Troj_sdbot.ia


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Troj_sdbot.ia
# 1  
Old 06-25-2008
Troj_sdbot.ia

This Trojan may be dropped by other malware. It may arrive bundled with malware packages as a malware component. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It modifies registry entries to enable its automatic execution at every system startup.
It disables the DCOM protocol. It disables Automatic Windows Update. As a result, once updates are released, affected users are unable to get Windows updates automatically. It disables Security Center functions. It disables Windows Firewall settings. It disables Task Manager. It does the said routine to avoid termination from the affected system's memory. It creates and modifies registry key(s)/entry(ies) as part of its installation routine. It modifies files.
It drops component files.It deletes itself after execution.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
WNPKGS(7WN)							     WordNettm							       WNPKGS(7WN)

NAME
wnpkgs - description of various WordNet system packages DESCRIPTION
WordNet 3.0 is distributed in several formats and in various packages. All of the packages are available via anonymous FTP from ftp.cogsci.princeton.edu and from the WordNet Web site at http://wordnet.princeton.edu. Packages Available Via FTP and WWW The following WordNet packages can be downloaded using a web browser from ftp://ftp.cogsci.princeton.edu/wordnet/3.0, or from the Web site noted above. Users can also FTP directly from ftp.cogsci.princeton.edu, directory wordnet/3.0. +----------------+---------------------+-----------+-------------------------------+ | Package | Filename | Platform | Description | +----------------+---------------------+-----------+-------------------------------+ |Database | WordNet-3.0.tar.gz | Unix/OS X | WordNet 3.0 database, inter- | | | | | faces, sense index, interface | | | | | and library source code, doc- | | | | | umentation. | |Database | WordNet-3.0.exe | Windows | WordNet 3.0 database, inter- | | | | | faces, sense index, interface | | | | | and library source code, doc- | | | | | umentation. | |Prolog Database | WNprolog-3.0.tar.gz | All | WordNet 3.0 database files in | | | | | Prolog-readable format, docu- | | | | | mentation. | |Sense Map | WNsnsmap-3.0.tar.gz | All | Mapping of 2.1 to 3.0 senses, | | | | | documentation. | +----------------+---------------------+-----------+-------------------------------+ Database Package The database package is a complete installation for WordNet 3.0 users. It includes the 3.0 database files, source code for the WordNet browsers and library, and documentation. The other packages are not included - they must be downloaded and installed separately. Note that with this version of WordNet for Unix platforms, only source code is provided. Users should carefully read the README and INSTALL files for detailed information on compiling WordNet and dependencies. Prolog Database Package The WordNet 3.0 database files are available in this package in a Prolog-readable format. Documentation describing the file format is included. This package is only downloadable in compressed tar file format, although once unpackaged it can be used from Windows systems since the files are in ASCII. Many Windows utilities, such as WinZip, can deal with a compressed tar file. Sense Map Package To help users automatically convert 2.1 noun and verb senses to their corresponding 3.0 senses, we provide sense mapping information in this package. This package contains files to map polysemous and monosemous words, and documentation that describes the format of these files. As with the Prolog database, this package is only downloadable in compressed tar format, but the files are also in ASCII. NOTES
The lexicographer files and grind(1WN) program are not generally distributed. All of the packages described above may not be available at the time of release of the 3.0 database package. SEE ALSO
wnintro(1WN), wnintro(3WN), wnintro(5WN), wnintro(7WN). WordNet 3.0 Dec 2006 WNPKGS(7WN)