The UNIX and Linux Forums  


Go Back   The UNIX and Linux Forums > Special Forums > Security > Malware Advisories (RSS)
.
google unix.com



Malware Advisories (RSS) Malware Security Advisories Via RSS

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Troj_zbot.op iBot Malware Advisories (RSS) 0 07-17-2008 11:50 PM
Troj_zbot.nj iBot Malware Advisories (RSS) 0 07-10-2008 01:10 AM
Troj_zbot.mz iBot Malware Advisories (RSS) 0 06-30-2008 02:10 PM
Troj_zbot.lm iBot Malware Advisories (RSS) 0 06-27-2008 05:10 AM
Troj_zbot.mh iBot Malware Advisories (RSS) 0 06-18-2008 10:20 AM

 
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish Bulgarian Greek Powered by Powered by Google
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Prev Previous Post   Next Post Next
  #1 (permalink)  
Old 07-26-2008
iBot's Avatar
iBot iBot is offline
Forum Robot Girl
  
 

Join Date: Sep 2000
Posts: 22,221
Troj_zbot.pk

This Trojan arrives as a downloaded file from a certain URL.

It downloads a configuration file from a certain Web site. The said file contains information where the Trojan can download an updated copy of itself, and where to send its stolen data. This configuration file also contains targeted bank-related Web sites to monitor from which it steals information.

Once users access any of the monitored sites, this Trojan starts logging keystrokes.

It saves gathered information in a file then sends it to a remote site through HTTP post.

It creates a mutex to ensure that only one instance of itself is running in memory.

It checks for the presence of processes which are related to Outpost Personal Firewall and ZoneLabs Firewall Client. It then terminates the said processes.

It has rootkit capabilities, which enables it to hide its processes and files from the user.



More...
 

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 03:08 PM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language Translations Powered by .
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0