Malicious Process Detection: Potentially Unwanted Software

info Nessus Plugin ID 59641

Language:

Synopsis

Nessus detected potentially unwanted processes on the remote host.

Description

The md5sum of one or more running process on the remote Windows host matches software known to violate some corporate policies. Verify that the remote processes are authorized in your environment.

Solution

Uninstall the remote software if it does not match your security policy.

Plugin Details

Severity: Info

ID: 59641

File Name: wmi_unwanted_software.nbin

Version: 1.223

Type: local

Agent: windows

Family: Windows

Published: 6/21/2012

Updated: 11/12/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: malscan/enabled

Detections

Analytics