| VID |
27316 |
| Severity |
30 |
| Port |
139,445 |
| Protocol |
TCP |
| Class |
MALWARE |
| Detailed Description |
The "DSSAgent" program is installed on the system.
The presence of this program is sometimes perceived as Spyware that can secretly monitor system activity, or as Adware that can display ads. Generally, Spyware and Adware may gather your browsing habits or confidential information and expose it to attacker or a central ad server.
It may also violate your privacy. DSSAgent runs as a hidden process, with no user interface. It immediately tries to make an internet connection to 209.67.3.166:53 and downloads new splash screens to be displayed when the products that support this program are started. Also, a desktop computer running DSSAgent might send over 10,000 DNS requests in 15 minutes, slowing network traffic. There are reports that it slows CPU processing as well.
* Note: This check requires an account with Guest or upper privileges which can access the registry of the remote host to scan. Absence of these condition will result in the check not being performed and a False Negative for all vulnerable hosts.
* References:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=99501
http://support.microsoft.com/default.aspx?scid=KB;EN-US;q296077
http://www.kephyr.com/spywarescanner/library/dssagent/index.phtml
http://www.safersite.com/PestInfo/d/dssagent.asp
* Platforms Affected:
Microsoft Windows Any version |
| Recommendation |
Remove it from your system using the following methods, if it's silently installed without the users knowledge or the use of it dose not match your security policy.
1. Using the uninstaller for it on the Add/Remove Program entry.
2. Using spyware/adware removal program or Vaccine(Anti-Virus) program. You can use the following programs:
- Norton AntiVirus: http://www.symantec.com/downloads
- McAfee VirusScan: http://download.mcafee.com/default.asp |
| Related URL |
(CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
