Search:     Advanced search
server monitoring

PhatBOT detection

Article ID: 12111
Last updated: 27 Jan, 2009
Views: 438
Posted: 22 Jan, 2009
by: Tech Pubs S.
Updated: 27 Jan, 2009
by: Tech Pubs S.

PhatBOT detection

This script is Copyright (C) 2004 Tenable Network Security

FamilyWindows
Plugin ID12111
Bugtraq ID
CVE ID

Description:

The remote systems appears to have PhatBOT installed.
This program allows the machine to be controlled via a P2P
network. PhatBOT is extremely sophisticated and allows the
remote attacker to use the victim machine to perform various
actions.

Solution : Remove PhatBOT immediately
See also : http://www.lurhq.com/phatbot.html
Risk factor : High
This article was:   Helpful | Not Helpful
Prev   Next
SaveNOW detection     3ivx MPEG-4 < 5.0.2 Buffer Overflow