trojan_horses.nasl

漏洞扫描源码,可以扫描linux,windows,交换机路由器

#
# This script was written by Michel Arboi <[e-mail]>
#
# GPL
#
# References:
# From: "kai takashi" <[e-mail]>
# Organization: takashi industries
# To: [e-mail]
# Subject: Remote Shell Trojan: Threat, Origin and the Solution
# Date: Sun, 9 Sep 2001 14:40:27 +0300
# CC: [e-mail], [e-mail], [e-mail], [e-mail]
# 
# Date: Mon, 10 Mar 2003 01:54:12 -0500
# From: "Russ" <[e-mail]>
# Subject: Alert: New Worm - W32/Deloder on TCP445
# To: [e-mail]
#
# http://vil.nai.com/vil/content/v_100128.htm
#


if(description)
{
 script_id(11157);
 script_version ("$Revision: 118 $");
# script_cve_id("CVE-MAP-NOMATCH");
 
 name["english"] = "Trojan horses";
 name["francais"] = "Chevaux de Troie";
 script_name(english:name["english"], francais:name["francais"]);
 
 desc["english"] = "An unknown service runs on this port. 
It is sometimes opened by Trojan horses. 
Unless you know for sure what is behind it, you'd better
check your system.

Solution: if a trojan horse is running, run a good antivirus scanner

Risk factor : Low";


 desc["francais"] = "Un service inconnu tourne sur ce port.
Il est parfois utilis