Troj_fakealer.dd


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Troj_fakealer.dd
# 1  
Old 07-24-2008
Troj_fakealer.dd

This Trojan drops and executes the Trojan TROJ_FAKEALER.GZ. As a result, malicious routines of the dropped files are exhibited on the affected system.



More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
it(8)							      System Manager's Manual							     it(8)

NAME
it - configure a system after installation SYNOPSIS
/sbin/it DESCRIPTION
The it program executes scripts before transferring control of the system to the user, typically before the first user logs in. The it program executes programs that collect information such as system name, passwords, timezone, and current date. A system can be in a run level at any given time; each run level has a specific group of processes that run at that level. The init program operates in one of four run levels: 0, s, 2, or 3. The run level changes when init is invoked by a privileged user. The it program is run from /etc/inittab whenever the system is booted or rebooted, or when a level transition occurs for some other reason, such as within init3. The it program first determines which run level the system is coming up under. Next it turns on shared libraries and swap and then searches for any /sbin/it.d/run-level directories, where run-level names a system run level; for example, 2.d, 3.d, 23.d, and so forth. If any such directories exist, it collects the names of all files in those directories. These files are typically links to files in the /sbin/it.d/bin directory and are created beforehand by itruns(8). After collecting the file names, it sorts them, eliminates duplicate references, orders the names as specified by the data file /sbin/it.d/data/options.mask, executes the files, and finally removes the files it executed. After all the files collected from the run level directories have been handled, it exits. The /sbin/it.d/data/options.mask file contains a single line with a list of file names separated by colons. The it command executes col- lected files in the order in which they appear from left to right in the options.mask file. Programs not listed in the options.mask file are executed after those defined in options.mask. These "unspecified" programs are run in the order into which they were initially sorted; that order is controlled by the LC_COLLATE environmental variable and the specifications in the /usr/lib/nls/loc/locale files. FILES
Specifies execution priorities of files to be run by it Files to be linked by itruns(8) for execution by it SEE ALSO
Commands: init(8), itruns(8), rc0(8), rc2(8), rc3(8), who(1) it(8)