Re: Odd TPF issue with Cold Fusion

From: Steffen M. Banhardt (steffen.spam@gmx.de)
Date: 05/09/02 

From: "Steffen M. Banhardt" <steffen.spam@gmx.de>
Date: Thu, 9 May 2002 11:53:25 +0200

Had the same problems with Kerio 2.13 after patching programs, Kerio
2.14 had no problems.

"eng!neer" <fdhgsl@sfg.com> schrieb am 09 Mai 2002 in
news:F1mC8.106615$q8.10997706@bin3.nnrp.aus1.giganews.com:

> Did you 'upgrade' Cold fusion recently or patch it? TPF keeps
> an MD5 Checksum of the executable. When the executable changes
> (which will usually occur with upgrades or patches) the checksum
> also changes. This doesn't mean it 'can't' be a trojan of
> course. However, if you have patched recently and you run a
> scan with updated Virus definitions with no viruses found then I
> would be reasonably secure that you were ok. If you haven't
> patched, then run a scan and reinstall cold fusion to be extra
> safe.
>
> HTH
>
> "Drum***" <tmccartney66@yahoo.com> wrote in message
> news:4bcf178b.0205081532.55d4c480@posting.google.com...
>> Lately I've been getting a frequent error message from Tiny
>> Personal Firewall that says the following:
>>
>> "Tiny Personal Firewall has detected that application
>> 'C:\CFUSION\BIN\CFSERVER.EXE' was replaced by another
>> application with description 'ColdFusion Server.' Do you want
>> to accept replacement of this application?"
>>
>> Whether I click Yes or No, the message usually repeats itself 6
>> or 7 times in rapid succession before going away.
>>
>> If I were paranoid, I'd say it smells almost like a Trojan of
>> some kind, but it may be nothing. Any ideas?
>>
>> Many thanks,
>>
>> Tracey
>>
>
> 

-- 
Steffen Banhardt - felixjongleur@gmx.net
Mails to 'From' will not be read!