Malicious Process Detection: Potentially Unwanted Software

Info Nessus Plugin ID 59641

Synopsis

Nessus detected potentially unwanted processes on the remote host.

Description

The md5sum of one or more running process on the remote Windows host matches software known to violate some corporate policies. Verify that the remote processes are authorized in your environment.

Solution

Uninstall the remote software if it does not match your security policy.

Plugin Details

Severity: Info

ID: 59641

File Name: wmi_unwanted_software.nbin

Version: 1.120

Type: local

Agent: windows

Family: Windows

Published: 2012/06/21

Updated: 2020/10/07

Dependencies: 59275

Risk Information

Risk Factor: Info

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: malscan/enabled