Bkdr_reload.p


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Bkdr_reload.p
# 1  
Old 07-13-2008
Bkdr_reload.p

This backdoor arrives on a system as a file dropped by other malware or as a downloaded file from a malicious Web site.

It monitors the Internet Explorer activities of the affected system, specifically the address bar. If a user visits any of the monitored sites, this backdoor recreates the legitimate Web site with a spoofed login page. The said routine tricks the user into giving out sensitive account-related information. It logs keystrokes entered by the user in the user name and password fields of the spoofed login page. It then closes the legitimate Web site once the backdoor recreates it.

This backdoor attempts to steal user information of online bank and saves it in LOGFILE1.TXT file. This routine risks the exposure of the user's account information, which may then lead to the unauthorized use of the stolen data.

It then sends the data it gathers to a public email address that uses smtp.terra.com.br domain server using its own Simple Mail Transfer Protocol (SMTP) engine.



More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
WNPKGS(7)							     WordNettm								 WNPKGS(7)

NAME
wnpkgs - description of various WordNet system packages DESCRIPTION
WordNet 3.0 is distributed in several formats and in various packages. All of the packages are available via anonymous FTP from ftp.cogsci.princeton.edu and from the WordNet Web site at http://wordnet.princeton.edu. Packages Available Via FTP and WWW The following WordNet packages can be downloaded using a web browser from ftp://ftp.cogsci.princeton.edu/wordnet/3.0, or from the Web site noted above. Users can also FTP directly from ftp.cogsci.princeton.edu, directory wordnet/3.0. +----------------+---------------------+-----------+-------------------------------+ | Package | Filename | Platform | Description | +----------------+---------------------+-----------+-------------------------------+ |Database | WordNet-3.0.tar.gz | Unix/OS X | WordNet 3.0 database, inter- | | | | | faces, sense index, interface | | | | | and library source code, doc- | | | | | umentation. | |Database | WordNet-3.0.exe | Windows | WordNet 3.0 database, inter- | | | | | faces, sense index, interface | | | | | and library source code, doc- | | | | | umentation. | |Prolog Database | WNprolog-3.0.tar.gz | All | WordNet 3.0 database files in | | | | | Prolog-readable format, docu- | | | | | mentation. | |Sense Map | WNsnsmap-3.0.tar.gz | All | Mapping of 2.1 to 3.0 senses, | | | | | documentation. | +----------------+---------------------+-----------+-------------------------------+ Database Package The database package is a complete installation for WordNet 3.0 users. It includes the 3.0 database files, source code for the WordNet browsers and library, and documentation. The other packages are not included - they must be downloaded and installed separately. Note that with this version of WordNet for Unix platforms, only source code is provided. Users should carefully read the README and INSTALL files for detailed information on compiling WordNet and dependencies. Prolog Database Package The WordNet 3.0 database files are available in this package in a Prolog-readable format. Documentation describing the file format is included. This package is only downloadable in compressed tar file format, although once unpackaged it can be used from Windows systems since the files are in ASCII. Many Windows utilities, such as WinZip, can deal with a compressed tar file. Sense Map Package To help users automatically convert 2.1 noun and verb senses to their corresponding 3.0 senses, we provide sense mapping information in this package. This package contains files to map polysemous and monosemous words, and documentation that describes the format of these files. As with the Prolog database, this package is only downloadable in compressed tar format, but the files are also in ASCII. NOTES
The lexicographer files and grind(1) program are not generally distributed. All of the packages described above may not be available at the time of release of the 3.0 database package. SEE ALSO
wnintro(1), wnintro(3), wnintro(5), wnintro(7). WordNet 3.0 Dec 2006 WNPKGS(7)