Microsoft Windows AutoRuns Logon

This script is Copyright (C) 2013-2017 Tenable Network Security, Inc.


Synopsis :

Report programs that start-up from the most common registry
locations.

Description :

Report the most common startup locations used by programs. These are
commonly associated with programs that start automatically when the
computer is turned on, users log in, users log off, or remote sessions
are started.

Such keys can be set from a program install, GPO, or through a
malicious process to maintain persistence.

See also :

http://support.microsoft.com/kb/309825
http://technet.microsoft.com/en-us/library/cc939862.aspx
http://support.microsoft.com/kb/195461
http://technet.microsoft.com/en-us/library/cc939851.aspx
http://technet.microsoft.com/en-us/library/cc957402.aspx
http://technet.microsoft.com/en-us/library/cc775970(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/ff404236.aspx
http://technet.microsoft.com/en-us/library/cc940243.aspx
http://technet.microsoft.com/en-us/library/cc736711(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc940243.aspx
http://technet.microsoft.com/en-us/library/cc939931.aspx
http://technet.microsoft.com/en-us/library/cc976124.aspx
http://support.microsoft.com/kb/315222
http://support.microsoft.com/kb/951048
http://www.nessus.org/u?a4f85803
http://www.nessus.org/u?21118291
http://www.nessus.org/u?21118291
http://www.etlengineering.com/installer/activesetup.txt
http://msdn.microsoft.com/en-us/library/ms861759.aspx
http://support.microsoft.com/kb/310593/en-us
https://sites.google.com/site/rajbobsite/Startup

Solution :

n/a

Risk factor :

None

Family: Windows

Nessus Plugin ID: 70621 ()

Bugtraq ID:

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now