/build/static/layout/Breadcrumb_cap_w.png

Wireshark and Skype Suddenly Installed

Hi,

I have been testing K1000 patching features with Windows 10 and Windows Server on VM (VMWare Workstation), but i was surprised to find that out of nowhere there is Wireshark, WinSCP, Skype, VMWare Player, and some of Google Chrome apps shortcut (like Google Docs, Google Sheet, etc) installed even though the Windows do not have any of that software installed initially. Is it K1000 doing? Why is it installing new software automatically? I expect K1000 only install patches from already installed software, not install some new random software.
I have tried this both on Windows 10 and Windows Server 2012, both behave the same way (installing VMWare Plare, Wireshare, etc)

1 Comment   [ + ] Show comment
  • you might have selected these software patches ,
    Security › Patch Management › Subscriptions



    Adobe
    Adobe Systems, Inc
    Apache Software Foundation
    Apple
    Apple Inc.
    Audacity Team, The
    Autodesk, Inc
    Box, Inc.
    Canneverbe Limited
    Cisco Systems, Inc.
    Citrix Systems, Inc
    Corel Corporation
    Document Foundation, The
    Dominik Reichl
    Don Ho
    dotPDN LLC
    Dropbox Inc.
    Evernote Corporation
    F-Secure
    Foxit Corporation
    GIMP Development Team, The
    GlavSoft LLC.
    Google Inc.
    Igor Pavlov
    Inkscape Team, The
    Ivo Beltchev
    Jens Klingen
    Lightning UK!
    Lumension
    Macromedia
    Martin Prikryl
    McAfee, Inc
    Micro Focus
    Microsoft Corp.
    Mozilla
    Norman
    Novell
    Novell, Inc.
    Nullsoft, Inc.
    Opera Software ASA
    Oracle Corporation
    PatchLink Corporation
    pdfforge
    Pidgin Team
    Piriform Ltd
    PKWARE, Inc.
    RealNetworks, Inc
    RealVNC Ltd.
    Riverbed Technology
    Simon Tatham
    Skype
    SolarWinds Worldwide, LLC
    Sophos
    Stefan Küng
    Sun Microsystems
    Symantec Corporation
    TeamViewer
    TechSmith
    Tim Kosse
    Trend Micro
    UltraVNC
    VideoLAN
    VMware
    VMware, Inc.
    win.rar GmbH
    WinZip Computing Inc
    WinZip Computing, S.L.
    Wireshark Foundation
    Yahoo! Inc. - rahimpal 6 years ago
    • Hi, yes. I enabled all patch subscription. But it's a clean Windows install, haven't installed any software except Google Chrome. I thought it only patched what already installed? Not, it install all the missing software just because i select all patch subscriptions? It just kind of unexpected. - hendra.tommy 6 years ago

Answers (3)

Answer Summary:
Posted by: JoshRoss 6 years ago
Senior White Belt
1
Have you checked your network for potential worms that can be downloading that? A clean install should not behave in such way. Maybe there is a user on your network that might have caused issues? Go over logs and see if you find anything suspicious.

Comments:
  • It is a clean install. Nothing have installed yet, fresh Windows install on VM. I don't think it because of worms, i suspect there is something to do with patching system behavior - hendra.tommy 6 years ago
    • Any indications of logs? Both System and K1000's? - JoshRoss 6 years ago
Posted by: tshupp 6 years ago
3rd Degree Black Belt
0
Under Security -> Patch Management -> Subscriptions -> Application Patches -> Types, is "All Types" or "Select Types, Software Installer" selected?

Comments:
  • Exactly, it's because the software install is checked. - hendra.tommy 6 years ago
Posted by: PaulGibson 6 years ago
Orange Belt
0

Top Answer

I experienced the exact same behavior the first time I tried running a deploy schedule. I also expected that KACE would only patch software that was already installed on the computer, and not add new software. I quickly found out there are two options:

Under "Security | Patch Management | Subscriptions | Application Patches | Types" - uncheck "Software Installers"

I'm using a detect to find all missing patches, and a Smart Label for what should be deployed
Status is Active
Type is not Software Installer
Missing is True
Released is not within last 2 days

I currently have both of these enabled, although each one should be enough (the belt and suspenders approach). 

Comments:

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ