I have had great success with plugins 12209 and 12204. Someone else has also reported the same thing. These plugins don't require logins. Give them a try.
Sonny Discini Senior Network Security Engineer Department of Technology Services Enterprise Infrastructure Division Montgomery County Government -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jack Polimer Sent: Wednesday, May 05, 2004 9:15 AM To: nessus Subject: Is My Sasser Worm Scan Config Correct? I'm scanning for Sasser and coming up empty. If my config is correct, I'm happy :) . My scanner has the plugin sasser_virus.nasl. My .nessusrc contains the following: ... begin(SCANNER_SET) # Only "= yes" are displayed 10336 = yes end(SCANNER_SET) ... begin(PLUGIN_SET) # Only "= yes" are displayed 10330 = yes 12007 = yes 12219 = yes end(PLUGIN_SET) ... When I grep for "10330" and "12219" out of /usr/local/lib/nessus/plugins/* I get nothing. Do I need 10330 and/or 12007 set to "yes"? If I want to scan for Sasser can I simply have only 12219 set to "yes"? If I have "Enable dependencies at runtime" turned on, I do not need to explicitly check Misc.|Services on, do I? Thanks. __________________________________ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
