
¸¸¾à ¾ÈƼ¹ÙÀÌ·¯½º ÇÁ·Î±×·¥ÀÌ ¼³Ä¡µÇ¾î ÀÖÁö ¾Ê´Ù¸é ´ÙÀ½ ¹ÙÀÌ·¯½º ½ºÄ³³Ê ÁßÀÇ Çϳª¸¦ ´Ù¿î·ÎµåÇÏ¿© ¼³Ä¡ÇÑ´Ù:

- Norton AntiVirus:
http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=n95

- McAfee VirusScan: http://www.mcafee.com

- Trend Micro Internet Security:
http://downloadcenter.trendmicro.com/index.php?regs=NABU&clk=latest&clkval=280&lang_loc=1

- Comodo BOClean 4.02: http://www.comodo.com/home/internet-security/anti-malware.php
°ü·Ã URL (CVE)
°ü·Ã URL (SecurityFocus)
°ü·Ã URL (ISS)