(PVS) Signatures - Tenable Network Security

Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Client Detection
PVS ID: 3118 FAMILY: FTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that has been compromised
and is being controlled by a botnet. A botnet is a network of compromised computers that
are remotely controlled by a malicious bot administrator. Botnets are commonly used
for\nsending spam\nrunning Denial of Service (DoS) attacks against other
networks\nscanning and compromising new systems\nInstalling sniffers\nInstalling
keyloggers\nIdentify theft
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Client Detection
PVS ID: 3119 FAMILY: IRC Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that has been compromised
and is being controlled by a botnet. A botnet is a network of compromised computers that
are remotely controlled by a malicious bot administrator. Botnets are commonly used
for\nsending spam\nrunning Denial of Service (DoS) attacks against other
networks\nscanning and compromising new systems\nInstalling sniffers\nInstalling
keyloggers\nIdentify theft\nThe observed command was '%P'\n
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Client Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3120 FAMILY: IRC Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that has been compromised
and is being controlled by a botnet. A botnet is a network of compromised computers that
are remotely controlled by a malicious bot administrator. Botnets are commonly used
Family Internet Services 796