Re: [sentinix-list] nessus ?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sentinix does not contain trojans/worms or intentional malicious code or 
anything of that nature, unless you've got a modified copy that is, but I 
find that very unlikely.

Where did you download the ISO??

Nessus does not either contain anything that can infect/penetrate systems, 
it's possible to crash some old Win* and crash (old) services, but that's not 
common at all. Even with the full "unsafe" scan it's very stable (at least 
within the networks I'm in).

My guess is that you've probably discovered an infection you didn't know about 
(it can happen), or that someone in your organization (just) openned, in 
curiousity, one of those very interesting attachments (irony ;). If your 
internal net is exploitable by this worm backdoor (it uses several 
vulnerabilities in Microsoft's OS to spread) it can spread incredibly fast... 
that's the meaning of making a worm. If everything can reach everything you 
ought to unplug all machines from the network (the TP-cable) and run 
anti-virus!

Nessus is used daily by IT security consultants in the field. I praise it as 
very accurate and detects more or as many vulnerabilities compared to 
commercial scanners. I does *not* attempt to exploit anything, it's not a 
pen-test kit and it does *not* contain worms, trojans, et al.

I wish you best of luck!
	Michel

On Monday 29 March 2004 14:23, Sylvia Lopez wrote:
> Hi,
>
> I downloaded, installed and set up Sentinix 0.70.50 last week.
> After that I started a scaning of our network using Nessus. Following
> it, all our computers have been infected by the Gaobot virus one after
> another !!! It may just be a coincidence but there may anyway be
> a relationship between the infection and the scan of our computers.
> Do you have an explaination for that ? Did this happen previously ??
>
> I must say that now I hesitate to use/recommend your product, although
> I considered it well-suited to our purpose....
>
> Thanks in advance for you answer !
>
> Best regards,
>
>
>
>
> _______________________________________________
> SENTINIX mailing list
> [email protected]
> http://elevenprospect.com/mailman/listinfo/sentinix
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAaDXDDsNYvU6O5AgRAjdeAJwJHlsDpF9uLv/b+9NrnynB1BS4ugCfQ9b3
p666JeyhYP/R1GRQYICRG2k=
=5M07
-----END PGP SIGNATURE-----