OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Win2k Security Advice Archives: RFPoison is not a trojan, and t

RFPoison is not a trojan, and the source will prove it

Subject: RFPoison is not a trojan, and the source will prove it
From: .rain.forest.puppy. (rfpWIRETRIP.NET)
Date: Sat Jan 22 2000 - 15:44:52 CST

It seems an AVP trojan signature has been pegging RFPoison.exe (the one
available on my website, PacketStorm, etc) as Trojan.Win32.Aleph. I can't
find any information on this trojan. My personal feeling is that it's a
false alarm, but in any event, I wanted to make amends.

I placed a new .zip/.exe on my site that contains a freshly-compiled
version that does not report as being Trojan.Win32.Aleph. As a bonus, I
also made the source code available, so you can compile yourself. I also
modified the source (and therefore the new binary) to not reboot/crash
when you use it.

Thank you, you may now go about your business.
- rain.forest.puppy

_____________________________________________________________________
** TO UNSUBSCRIBE, send the command "UNSUBSCRIBE win2ksecadvice"
** FOR A WEEKLY DIGEST, send the command "SET win2ksecadvice DIGEST"
SEND ALL COMMANDS TO: listservlistserv.ntsecurity.net

This archive was generated by hypermail 2b27 : Sat Jan 22 2000 - 18:35:28 CST