检测

Microsoft Windows 自动运行登录

info Nessus 插件 ID 70621

语言：

简介

报告从最常用的注册表位置启动的程序。

描述

报告各程序最常用的启动位置。这些通常与打开计算机、用户登录、用户注销或启动远程会话时自动启动的程序相关联。

可从程序安装、GPO 或通过恶意进程来设置此类密钥以保持存续。

解决方案

不适用

另见

https://support.microsoft.com/en-us/help/309825

http://technet.microsoft.com/en-us/library/cc939862.aspx

https://support.microsoft.com/en-us/help/195461/how-to-set-up-a-logon-script-only-for-terminal-server-users

http://technet.microsoft.com/en-us/library/cc939851.aspx

http://technet.microsoft.com/en-us/library/cc957402.aspx

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc775970(v=ws.10)

http://technet.microsoft.com/en-us/library/ff404236.aspx

http://technet.microsoft.com/en-us/library/cc940243.aspx

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc736711(v=ws.10)

http://technet.microsoft.com/en-us/library/cc939931.aspx

http://technet.microsoft.com/en-us/library/cc976124.aspx

http://support.microsoft.com/kb/315222

https://support.microsoft.com/en-us/help/951048/an-application-does-not-start-in-a-windows-server-2008-terminal-servic

http://www.nessus.org/u?012a8b4d

http://www.nessus.org/u?21118291

http://www.etlengineering.com/installer/activesetup.txt

https://docs.microsoft.com/en-us/previous-versions/windows/embedded/ms861759(v=msdn.10)

https://support.microsoft.com/en-us/help/310593/description-of-the-runonceex-registry-key

https://sites.google.com/site/rajbobsite/Startup

插件详情

严重性: Info

ID: 70621

文件名: windows_autoruns_logon.nbin

版本: 1.280

类型: local

代理: windows

系列: Windows

发布时间: 2013/10/25

最近更新时间: 2024/10/10

支持的传感器: Nessus Agent, Nessus

漏洞信息

必需的 KB 项: SMB/Registry/Enumerated, war/setup/ran