# This script was written by Jeff Adams # This script is Copyright (C) 2003 Jeff Adams if(description) { script_id(11883); script_version("$Revision: 1.2 $"); name["english"] = "Gator/GAIN Spyware Installed"; script_name(english:name["english"]); desc["english"] = " The remote host has Gator/GAIN Spyware Installed. Gator tracks the sites that users visit and forwards that data back to the company's servers. Gator sells the use of this information to advertisers. It also lets companies launch a pop-up ad when users visit various Web sites. This software is not suitable for a business environment. Solution : Uninstall the software Risk factor : Medium"; script_description(english:desc["english"]); summary["english"] = "Determines if Gator Spyware is installed"; script_summary(english:summary["english"]); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2003 Jeff Adams"); family["english"] = "Windows"; script_family(english:family["english"]); script_dependencies("netbios_name_get.nasl", "smb_login.nasl","smb_registry_access.nasl", "smb_registry_full_access.nasl"); script_require_keys("SMB/name", "SMB/login", "SMB/password", "SMB/domain","SMB/transport"); script_require_ports(139, 445); exit(0); } include("smb_nt.inc"); rootfile = registry_get_sz(key:"SOFTWARE\Gator.com\Gator\dyn", item:"AppExe"); if(rootfile) { security_note(get_kb_item("SMB/transport")); }