Sponsored Content
Full Discussion: Troj_agent.ljy
Special Forums Cybersecurity Malware Advisories (RSS) Troj_agent.ljy Post 302183347 by Linux Bot on Tuesday 8th of April 2008 10:30:16 PM
Old 04-08-2008
Troj_agent.ljy

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

ImageMalware Overview
This memory-resident Trojan arrives on a system as an attachment to email messages spammed by another malware or a malicious user. It may also be downloaded unknowingly by a user when visiting a certain malicious Web site.
Below is a screenshot of the said email spam:
Image
When executed, it drops copies of itself. It then modifies the affected system's registry to ensure its automatic execution at every system startup.
This Trojan connects to certain Web sites to download and execute files. Trend Micro detects these files as TROJ_AGENT.NMB and TROJ_AGENT.FZL. As a result, routines of the downloaded Trojans are also exhibited on the affected system.


More...
 
Mail::SpamAssassin::Plugin::SpamCop(3)			User Contributed Perl Documentation		    Mail::SpamAssassin::Plugin::SpamCop(3)

NAME
Mail::SpamAssassin::Plugin::SpamCop - perform SpamCop reporting of messages SYNOPSIS
loadplugin Mail::SpamAssassin::Plugin::SpamCop DESCRIPTION
SpamCop is a service for reporting spam. SpamCop determines the origin of unwanted email and reports it to the relevant Internet service providers. By reporting spam, you have a positive impact on the problem. Reporting unsolicited email also helps feed spam filtering systems, including, but not limited to, the SpamCop blacklist used in SpamAssassin as a DNSBL. Note that spam reports sent by this plugin to SpamCop each include the entire spam message. See http://www.spamcop.net/ for more information about SpamCop. USER OPTIONS
spamcop_from_address user@example.com (default: none) This address is used during manual reports to SpamCop as the From: address. You can use your normal email address. If this is not set, a guess will be used as the From: address in SpamCop reports. spamcop_to_address user@example.com (default: generic reporting address) Your customized SpamCop report submission address. You need to obtain this address by registering at "http://www.spamcop.net/". If this is not set, SpamCop reports will go to a generic reporting address for SpamAssassin users and your reports will probably have less weight in the SpamCop system. spamcop_max_report_size (default: 50) Messages larger than this size (in kilobytes) will be truncated in report messages sent to SpamCop. The default setting is the maximum size that SpamCop will accept at the time of release. perl v5.16.3 2011-06-06 Mail::SpamAssassin::Plugin::SpamCop(3)
All times are GMT -4. The time now is 03:34 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy