Title

The Windows 8 default Skype app must be removed from the system. (Cat II impact)

Discussion

Some Windows 8 default apps provide links to external services and must be removed from the system.

Check Content

Verify the Skype app has been removed from the system. Open a command prompt as an administrator. Enter "dism /online /Get-ProvisionedAppxPackages". If "DisplayName : Microsoft.SkypeApp" is listed, this is a finding.

Fix Text

Remove the Skype app from the system. Open a command prompt as an administrator. Enter "dism /online /Get-ProvisionedAppxPackages". Make note of the PackageName (e.g., Microsoft.SkypeApp_2013.805.1159.2246_neutral_~_kzf8qxf38zg5c). Enter the following to remove the app package from the system: "dism /online /Remove-ProvisionedAppxPackage /PackageName:packagename", substituting "packagename" noted from the previous step. Uninstall the application from any user profiles provisioned prior to this.

Additional Identifiers

Rule ID: SV-56056r3_rule

Vulnerability ID: V-43303

Group Title: WN08-GE-000054

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.