Re: First time security issue.

"<ben@benbailey.net>" wrote earlier
> Last week out NT4 PDC detected a virus (Pinfi.a) and put it in quaentine
> as it should.

On 23 Jul 2003 00:51:40 -0000, "<ben@benbailey.net>" wrote <20030723005140.25553.qmail@www.securityfocus.com>

> I think its worth mentioning that Fport will not run on the machine, all

I've seen this with FPort 2.0. When FPort was updated to work with Windows XP, backwards compatibility with NT4 was lost. I see the FPort ReadMe states otherwise.

On NT4 Server/PDC, with the latest version of FPort available here MD5=DBB75488AA2FA22BA6950AEAD1EF30D5
http://www.foundstone.com/knowledge/free_tools.html nothing but version info to stdout.

A version that works on NT4/PDC is here, FPort ver. 1.33. http://online.securityfocus.com/data/tools/FPortNG.zip As a bonus, SecurityFocus' archived version still contains the needed PSAPI.DLL for NT4.

Consider this merely a pre-emptive first strike to the forked thread spiraling off on whether NTDLL.DLL has been Trojaned on the OP's box.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Matt Scarborough 2003-07-26