Troj_renos.adh


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Troj_renos.adh
# 1  
Old 07-29-2008
Troj_renos.adh

This Trojan may be downloaded from remote sites by other malware. It may be downloaded from certain remote sites.

It creates folders. It creates registry key(s)/entry(ies).

It accesses Web sites to download and execute a file that Trend Micro detects as TROJ_FAKEAV.AV. As a result, malicious routines of the downloaded files are exhibited on the affected system.

It deletes itself after execution.



More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Dialcodes(4)						     Kernel Interfaces Manual						      Dialcodes(4)

NAME
Dialcodes - Contains the initial digits of telephone numbers used to establish remote connections over a telephone line SYNOPSIS
/usr/lib/uucp/Dialcodes DESCRIPTION
The /usr/lib/uucp/Dialcodes file contains the initial digits of telephone numbers used by the uucp program to establish remote connections over a telephone line. The Dialcodes file simplifies entries in the /usr/lib/uucp/Systems file for sites where a number of device tele- phone numbers have the same prefix. If users at your site communicate regularly by way of telephone lines and modems to multiple systems all located at the same remote site, or to multiple systems located at different remote sites, use dial-code abbreviations in the /usr/lib/uucp/Systems file rather than entering the complete telephone number of each remote modem in that file. The Dialcodes file contains dial-code abbreviations and partial telephone numbers that complete the telephone entries in the /usr/lib/uucp/Systems file. Entries in the Dialcodes file contain an alphabetic prefix attached to a partial telephone number that may include the following information, in the order listed: Codes for an outside line. Long-distance access codes (1 and the area code, if the modem is out of the local area). The 3-digit exchange number. The relevant alphabetic prefix (representing the partial telephone number), together with the remaining four digits of that number, is then entered in the Phone field in the /usr/lib/uucp/Systems file. Following is the form of an entry in a Dialcodes file: DialCodeAbbreviation DialingSequence The DialCodeAbbreviation part of the entry is an alphabetic prefix containing up to eight letters, established when setting up the dial- code listing. The DialingSequence comprises all the digits in the number that precede the actual 4-digit telephone number. Note that if your site uses only a relatively small number of telephone connections to remote systems, include the complete telephone num- bers of the remote modems in the /usr/lib/uucp/Systems file rather than using dial-code abbreviations. Enter each prefix only once in the Dialcodes file. When you have set up a dial-code abbreviation, use that prefix in all relevant entries in the /usr/lib/uucp/Systems file. Only someone with superuser authority can edit the Dialcodes file, which is owned by the uucp program login ID. EXAMPLES
The Dialcodes file on system venus contains the following dial-code prefix for use with a number in the /usr/lib/uucp/Systems file: local 9=555 The Systems file on system venus contains the following entry for system zeus, including a telephone number and a dial-code prefix: zeus Any ACU 1200 local1212 in:--in: nuucp word: thunder When the uucp program on system venus dials system zeus, it uses the expanded telephone number =5551212. FILES
Contains all the configuration files for the uucp program, including the Dialcoddes file Contains information about available devices Spec- ifies initial handshaking on a connection Describes accessible remote systems RELATED INFORMATION
Commands: cu(1), tip(1), uucp(1), uuto(1), uux(1) delim off Dialcodes(4)