Re: ELF_SSHSCAN.A and ELF_PORTSCAN.A
Paul Schmehl <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
Looks like curiousity might be kiling the cat: <http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=HKTL%5FSQLSCAN%2EA> --On Wednesday, November 09, 2005 22:03:45 -0500 Doug Fox <[email protected]> wrote: > Found two files, elf_sshscan.a and elf_portscan.a, compressed in a *.tgz > file on a Red Hat box. Exported the file to a MS box, Trend Micro > OfficeSacn detected them as viruses, but did not provide any information > other than the names in its knowledgebase. > > Searched TM site, no information was available today. > > Any information of these two viruses, such as how the virus getting on to > the Red Hat box, etc. are appreciated. > > Thanks, Paul Schmehl ([email protected]) Adjunct Information Security Officer University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/ir/security/