SV: question about fuxay scanner

["Peter Kruse" <kruse () pc dk>]

Hi,

This means that the scanner is infected or written as a backdoor.
According to Sophos database the "Troj/BD-Mania pipes the input and
output of a DOS window through a network port, allowing remote access to
your computer". 

The scanner has now been removed from the Chinese site. If you have
installed fluxay you should scan your PC for the presence of the trojan
or as an alternative try to bind the open ports to a applikation with a
tool like fport to pinpoint the location of the backdoor komponent.

Med venlig hilsen // Kind regards

Peter Kruse
Security- and Virusanalyst
Telia Telecom Denmark

"Whenever I climb I am followed by a dog called 'Ego'."


> -----Oprindelig meddelelse-----
> Fra: James McGee [mailto:jm () mindless com] 
> Sendt: 30. januar 2002 00:30
> Til: 'christophe gueguen'; pen-test () securityfocus com
> Emne: RE: question about fuxay scanner
>
>
> appears to be a sort of trap!
>
> sophos picked up a virus in it...
>
> BD-Mania
>
>
>
>
>
> -----Original Message-----
> From: christophe gueguen [mailto:chris_securite () yahoo fr]
> Sent: 29 January 2002 15:50
> To: pen-test () securityfocus com
> Subject: question about fuxay scanner
>
>
>
>
> Hi
> I have heard about a vulnerabilities scanner
> called fluxay. It is on a chinese site 
> (www.netxeyes.com/down.html). It seems to be a > good tool but 
> I don't have seen any recommandation about it on any security 
> site. Does anyone have already use it ?
>
> Thx
> Christophe
>
> --------------------------------------------------------------
> --------------
> This list is provided by the SecurityFocus Security 
> Intelligence Alert (SIA) Service. For more information on 
> SecurityFocus' SIA service which automatically alerts you to 
> the latest security vulnerabilities please see: 
https://alerts.securityfocus.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/