WinSATAN Backdoor Detection

WinSATAN is installed. This backdoor allows anyone to partially take control of the remote system. SPDX-FileCopyrightText: 2000 Julio César Hernández Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache HTTP Server 'mod_rootme' Backdoor

The remote system appears to be running the modrootme module, this module silently allows a user to gain a root shell access to the machine via HTTP requests. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

HACKER defender finder

This script checks whether the remote host is running the Hacker Defender backdoor. SPDX-FileCopyrightText: 2004 SIA Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bugbear.B web backdoor

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. SPDX-FileCopyrightText: 2005 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fluxay Sensor Detection

This host appears to be running Fluxay Sensor on this port. Fluxay Sensor is a Backdoor which allows an intruder gain remote access to files on your computer. Similar to SubSeven This program is installs as a Service and is password protected. It protects itself so it is difficult to stop or...

SMTP Server on non standard port

This SMTP server is running on a non standard port. This might be a backdoor set up by attackers to send spam or even control the system. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

FsSniffer Detection

This host appears to be running FsSniffer on this port. FsSniffer is backdoor which allows an intruder to steal PoP3/FTP and other passwords you use on your system. SPDX-FileCopyrightText: 2005 J.Mlodzianowski Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

TFTP backdoor

A TFTP server is running on this port. However, while trying to fetch some file, we retrieved an executable file. This is probably a backdoor. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. OpenVAS Vulnerability Test $Id: alya.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: alya.cgi Authors: Jason Lidow Copyright: Copyright C 2002 Jason Lidow This program is free software; you can redistribute it and/or modify it...

Bugbear.B worm

BugBear.B backdoor is listening on this port. A cracker may connect to it to retrieve secret information, e.g. passwords or credit card numbers... The BugBear.B worm includes a key logger and can kill antivirus or personal firewall softwares. It propagates itself through email and open Windows...

Bugbear.B web backdoor

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. More information: http://www.f-secure.com/v-descs/bugbearb.shtml OpenVAS Vulnerability Test $Id: bugbearb.nasl 7165 2017-09-18 08:57:44Z cfischer $ Description: Bugbear.B web backdoor Authors:...

Upside down world: back door Kill firewall&antivirus software(figure)-vulnerability warning-the black bar safety net

Often in the Get WebShell and elevation of Privilege, the server firewall or antivirus just to play a role, let's pass up the tools of the old disappear; or some firewall settings very BT, often causing a lot of inconvenience. Although some of the back door with cleanup antivirus and firewall...

Alcatel OmniSwitch 7700/7800 switches backdoor

The remote host seems to be a backdoored Alcatel OmniSwitch 7700/7800. SPDX-FileCopyrightText: 2005 deepquest Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Port TCP:0 Open

TCP port 0 is open on the remote host. This is highly suspicious as this TCP port is reserved and should not be used. This might be a backdoor REx. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Korgo worm detection

The remote host is probably infected with Korgo worm. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 and opens a backdoor on TCP ports 113 and 3067. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might b...

4553 Parasite Mothership Detect

The backdoor SPDX-FileCopyrightText: 2002 Violating Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11187";...

Wollf backdoor detection

This host appears to be running Wollf on this port. Wollf Can be used as a Backdoor which allows an intruder gain remote access to files on your computer. If you did not install this program for remote management then this host may be compromised. SPDX-FileCopyrightText: 2003 J.Mlodzianowski Some...

WinSATAN

WinSATAN is installed. This backdoor allows anyone to partially take control of the remote system. An attacker may use it to steal your password or prevent your system from working properly. OpenVAS Vulnerability Test $Id: winsatan.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: WinSATAN...

Bugbear worm

BugBear backdoor is listening on this port. A cracker may connect to it to retrieve secret information, e.g. passwords or credit card numbers... The BugBear worm includes a key logger and can kill antivirus or personal firewall softwares. It propagates itself through email and open Windows shares...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. Multiple security vulnerabilities have been found, one of them is a backdoor password 'jstwo' allowing complete access to the system. OpenVAS...