gator.nasl

来自「漏洞扫描源码,可以扫描linux,windows,交换机路由器」· NASL 代码 · 共 56 行

# This script was written by Jeff Adams <[e-mail]>
# This script is Copyright (C) 2003 Jeff Adams


if(description)
{
 script_id(11883);
 
 script_version("$Revision: 1315 $");

 name["english"] = "Gator/GAIN Spyware Installed";

 script_name(english:name["english"]);
 
 desc["english"] = "
The remote host has Gator/GAIN Spyware Installed. Gator tracks the sites that 
users visit and forwards that data back to the company's servers. Gator sells 
the use of this information to advertisers. It also lets companies launch a 
pop-up ad when users visit various Web sites. This software is not suitable 
for a business environment.

Solution : Uninstall the software

Risk factor : Medium";


 script_description(english:desc["english"]);
 
 summary["english"] = "Determines if Gator Spyware is installed";

 script_summary(english:summary["english"]);
 
 script_category(ACT_GATHER_INFO);
 
 script_copyright(english:"This script is Copyright (C) 2003 Jeff Adams");
 family["english"] = "Windows";
 script_family(english:family["english"]);
 
 script_dependencies("netbios_name_get.nasl",
 		    "smb_login.nasl","smb_registry_access.nasl",
		    "smb_registry_access.nasl");
 script_require_keys("SMB/name", "SMB/login", "SMB/password",
		     "SMB/domain","SMB/transport");

 script_require_ports(139, 445);
 exit(0);
}

include("smb_nt.inc");

rootfile = registry_get_sz(key:"SOFTWARE\Gator.com\Gator\dyn", item:"AppExe");
if(rootfile)
{
 security_note(get_kb_item("SMB/transport"));
}