Virus / Backdoor Client Detection (deprecated)

critical Nessus Network Monitor Plugin ID 4678

Synopsis

The remote host has been compromised and is running a 'backdoor' program.

Description

The remote host appears to be infected with a backdoor. This strain of backdoor malware is known to change the browser 'User-Agent' string in order to identify itself to server machines.

Solution

Manually examine and clean the host.

Plugin Details

Severity: Critical

ID: 4678

Family: Web Clients

Published: 9/15/2008

Updated: 1/15/2016