Bkdr_small.dat


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Bkdr_small.dat
# 1  
Old 06-26-2008
Bkdr_small.dat

This backdoor may be downloaded from remote sites by other malware. It may be dropped by other malware.
It drops copies of itself. It terminates the initially executed copy and executes the dropped copy.
It opens a random port to allow a remote user to connect to the affected system. Once a successful connection is established, the remote user gathers information from the affected system and stores them on a file.
It terminates certain processes, if found running in memory.
It deletes itself after execution.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. Homework & Coursework Questions

Converting .dat to UNIX

I uploaded a .dat file from sftp to my server and after using dos2unix to convert the file and check my work it says that the file was not transferred correctly and that the content is garbled. Please help (3 Replies)
Discussion started by: Ovid158
3 Replies

2. Shell Programming and Scripting

How to use 'ls' command to list files like *.dat, not *.*.dat?

How to use 'ls' command to list files like *.dat, not *.*.dat (5 Replies)
Discussion started by: pmcginni777
5 Replies

3. UNIX for Advanced & Expert Users

Search in .dat file

How to perform search for a particular text in .dat file in UNIX (2 Replies)
Discussion started by: Deeptanshu
2 Replies

4. Red Hat

How to view .dat file?

What is the command that can be used to open or view the .dat file in linux? Unable to read the contents of .dat file. (7 Replies)
Discussion started by: Rupaa
7 Replies

5. AIX

Help DAT 72 tape stuck.

Hi everyone, I have a ibm p65 server with an internal DAT 72 tape drive. When I go to press the eject button the second light will blink for several minutes then stop. If I issue a tctl -f /dev/rmt0 status it tells me its available and gives back other information. Now if I try this tctl -f... (2 Replies)
Discussion started by: bsdtux
2 Replies

6. SCO

PB with HP DAT 72 data cartridge

Hello, I use unixware 7.14 and I need to backup with tar command on HP DAT 72. When executing tar command the next message is diplayed: tar: ERROR: Tape write error: I/O error. When replacing the DAT 72 data cartridge with DAT 40 data cartdrige no message displayed and backup is done. Thank... (0 Replies)
Discussion started by: mcmb
0 Replies

7. UNIX for Dummies Questions & Answers

Text or .dat

How do I insert a column in a text or .dat file for a date. (2 Replies)
Discussion started by: Maggiepie
2 Replies

8. UNIX for Dummies Questions & Answers

Backup my files to DAT

hi guys, im using tru64 unix and i want to put my files on tapes. i have already a hp DAT storage, do you have any admin guides for backup/restore procedures for these? tnx (1 Reply)
Discussion started by: jefferson
1 Replies
Login or Register to Ask a Question
Courier::Filter::Module::ClamAVd(3pm)			User Contributed Perl Documentation		     Courier::Filter::Module::ClamAVd(3pm)

NAME
Courier::Filter::Module::ClamAVd - ClamAV clamd filter module for the Courier::Filter framework SYNOPSIS
use Courier::Filter::Module::ClamAVd; my $module = Courier::Filter::Module::ClamAVd->new( # See the socket options description for details. socket_name => '/var/run/clamav/clamd.ctl', socket_host => 'clamav.example.com', socket_port => '3310', max_message_size => $max_message_size, max_part_size => $max_part_size, response => $response_text, logger => $logger, inverse => 0, trusting => 0, testing => 0, debugging => 0 ); my $filter = Courier::Filter->new( ... modules => [ $module ], ... ); DESCRIPTION
This class is a filter module class for use with Courier::Filter. It matches a message if the configured ClamAV "clamd" daemon detects malware in it. Constructor The following constructor is provided: new(%options): returns Courier::Filter::Module::ClamAVd Creates a new ClamAVd filter module. %options is a list of key/value pairs representing any of the following options: socket_name socket_host socket_port These options describe the Unix domain or TCP/IP socket that should be used to connect to the ClamAV daemon. If no socket options are specified, first the socket options from the local "clamd.conf" configuration file are tried, then the Unix domain socket /var/run/clamav/clamd.ctl is tried, then finally the TCP/IP socket at 127.0.0.1 on port 3310 is tried. If either Unix domain or TCP/IP socket options are explicitly specified, only these are used. max_message_size An integer value controlling the maximum size (in bytes) of the overall message text for a message to be processed by this filter module. Messages larger than this value will never be processed, and thus will never match. If undef, there is no size limit. Defaults to 1024**2(1MB). As MIME multipart processing can be quite CPU- and memory-intensive, you should definitely restrict the message size to some sensible value that easily fits in your server's memory. 1024**2(1MB) should be appropriate for most uses of this filter module. max_part_size An integer value controlling the maximum size (in bytes) of any single MIME part for that part to be processed by this filter module. Parts larger than this value will never be processed, and thus will never match. If undef, there is no size limit. Defaults to the value of the "max_message_size" option, so you don't really need to specify a part size limit if you are comfortable with using the same value for both. See the "max_message_size" option for its default. response A string that is to be returned as the match result in case of a match. The name of the detected malware is appended to the response text. Defaults to "Malware detected:". All options of the Courier::Filter::Module constructor are also supported by the constructor of the ClamAVd filter module. Please see "new" in Courier::Filter::Module for their descriptions. Instance methods See "Instance methods" in Courier::Filter::Module for a description of the provided instance methods. SEE ALSO
Courier::Filter::Module, Courier::Filter::Overview. For AVAILABILITY, SUPPORT, and LICENSE information, see Courier::Filter::Overview. AUTHOR
Julian Mehnle <julian@mehnle.net> perl v5.14.2 2011-12-27 Courier::Filter::Module::ClamAVd(3pm)