HACKINGTOOLS_FSCAN

 Analysis by: Homer Pacag

 ALIASES:

Application.Fscan.A (F-Secure); W32/HackTool.VG (F-Prot)

 PLATFORM:

Linux OS

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Hacking Tool

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW


This is a Fast SYN Scanner that uses libnet and libpcap, which require root level access. It scans a given netblock on a specified port, using the specified interface with some type of speed setting value.

A certain command may be used in this tool. It is a port scanning command line tool. that scans open ports to the target IP address.

This hacking tool hacks a computer by running a command line.

  TECHNICAL DETAILS

File Size:

13,312 bytes

File Type:

ELF

Memory Resident:

No

Hacktool Routine

This hacking tool hacks a computer by running a command line.

  SOLUTION

Minimum Scan Engine:

8.900

SSAPI PATTERN File:

1.164.28

SSAPI PATTERN Date:

07 Apr 2011

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Scan your computer with your Trend Micro product to delete files detected as HACKINGTOOLS_FSCAN. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.


Did this description help? Tell us how we did.