Bkdr_small.dat


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Bkdr_small.dat
# 1  
Old 06-26-2008
Bkdr_small.dat

This backdoor may be downloaded from remote sites by other malware. It may be dropped by other malware.
It drops copies of itself. It terminates the initially executed copy and executes the dropped copy.
It opens a random port to allow a remote user to connect to the affected system. Once a successful connection is established, the remote user gathers information from the affected system and stores them on a file.
It terminates certain processes, if found running in memory.
It deletes itself after execution.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. Homework & Coursework Questions

Converting .dat to UNIX

I uploaded a .dat file from sftp to my server and after using dos2unix to convert the file and check my work it says that the file was not transferred correctly and that the content is garbled. Please help (3 Replies)
Discussion started by: Ovid158
3 Replies

2. Shell Programming and Scripting

How to use 'ls' command to list files like *.dat, not *.*.dat?

How to use 'ls' command to list files like *.dat, not *.*.dat (5 Replies)
Discussion started by: pmcginni777
5 Replies

3. UNIX for Advanced & Expert Users

Search in .dat file

How to perform search for a particular text in .dat file in UNIX (2 Replies)
Discussion started by: Deeptanshu
2 Replies

4. Red Hat

How to view .dat file?

What is the command that can be used to open or view the .dat file in linux? Unable to read the contents of .dat file. (7 Replies)
Discussion started by: Rupaa
7 Replies

5. AIX

Help DAT 72 tape stuck.

Hi everyone, I have a ibm p65 server with an internal DAT 72 tape drive. When I go to press the eject button the second light will blink for several minutes then stop. If I issue a tctl -f /dev/rmt0 status it tells me its available and gives back other information. Now if I try this tctl -f... (2 Replies)
Discussion started by: bsdtux
2 Replies

6. SCO

PB with HP DAT 72 data cartridge

Hello, I use unixware 7.14 and I need to backup with tar command on HP DAT 72. When executing tar command the next message is diplayed: tar: ERROR: Tape write error: I/O error. When replacing the DAT 72 data cartridge with DAT 40 data cartdrige no message displayed and backup is done. Thank... (0 Replies)
Discussion started by: mcmb
0 Replies

7. UNIX for Dummies Questions & Answers

Text or .dat

How do I insert a column in a text or .dat file for a date. (2 Replies)
Discussion started by: Maggiepie
2 Replies

8. UNIX for Dummies Questions & Answers

Backup my files to DAT

hi guys, im using tru64 unix and i want to put my files on tapes. i have already a hp DAT storage, do you have any admin guides for backup/restore procedures for these? tnx (1 Reply)
Discussion started by: jefferson
1 Replies
Login or Register to Ask a Question
TRACE-CMD-RESTORE(1)													      TRACE-CMD-RESTORE(1)

NAME
trace-cmd-restore - restore a failed trace record SYNOPSIS
trace-cmd restore [OPTIONS] [command] cpu-file [cpu-file ...] DESCRIPTION
The trace-cmd(1) restore command will restore a crashed trace-cmd-record(1) file. If for some reason a trace-cmd record fails, it will leave a the per-cpu data files and not create the final trace.dat file. The trace-cmd restore will append the files to create a working trace.dat file that can be read with trace-cmd-report(1). When trace-cmd record runs, it spawns off a process per CPU and writes to a per cpu file usually called trace.dat.cpuX, where X represents the CPU number that it is tracing. If the -o option was used in the trace-cmd record, then the CPU data files will have that name instead of the trace.dat name. If a unexpected crash occurs before the tracing is finished, then the per CPU files will still exist but there will not be any trace.dat file to read from. trace-cmd restore will allow you to create a trace.dat file with the existing data files. OPTIONS
-c Create a partial trace.dat file from the machine, to be used with a full trace-cmd restore at another time. This option is useful for embedded devices. If a server contains the cpu files of a crashed trace-cmd record (or trace-cmd listen), trace-cmd restore can be executed on the embedded device with the -c option to get all the stored information of that embedded device. Then the file created could be copied to the server to run the trace-cmd restore there with the cpu files. If *-o* is not specified, then the file created will be called 'trace-partial.dat'. This is because the file is not a full version of something that trace-cmd-report(1) could use. -t tracing_dir Used with -c, it overrides the location to read the events from. By default, tracing information is read from the debugfs/tracing directory. -t will use that location instead. This can be useful if the trace.dat file to create is from another machine. Just tar -cvf events.tar debugfs/tracing and copy and untar that file locally, and use that directory instead. -k kallsyms Used with -c, it overrides where to read the kallsyms file from. By default, /proc/kallsyms is used. -k will override the file to read the kallsyms from. This can be useful if the trace.dat file to create is from another machine. Just copy the /proc/kallsyms file locally, and use -k to point to that file. -o output' By default, trace-cmd restore will create a trace.dat file (or trace-partial.dat if -c is specified). You can specify a different file to write to with the -o option. -i input By default, trace-cmd restore will read the information of the current system to create the initial data stored in the trace.dat file. If the crash was on another machine, then that machine should have the trace-cmd restore run with the -c option to create the trace.dat partial file. Then that file can be copied to the current machine where trace-cmd restore will use -i to load that file instead of reading from the current system. EXAMPLES
If a crash happened on another box, you could run: $ trace-cmd restore -c -o box-partial.dat Then on the server that has the cpu files: $ trace-cmd restore -i box-partial.dat trace.dat.cpu0 trace.dat.cpu1 This would create a trace.dat file for the embedded box. SEE ALSO
trace-cmd(1), trace-cmd-record(1), trace-cmd-report(1), trace-cmd-start(1), trace-cmd-stop(1), trace-cmd-extract(1), trace-cmd-reset(1), trace-cmd-split(1), trace-cmd-list(1), trace-cmd-listen(1) AUTHOR
Written by Steven Rostedt, <rostedt@goodmis.org[1]> RESOURCES
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/trace-cmd.git COPYING
Copyright (C) 2010 Red Hat, Inc. Free use of this software is granted under the terms of the GNU Public License (GPL). NOTES
1. rostedt@goodmis.org mailto:rostedt@goodmis.org 06/11/2014 TRACE-CMD-RESTORE(1)