[Dshield] Anti Subseven Server
Johannes B. Ullrich
jullrich at euclidian.com
Tue Jul 24 03:04:56 GMT 2001
I haven't used the program. It looks somewhat 'legit'. However, your
suspicious is warranted. Software like this, recommended over IRC,
is often a trojan itself. I just ran across a file called 'easyspeed'
which was advertised to increase your download speed, but was actually
There is another aspect to this as well. Most 'subseven' scans are
performed by automated tools. E.g. the 'Leaves Worm' that caused
a stire a couple weeks ago was spread that way. Talking to the
intruder in this case will not do much good. Even worse. If you run
into a hacker, you make your system even more interesting. Also,
while the program may not be malicous by itself, it could have
faults that may open up your computer.
Install a firewall and a virus scanner to keep your system out of
trouble. Other than that, there isn't too much you can do :-( .
On Mon, 23 Jul 2001, BarkerJr wrote:
> I was chatting on IRC a few hours ago about SubSevens, and a someone mentioned the
> I read through the site, but I don't know if I can trust it not to be the sub7 itself.
> Has anyone else used this utility?
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see: http://www1.dshield.org/mailman/listinfo/dshield
jullrich at sans.org Join http://www.DShield.org
Distributed Intrusion Detection System
More information about the list