home *** CD-ROM | disk | FTP | other *** search
- # This script was written by Jeff Adams <jeffrey.adams@hqda.army.mil>
- # This script is Copyright (C) 2003 Jeff Adams
-
-
- if(description)
- {
- script_id(11883);
-
- script_version("$Revision: 1.2 $");
-
- name["english"] = "Gator/GAIN Spyware Installed";
-
- script_name(english:name["english"]);
-
- desc["english"] = "
- The remote host has Gator/GAIN Spyware Installed. Gator tracks the sites that
- users visit and forwards that data back to the company's servers. Gator sells
- the use of this information to advertisers. It also lets companies launch a
- pop-up ad when users visit various Web sites. This software is not suitable
- for a business environment.
-
- Solution : Uninstall the software
-
- Risk factor : Medium";
-
-
- script_description(english:desc["english"]);
-
- summary["english"] = "Determines if Gator Spyware is installed";
-
- script_summary(english:summary["english"]);
-
- script_category(ACT_GATHER_INFO);
-
- script_copyright(english:"This script is Copyright (C) 2003 Jeff Adams");
- family["english"] = "Windows";
- script_family(english:family["english"]);
-
- script_dependencies("netbios_name_get.nasl",
- "smb_login.nasl","smb_registry_access.nasl",
- "smb_registry_full_access.nasl");
- script_require_keys("SMB/name", "SMB/login", "SMB/password",
- "SMB/domain","SMB/transport");
-
- script_require_ports(139, 445);
- exit(0);
- }
-
- include("smb_nt.inc");
-
- rootfile = registry_get_sz(key:"SOFTWARE\Gator.com\Gator\dyn", item:"AppExe");
- if(rootfile)
- {
- security_note(get_kb_item("SMB/transport"));
- }
-