Jump to content

Unknown application installed/uninstalled


DavidMerrill
 Share

Recommended Posts

We received (see below) the following from one of our agents (followed up by a similar 1 new application has been uninstalled with the same lack of details).

Our client claims they ran an regular monthly update for a database application on that server, but this is the first time I've seen this kind of alert from Pulseway.

I've looked at the event logs for the time period when the alerts came out & I'm not seeing anything particular.

The only thing recently (5/18) installed the Shopping App by Ask (which I'm not particularly excited about).

Anyone else ever run into this kind of thing?

--

Hi Engineering,

1 new application has been installed on computer '****MachineNameRedacted****' in group '****GroupNameRedacted****'

Application Name:
Version: Unknown
Publisher: Unknown

Regards,
Pulseway Server

EventLog.png

RecentInstalls.png

Link to comment
Share on other sites

  • 2 weeks later...
  • Administrators

Hi David,

We monitor the registry root key for uninstall and it's possible that there was some software that tested the access rights to see if they can create the registry values and then removed them, Pulseway might have caught that bogus data.

Do let us know if this happens again.

Paul

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...