Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Pe_trats.a-o

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Pe_trats.a-o
# 1  
Old 12-29-2007
Pe_trats.a-o
This file infector may be dropped by other malware.It may be downloaded unknowingly by a user when visiting malicious Web sites.
It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run by creating registry keys/entries.It modifies registry entries to enable its automatic execution at every system startup.
It drops a DLL component file detected by Trend Micro as TROJ_TRATS.A which is injected into certain running processes to remain memory resident.
It infects EXE files by placing victim files between its own code and TROJ_TRATS.A then replaces the original file.
When one of infected files is executed, it drops the original victim file in the current path and executes it normally.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

ace::browser::sitedefs

Ace::Browser::SiteDefs(3pm)				User Contributed Perl Documentation			       Ace::Browser::SiteDefs(3pm)

NAME

       Ace::Browser::SiteDefs - Access to AceBrowser configuration files

SYNOPSIS

	 use Ace;
	 use Ace::Browser::AceSubs;
	 use CGI qw(:standard);

	 my $configuration = Configuration;
	 my $docroot  = $configuration->Docroot;
	 my @pictures = @{$configuration->Pictures};
	 my %displays = %{$configuration->Displays};
	 my $coderef  = $configuration->Url_mapper;
	 $coderef->($param1,$param2);

DESCRIPTION

       Ace::Browser::SiteDefs evaluates an AceBrowser configuration file and returns a configuration object ("config object" for short).  A config
       object is a bag of dynamically-generated methods, derived from the scalar variables, arrays, hashes and subroutines in the configuration
       file.

       The config object methods are a canonicalized form of the configuration file variables, in which the first character of the method is
       uppercase, and subsequent characters are lower case.  For example, if the configuration variable was $ROOT, the method will be
       $config_object->Root.

   Working with Configuration Objects
       To fetch a configuration object, use the Ace::Browser::AceSubs Configuration() function.  This will return a configuration object for the
       current database:

	 $config_object = Configuration();

       Thereafter, it's just a matter of making the proper method calls.

	  If the Configuration file is a....	The method call returns a...
	  ----------------------------------	----------------------------

	  Scalar variable			Scalar
	  Array variable			Array reference
	  Hash variable 			Hash reference
	  Subroutine				Code reference

       If a variable is not defined, the corresponding method will return undef.

BUGS

       Please report them.

SEE ALSO

       Ace::Object, Ace::Browser::AceSubs, Ace::Browsr::SearchSubs, the README.ACEBROWSER file.

AUTHOR

       Lincoln Stein <lstein@cshl.org>.

       Copyright (c) 2001 Cold Spring Harbor Laboratory

       This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.  See DISCLAIMER.txt for
       disclaimers of warranty.

perl v5.14.2							    2006-11-01					       Ace::Browser::SiteDefs(3pm)