Unknown application installed/uninstalled

[DavidMerrill]

We received (see below) the following from one of our agents (followed up by a similar 1 new application has been uninstalled with the same lack of details).

Our client claims they ran an regular monthly update for a database application on that server, but this is the first time I've seen this kind of alert from Pulseway.

I've looked at the event logs for the time period when the alerts came out & I'm not seeing anything particular.

The only thing recently (5/18) installed the Shopping App by Ask (which I'm not particularly excited about).

Anyone else ever run into this kind of thing?

--

Hi Engineering,

1 new application has been installed on computer '****MachineNameRedacted****' in group '****GroupNameRedacted****'

Application Name:
Version: Unknown
Publisher: Unknown

Regards,
Pulseway Server

[Paul]

Hi David,

We monitor the registry root key for uninstall and it's possible that there was some software that tested the access rights to see if they can create the registry values and then removed them, Pulseway might have caught that bogus data.

Do let us know if this happens again.

Paul