Bkdr_pcclient.yp


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Bkdr_pcclient.yp
# 1  
Old 02-05-2008
Bkdr_pcclient.yp

This backdoor is a .DLL component dropped by other malware to serve as its backdoor component. It is usually dropped in the system folder and registered as system service to ensure its automatic execution every system startup. It is then injected as thread into running processes to remain memory resident and makes it difficult to terminate.
This backdoor connects to a certain URL via a random port and executes commands locally on affected machines.
However, it requires its main component to run properly.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
anno(1) 						      General Commands Manual							   anno(1)

NAME
anno - annotate messages (only available within the message handling system, mh) SYNOPSIS
anno [+folder] [msgs] [-component field] [-help] [-[no]inplace] [-text body] OPTIONS
Specifies the name of the header field which anno adds. It should be a valid RFC 822-style message field name, which means that it should consist of alphanumeric characters or dashes only. If you do not supply this option, anno will prompt you for the field name. Prints a list of the valid options to this command. The -inplace switch causes annotation to be done in place in order to preserve links to the annotated message. Allows you to add a header field containing text to the message. The anno command will create a second header field on the message, containing the text that you specify. If the text contains a space, you must enclose the text in double quotes ("). If you do not supply this option, anno adds only one field, which contains the date of the annotation. The default settings for this command are: +folder defaults to the current folder msgs defaults to the current message -noinplace DESCRIPTION
The anno command annotates a message by adding one or more header fields to the message. The anno command allows you to choose the name of the header field which you add. It records the date at which the message is annotated, and allows you to add an additional field containing text, if you wish. You can use anno with dist, forw, and repl, to keep track of how you have distributed, forwarded, or replied to messages. By default, anno annotates the current message in the current folder. You can select another message by using the msg and +folder argu- ments. You can also annotate more than one message, or a range of messages. PROFILE COMPONENTS
Path: To determine your Mail directory EXAMPLES
This example annotates message number 1 in the folder +test. The -component option specifies the name of the header field: % anno 1 +test -component Forwarded The following field is added to the message header: Forwarded: Tue, 08 Jan 1991 16:10:06 +0000 The next example shows how to use the -text option to add an additional field: % anno -component Forwarded -text "to David - as requested" The following lines are added to the message header: Forwarded: Tue, 08 Jan 1991 16:13:27 +0000 Forwarded: to David - as requested The final example shows how anno prompts for the name of the header field, if the -component option is not supplied: % annoEnter component name: forwarded The following line is added to the message: forwarded: Tue, 08 Jan 1991 16:21:58 +0000 FILES
The user profile. SEE ALSO
dist(1), forw(1), repl(1) anno(1)