PopAdStop (was dst port 1026)

["Johannes B. Ullrich" <jullrich () sans org>]

An old version of 'PopAdStop' (last weeks at least) did contain code to
scan port 1026/30 and if it found it open, it sent the ad for the
software.

For a couple traces and such, see
http://isc.sans.org/diary.html

 

-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 786 1563            
  fax: (617) 786 1550                          jullrich () sans org

Attachment: signature.asc
Description: This is a digitally signed message part