Hello Monks , is there a way to tell if there is a software preventing an executable from running or installing on a server. This is the scenario, I managed series of test servers for the company. Sometime ago it look like there was an intruder in or systems and we trace it back to an account out of an IP. We successfully block and monitor ports constantly. It may look that the intruder may have left a security software that runs in the background and prevents another applications to install into the server. Although it doesn't seem a security risk. I like to know if there is any security software that could prevent you from installing software onto a server and cuts process at night. I'm trying to write something in Perl to be able to detect this pattern I'll appreciate your suggestions.