Test ID:	1.3.6.1.4.1.25623.1.0.10449
Category:	Windows
Title:	SMB Registry : value of SFCDisable
Summary:	NOSUMMARY
Description:	Description: The registry key HKLM\SOFTWARE\Microsoft\Windows NT\WinLogon\SFCDisable has its value set to 0xFFFFFF9D. This special value disables the Windows File Protection, which allows any user on the remote host to view / modify any file he wants. This probably means that this host has been compromised. Solution : set the value of this key to 0. You should reinstall this host Reference : http://online.securityfocus.com/archive/1/66849 Reference : http://support.microsoft.com/default.aspx?scid=kb en-us Q222473 Risk factor : High
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.