(PVS) Signatures - Tenable Network Security

Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Server Detection
PVS ID: 3134 FAMILY: IRC Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that is being used to control
a botnet. A botnet is a network of compromised computers that are remotely controlled by a
malicious bot administrator. Botnets are commonly used for\nsending spam\nrunning
Denial of Service (DoS) attacks against other networks\nscanning and compromising new
systems\nInstalling sniffers\nInstalling keyloggers\nIdentify theft\nThe observed command
was '%L'\n
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Server Detection
PVS ID: 3135 FAMILY: IRC Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that is being used to control
a botnet. A botnet is a network of compromised computers that are remotely controlled by a
malicious bot administrator. Botnets are commonly used for\nsending spam\nrunning
Denial of Service (DoS) attacks against other networks\nscanning and compromising new
systems\nInstalling sniffers\nInstalling keyloggers\nIdentify theft\nThe observed command
was '%L'\n
realtime
Solution: Manually inspect the machine for malicious processes. In addition, you may wish to
consider installing security software that detects and blocks this sort of malicious software.
CVE Not available
Generic Botnet Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3136 FAMILY: IRC Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host appears to be running a machine that is being used to control
a botnet. A botnet is a network of compromised computers that are remotely controlled by a
malicious bot administrator. Botnets are commonly used for\nsending spam\nrunning
Family Internet Services 802