RE: sndvol.exe

["Frank W. Keeney" <FKeeney () hsa com>]

It causes the same problem with Firewall 1. 

        ----------
        From:  0x1c [SMTP:nick () shibumi feralmonkey org]
        Sent:  Saturday, March 20, 1999 10:17 AM
        Cc:  firewall-wizards () nfr net
        Subject:  Re: sndvol.exe

        I would have hoped a firewall product from Cisco would be
smarter than
        that.

        Nick

        On Thu, 18 Mar 1999, Randy Garbrick wrote:

        > Has anyone noticed a Trojan horse called sndvol.exe that
replaces the 
        > Win NT/9X sndvol.exe and then does a continuous port scan from
inside a 
        > firewall to multiple outside addresses?  It created a denial
of service 
        > by maxing out the sessions on our Pix.  We're trying to locate
the 
        > source of the executable.