(PVS) Signatures - Tenable Network Security

Generic Botnet Client Detection
PVS ID: 3115 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that has been compromised
and is being controlled by a botnet. A botnet is a network of compromised computers that
are remotely controlled by a malicious bot administrator. Botnets are commonly used
for\nsending spam\nrunning Denial of Service (DoS) attacks against other
networks\nscanning and compromising new systems\nInstalling sniffers\nInstalling
keyloggers\nIdentify theft
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Server Detection (Web Admin)
PVS ID: 3116 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that has been compromised
and is being controlled by a botnet. A botnet is a network of compromised computers that
are remotely controlled by a malicious bot administrator. Botnets are commonly used
for\nsending spam\nrunning Denial of Service (DoS) attacks against other
networks\nscanning and compromising new systems\nInstalling sniffers\nInstalling
keyloggers\nIdentify theft
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Client Detection
PVS ID: 3117 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has a backdoor installed.\n\nThe remote host appears to be
running a machine that has been compromised and is being controlled by a botnet. A botnet
is a network of compromised computers that are remotely controlled by a malicious bot
administrator. Botnets are commonly used for\nsending spam\nrunning Denial of Service
(DoS) attacks against other networks\nscanning and compromising new systems\nInstalling
sniffers\nInstalling keyloggers\nIdentify theft
realtime
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 795