SecurityRisk.ScanToy

Updated:

February 13, 2007 11:35:18 AM

Type:

Other

Version:

0.5a

Risk Impact:

High

File Names:

Can have any file name. Has been reported as ScannersToy.exe and lsass.exe

Systems Affected:

Windows 2000, Windows NT, Windows Server 2003, Windows XP

Behavior

SecurityRisk.ScanToy is a tool that is ostensibly designed to scan a local system and LAN for exploits. It can also be used as part of a larger Denial of Service (DoS) or worm attack.

Symptoms

The files are detected as SecurityRisk.ScanToy.

• Significant increase in outgoing port traffic.

Transmission

Must be intentionally loaded and run.

Antivirus Protection Dates

• Initial Rapid Release version October 28, 2003
• Latest Rapid Release version October 28, 2003
• Initial Daily Certified version October 28, 2003
• Latest Daily Certified version December 18, 2007 revision 039
• Initial Weekly Certified release date October 29, 2003