Worm_vb.lf Post: 302183937

Sponsored Content

Special Forums Cybersecurity Malware Advisories (RSS) Worm_vb.lf Post 302183937 by Linux Bot on Thursday 10th of April 2008 06:50:02 AM

04-10-2008

Registered User

Worm_vb.lf

This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It drops copies of itself. It drops copies of itself.
It creates registry entries to enable its automatic execution at every system startup.
It modifies registry entries to hide files with both System and Read-only attributes. It creates registry key(s)/entry(ies) as part of its installation routine. It creates registry key(s)/entry(ies). It modifies registry key(s)/entry(ies) as part of its installation routine.
It drops copies of itself in all physical drives. It drops copies of itself in all removable drives. It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

LEARN ABOUT OPENSOLARIS

soldelapp

soldelapp(1M)						  System Administration Commands					     soldelapp(1M)

NAME

       soldelapp - remove an application from the Solstice application registry

SYNOPSIS

       /usr/snadm/bin/soldelapp [-r registry] -n name

DESCRIPTION

       soldelapp  removes an application from the Solstice application registry. After removal, the application is no longer displayed in the Sol-
       stice Launcher main window (see	solstice(1M)).

OPTIONS

       -r registry    Define the full path name of the Solstice registry file.

       -n name	      Define the name of the tool to be removed.

       When executed without options,  soldelapp uses  /opt/SUNWadm/etc/.solstice_registry (the default registry path).

RETURN VALUES

       0    on success

       1    on failure

       2    if the registry is locked

       3    if	name is not found in the registry

       4    if the named registry or default registry is not found

EXAMPLES

       Example 1 A sample display of the soldelapp command.

       The following removes an application called Disk Manager from the Solstice application registry and the Solstice Launcher main window.

	 # soldelapp -r /opt/SUNWadm/etc/.solstice_registry -n "Disk Manager"

FILES

       /opt/SUNWadm/etc/.solstice_registry

	   The default registry file.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWsadml 		   |
       +-----------------------------+-----------------------------+

SEE ALSO

       soladdapp(1M), solstice(1M), attributes(5)

NOTES

       Globally registered applications are used by local and remote users sharing the software in  a  particular  /opt  directory.  They  can	be
       removed only using  soldelapp.

SunOS 5.11							    15 Sep 1995 						     soldelapp(1M)