Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Add psexec and pskil to block application list

Hi,

About 3 weeks ago my company was hkacked using psexe and pskil. I would like to block these apps but i cant find them in application controle.

Can you help me?

Michel V



This thread was automatically locked due to age.
Parents Reply
  • psexec is detected as PUA since 2006.
    What psexec basically does isn't really rocket science - any decent malware writer could come up with its basic and abused functionality in minutes. That a know tool is used stems from the fact that it's often used for system administration, software deployment and things like that. There's a chance that it is white-listed. But as I mentioned that it uses the ports 135 and 445 blocking those in your network can help ! 
    There is no command straight forward from the console to block it !

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

Children
No Data