Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Troj_ppdrop.k

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Troj_ppdrop.k
# 1  
Old 12-29-2007
Troj_ppdrop.k
This Trojan arrives on a system as a .PPS/.PPT file that is dropped by other malware. It can also be downloaded unknowingly by a user when visiting malicious Web sites.
Upon execution, it dropsseveral files, some of which are detected as BKDR_AGENT.ADGS.
A dropped .TMP file is then injected into a running process to remain memory resident. As a result, routines of the dropped file are also exhibited on the affected system. To automate execution of the dropped malicious file, it also adds a registry entry.
It takes advantage of the following software vulnerability to drop and execute the said component file:
  • Microsoft Security Bulletin MS06-012
The said vulnerability in Microsoft Office may allow a remote user to use a malformed routing slip to execute malicious codes on the affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

jifty::web::session::apachesession

Jifty::Web::Session::ApacheSession(3pm) 		User Contributed Perl Documentation		   Jifty::Web::Session::ApacheSession(3pm)

NAME

       Jifty::Web::Session::ApacheSession - Jifty Sessions based on Apache::Session

SYNOPSIS

       In your etc/config.yml, using the Apache::Session::File backend:

	 framework:
	   Web:
	     SessionClass: Jifty::Web::Session::ApacheSession
	     SessionBackend: File
	     SessionOptions:
	       Directory: /tmp/sessions
	       LockDirectory: /var/lock/sessions

       Or with Apache::Session::Memorycached backend:

	 framework:
	   Web:
	     SessionClass: Jifty::Web::Session::ApacheSession
	     SessionBackend: Memorycached
	     SessionOptions: { servers: [ '127.0.0.1:11211' ] }

   new
       Returns a new, empty session handler, subclassing Jifty::Web::Session.

   id
       Returns the session's id if it has been loaded, or "undef" otherwise.

   create
       Creates a new session.

   load [ID]
       Load up the current session from the given "ID", or the appropriate cookie (see "cookie_name" in Jifty::Web::Session) otherwise.

       If both of those fail, creates a session in memory.

   get KEY [TYPE]
       See "get" in Jifty::Web::Session.

   set KEY => VALUE, [TYPE]
       See "set" in Jifty::Web::Session.

   remove KEY, [TYPE]
       See "remove" in Jifty::Web::Session.

   remove_all
       See "remove_all" in Jifty::Web::Session.

   continuations
       See "continuations" in Jifty::Web::Session.

perl v5.14.2							    2010-09-25				   Jifty::Web::Session::ApacheSession(3pm)