Misc/Srvany - Released Apr 06, 2005 - Last Updated Jan 31, 2007
|
Alias/esMisc/Srvany |
Detection Availability
|
Visible Symptoms |
Detailed AnalysisThis detection covers hacking utilities that allow running Windows NT applications as services.
Their functions include the following:
- Allow applications to survive logoff/logon sequences, hence saving the overhead of re-starting them for each new user
- Allow server applications to run and handle service requests even when no user is logged on
- Allow applications to run and perform a task in a specific logon account, different from the user that is currently logged on
|
Recommended Action
FortiGate Systems
- Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.
|
