Detections
Analytics

Microsoft Windows AutoRuns Boot Execute

info Nessus Plugin ID 70615

Language:

Synopsis

Report programs that startup associates with session manager subsystem.

Description

Report registry startup locations associated with the session manager subsystem during boot time.

These registry keys start-up with the smss.exe service during boot time and perform system tasks that cannot be performed while Windows is running.

See Also

https://support.microsoft.com/en-us/help/102985

https://en.wikipedia.org/wiki/Service_Control_Manager

https://www.2-spyware.com/file-smss-exe.html

Plugin Details

Severity: Info

ID: 70615

File Name: windows_autoruns_boot_execute.nbin

Version: 1.281

Type: local

Agent: windows

Family: Windows

Published: 10/25/2013

Updated: 11/22/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated, war/setup/ran