Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Bkdr_nornod.a

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Bkdr_nornod.a
# 1  
Old 04-03-2008
Bkdr_nornod.a
This backdoor may be dropped by other malware, specifically by TROJ_PIDIEF.AW.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It creates registry key(s)/entry(ies) as part of its installation routine.
It opens ports where it listens for remote commands.
It drops files.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT MOJAVE

systemd-timesyncd.service

SYSTEMD-TIMESYNCD.SERVICE(8)                                 systemd-timesyncd.service                                SYSTEMD-TIMESYNCD.SERVICE(8)

NAME

       systemd-timesyncd.service, systemd-timesyncd - Network Time Synchronization

SYNOPSIS

       systemd-timesyncd.service

       /lib/systemd/systemd-timesyncd

DESCRIPTION

       systemd-timesyncd is a system service that may be used to synchronize the local system clock with a remote Network Time Protocol server. It
       also saves the local time to disk every time the clock has been synchronized and uses this to possibly advance the system realtime clock on
       subsequent reboots to ensure it monotonically advances even if the system lacks a battery-buffered RTC chip.

       The systemd-timesyncd service specifically implements only SNTP. This minimalistic service will set the system clock for large offsets or
       slowly adjust it for smaller deltas. More complex use cases are not covered by systemd-timesyncd.

       The NTP servers contacted are determined from the global settings in timesyncd.conf(5), the per-link static settings in .network files, and
       the per-link dynamic settings received over DHCP. See systemd.network(5) for more details.

       timedatectl(1)'s set-ntp command may be used to enable and start, or disable and stop this service.

FILES

       /var/lib/systemd/timesync/clock
           This file contains the timestamp of the last successful synchronization.

SEE ALSO

       systemd(1), timesyncd.conf(5), systemd.network(5), systemd-networkd.service(8), timedatectl(1), localtime(5), hwclock(8)

systemd 237                                                                                                           SYSTEMD-TIMESYNCD.SERVICE(8)