PAexec = 1.29 blocked by antivirus software

Question

Hi,
I just noticed that our Antivirus software blocks the remote execution of PAexec since version 1.29. Versions 1.28 and before are fine.
I know of a PSexec parameter that can help avoid this problem :
"-r : Specifies the name of the remote service to create or interact with."

Do you think, if implemented, this could prevent this antivirus detection problem with PAexec too ?

Doug · Answer

Hi -

Anti-virus applications occasionally flag PAExec and Microsoft's PsExec because although they are useful tools for system administrators, they are also used by hackers.

I'm a little surprised -r would help prevent PsExec from getting flagged. Do you have any references to that?

PAexec >= 1.29 blocked by antivirus software

1 Answers