OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: portscan virus?
From: Geo. (georgerNLS.NET)
Date: Wed May 24 2000 - 10:37:55 CDT

portscan.exe was recently detected as ICQ.PWS.Trojan on a machine by
symantec antivirus program.

The program file is the 7sphere port scanner dated Monday, April 07, 1997,
4:51:46 PM and it seems to me this was a long time ago and possibly before
most ICQ type password hacks came out.

Anyway, Symantec said the following:

"The reason Norton AntiVirus found it and no other AntiVirus software did,
is
because we are probably the only one that has a virus definition for that
particular trojan. The virus definition for this trojan was added 5/9/00."

I'm posting this here for 2 reasons, first in case anyone else has this port
scanner, second in case symantec is wrong. Hopefully I can get confirmation
one way or the other on this.

Geo.

_____________________________________________________________________
** TO UNSUBSCRIBE, send the command "UNSUBSCRIBE win2ksecadvice"
** FOR A WEEKLY DIGEST, send the command "SET win2ksecadvice DIGEST"
SEND ALL COMMANDS TO: listservlistserv.ntsecurity.net