(PVS) Signatures - Tenable Network Security

ealtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Server Detection
PVS ID: 4441 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that is a server within a
botnet network. A botnet is a network of compromised computers that are remotely
controlled by a malicious bot administrator. Botnets are commonly used for\nsending
spam\nrunning Denial of Service (DoS) attacks against other networks\nscanning and
compromising new systems\ninstalling sniffers\ninstalling keyloggers\nidentify theft
\n\nThe observed command being sent from the server was '%L'
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Client Detection
PVS ID: 4442 FAMILY: IRC Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that has been compromised
and is being controlled by a botnet. A botnet is a network of compromised computers that
are remotely controlled by a malicious bot administrator. Botnets are commonly used
for\nsending spam\nrunning Denial of Service (DoS) attacks against other
networks\nscanning and compromising new systems\ninstalling sniffers\ninstalling
keyloggers\nidentify theft\nThe observed command was '%P'\n
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
Orb Client Detection
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4443 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Family Internet Services 1159