Microsoft Windows AutoRuns Boot Execute

info Nessus Plugin ID 70615

Synopsis

Report programs that startup associates with session manager subsystem.

Description

Report registry startup locations associated with the session manager subsystem during boot time.

These registry keys start-up with the smss.exe service during boot time and perform system tasks that cannot be performed while Windows is running.

See Also

https://support.microsoft.com/en-us/help/102985

https://en.wikipedia.org/wiki/Service_Control_Manager

https://www.2-spyware.com/file-smss-exe.html

Plugin Details

Severity: Info

ID: 70615

File Name: windows_autoruns_boot_execute.nbin

Version: 1.280

Type: local

Agent: windows

Family: Windows

Published: 10/25/2013

Updated: 11/12/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated, war/setup/ran