Ask Your Question
0

Malware bytes flagged nssm.exe file which is part of Puppet Agent install as BitCoinMiner

asked 2017-09-13 09:13:21 -0600

Malware byes flagged nssm.exe file that is part of the puppet agent install on windows as a bitcoin miner malware. Can you confirm that this file is safe ?C:\fakepath\nssm bitcoinminer issue.PNG

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2017-09-13 10:03:19 -0600

csharpsteen gravatar image

NSSM is a tool that wraps a program and makes it easy to run as a Windows Service, somewhat similar to supervisord or monit from the Linux world. You can read more about it here:

https://nssm.cc/

The Puppet Agent package includes NSSM in order to run the pxp-agent component as a Windows Service. I'm sure there are some BitCoin miners out there that also happen to use NSSM to run programs in the background, but Malware Bytes is playing a bit fast and loose by suggesting all instances of NSSM use are related to BitCoin mining.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2017-09-13 09:12:17 -0600

Seen: 32 times

Last updated: Sep 13