Enterprise password management

[Kelsay, Mark]

Our environment has grown over the past year and we have many new
usernames and passwords to access our test and development environment.
Not a fan of people having them all written down on scraps of paper
littered around their desks.

 

I am looking for an application that I can deploy that will allow
specific users access to specific lists of usernames and passwords to
get their job done.   Web based with a SQL backend would be best as I
would not like to have to deploy any apps to client machines.

 

I found this through Google:  http://www.enterprise-password-safe.com/

 

It looks pretty good but want to run the idea by the list and see if
anyone else has deployed something similar.

 

 

Thanks,

 

Mark

 

 


** This email is sent for and on behalf of Inspop.com Limited ** 
Authorised and regulated by the Financial Services Authority.  Registration no. 
310635.
Inspop.com Limited [also trading as "Confused.com"] is registered in England 
and Wales at 2nd Floor, Friary House, Greyfriars Road, Cardiff, CF10 3AE [Reg. 
No. 03857130].  Any opinions expressed in this email are those of the 
individual and not necessarily the  company. This email and any files 
transmitted with it, including replies and forwarded copies  [which may contain 
alterations] subsequently transmitted from the Company, are confidential  and 
solely for the use of the intended recipient. It may contain material protected 
by  attorney-client privilege. If you are not the intended recipient or the 
person responsible for  delivering to the intended recipient, be advised that 
you have received this email in error  and that any use is strictly prohibited. 
If you have received this email in error please notify the Information Security 
Officer by  telephone on +44 [0] 29 2043 4372. Please then delete this email 
and destroy any copies of it.   This email has been swept for viruses before 
leaving our system.
Security Warning: Please note that this email has been created in the knowledge 
that Internet  email is not a 100% secure communications medium.  We advise 
that you understand and accept  this lack of security when emailing us.
Viruses: Although we have taken steps to ensure that this email and any 
attachments are free  from any virus, we advise that in keeping with good 
computing practice the recipient should  ensure they are actually virus free.
We may monitor the content of E-mails sent and received via our network for 
viruses or  unauthorised use and for other lawful business purposes.



This e-mail has been scanned for all viruses by Messagelabs. The
service is powered by MessageLabs. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: IPhone 3g

[Eric E Eskam]

"Phillip Partipilo"  wrote on 06/24/2009 04:56:36 PM:

> The ability to carry additional batteries is pretty important 
> to many roadwarriors

Not really.  I picked up one of these at Costco for $30:

http://www.amazon.com/Sanyo-eneloop-Booster-Powered-Devices/dp/B001LWZ4BG

I got two full charges out of it, and it charges my 3G in about 40 
minutes.  Others have reported getting three charges out of it.

It's cheaper then any dedicated cell phone battery I have had to buy in 
the past, and I can use it with any USB powered device (just about 
anything these days) - not just a dedicated battery for my phone.

The other nice thing about the eneloop batteries is they don't discharge 
(for all intents and purposes) when stored - indeed, they come pre-charged 
(so if you are on the road and looking for some emergency power)

I would much rather have a smaller phone that I can stick in my pocket 
without needing a holster then a removable battery.  Even when I'm on 
travel, I typically have a car charger/FM modulator so I can play songs 
off my iPhone or use it as a hands free speakerphone in my rental car. The 
only time I am "stuck" is if I am on a coast to coast flight, and the 
above battery pack works great.

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: IPhone 3g

[Eric E Eskam]

"Rod Trent"  wrote on 06/24/2009 05:32:13 PM:

> Though it does concern me somewhat that the
> world is ga-ga over a phone whose features aren't quite caught 
> up with the rest of the world yet.  It's like rolling out a ball 
> point pen and a spiral ring notebook in a world of keyboards.

See, here is the difference between IT and regular users - the iPhone 
hit's all the area's of features and ease of use that are important to 
users.  That's why the world is "going ga-ga" - you  can actually 
accomplish useful work *without having to be an IT geek*.
 
The features you as an IT manager are concerned about matter not to end 
users :)  Apple will add them - but now except for all but the largest or 
heavily regulated business, the iPhone with OS 3 is "good enough".  As an 
avid Microsoft supporter, the concept of good enough should be more then 
familiar to you, Rod.

How many years were Blackberries out before you didn't have to use the 
Blackberry desktop manager and could configure them wirelessly?  How soon 
we forget...

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: IPhone 3g

[Eric E Eskam]

"Rod Trent"  wrote on 06/24/2009 09:40:53 PM:

> Sync personal phones with corporate data?
> 
> Never thought I?d hear that phrase.

Better get used to it.  The intermingling of corporate and personal assets 
is an accelerating trend.  So is unmanaged IT services - i.e. the recent 
spat of articles talking about companies allowing users to pick their own 
computers, commoditization of IT support/outsourcing, etc.

Not that I think we ever fully achieved it, but the days of thinking you 
are going to have end-to-end managed IT services are over.

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Blogging

[Eric E Eskam]

MarvinC  wrote on 06/25/2009 05:33:42 PM:

> Then all you need is a hosting plan. Simply get with a host 
> provider, GoDaddy, Gator, Blue...

Be sure to check out Squarespace:

http://gadgetopia.com/post/4496

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: IPhone 3g

[Rod Trent]

Can't agree with that at all.  Saying that end-to-end management is a thing of 
the past because of a consumer device just isn't right. End-to-end management 
will still exist, and its actually more important now than ever.  It may throw 
additional complexity into it, and it may force management of devices into the 
private sector (cloud services) - or even into the gov't sector eventually 
(which is growing to be more likely the case), but the goal is still there, and 
getting more achievable every day through advancement in technologies.  What 
folks don't realize is that this goes further into merging personal life and 
business life - chipping even deeper into the work/life balance that was 
promoted heavily in the 90's.



"Rod Trent"  wrote on 06/24/2009 09:40:53 PM:

> Sync personal phones with corporate data.  
>
> Never thought I'd hear that phrase.  

Better get used to it.  The intermingling of corporate and personal assets is 
an accelerating trend.  So is unmanaged IT services - i.e. the recent spat of 
articles talking about companies allowing users to pick their own computers, 
commoditization of IT support/outsourcing, etc.  

Not that I think we ever fully achieved it, but the days of thinking you are 
going to have end-to-end managed IT services are over.  

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar  

 

 

 
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Blogging

[MarvinC]

Maybe it's me just being cheap but I have a problem paying for something
like this SquareSpace which was probably conceived from an Open source
platform. I'd rather donate to the developers of the plugins before paying a
monthly fee.
It does look good though. Nice and clean, like WP.



On Mon, Jul 6, 2009 at 10:02 AM, Eric E Eskam  wrote:

>
> MarvinC  wrote on 06/25/2009 05:33:42 PM:
>
> > Then all you need is a hosting plan. Simply get with a host
> > provider, GoDaddy, Gator, Blue...
>
> Be sure to check out Squarespace:
>
> http://gadgetopia.com/post/4496
>
> Eric Eskam
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> The contents of this message are mine personally and do not reflect any
> position of the U.S. Government
> "The human mind treats a new idea the same way the body treats a strange
> protein; it rejects it."
> -  P. B. Medawar
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT: Filling method guideline

[Eric E Eskam]

Here's a plan to plan for your plan:

http://www.archives.gov/records-mgmt/policy/requirements-guidance.html

:-)

All kidding aside, there is some good information in the NARA site if you 
poke around a little.  Nothing as granular and cut and dry as the OP was 
looking for, but by at least thinking about the processes in the link I 
provided you will answer many of those questions.

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Enterprise password management

[Tom Miller]

Not exactly what you are looking for, but Novell's Identity Manager works on 
many platforms/databases and allows user account provisioning (if desired).  I 
use it to synchronize my AD and eDir accounts.  No client apps required, as it 
is Directory based.  

>>> "Kelsay, Mark"  7/6/2009 4:13 AM >>>

Our environment has grown over the past year and we have many new usernames and 
passwords to access our test and development environment.  Not a fan of people 
having them all written down on scraps of paper littered around their desks.
 
I am looking for an application that I can deploy that will allow specific 
users access to specific lists of usernames and passwords to get their job 
done.   Web based with a SQL backend would be best as I would not like to have 
to deploy any apps to client machines.
 
I found this through Google:  http://www.enterprise-password-safe.com/ 
 
It looks pretty good but want to run the idea by the list and see if anyone 
else has deployed something similar.
 
 
Thanks,
 
Mark
 
 

** This email is sent for and on behalf of Inspop.com Limited ** 
Authorised and regulated by the Financial Services Authority. Registration no. 
310635.
Inspop.com Limited [also trading as "Confused.com"] is registered in England 
and Wales at 2nd Floor, Friary House, Greyfriars Road, Cardiff, CF10 3AE [Reg. 
No. 03857130]. Any opinions expressed in this email are those of the individual 
and not necessarily the company. This email and any files transmitted with it, 
including replies and forwarded copies [which may contain alterations] 
subsequently transmitted from the Company, are confidential and solely for the 
use of the intended recipient. It may contain material protected by 
attorney-client privilege. If you are not the intended recipient or the person 
responsible for delivering to the intended recipient, be advised that you have 
received this email in error and that any use is strictly prohibited. 
If you have received this email in error please notify the Information Security 
Officer by telephone on +44 [0] 29 2043 4372. Please then delete this email and 
destroy any copies of it. This email has been swept for viruses before leaving 
our system.
Security Warning: Please note that this email has been created in the knowledge 
that Internet email is not a 100% secure communications medium. We advise that 
you understand and accept this lack of security when emailing us.
Viruses: Although we have taken steps to ensure that this email and any 
attachments are free from any virus, we advise that in keeping with good 
computing practice the recipient should ensure they are actually virus free.
We may monitor the content of E-mails sent and received via our network for 
viruses or unauthorised use and for other lawful business purposes.
 

This e-mail has been scanned for all viruses by Messagelabs. The
service is powered by MessageLabs. 


 
 

Confidentiality Notice:  This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure, or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Confused a bit re: sbs.

[Eric E Eskam]

"Carl Houseman"  wrote on 06/26/2009 03:51:59 PM:

> That's what SBS does ? it expects to be the boss or it won't be
> happy.  Do your testing on an isolated network.

Don't expect to administer it as a regular Windows Server either - 
otherwise known as "Wizards are your Friend"!

Check out Susan Bradley's blog - lots of good SBS stuff:  
http://msmvps.com/blogs/bradley/default.aspx

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Weird issue with Domain Controllers

[Craig Gauss]

Has anyone experienced any strange issues with Domain Controllers
lately?
 
Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.
 
I have no idea of where to even start looking.
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

R: Weird issue with Domain Controllers

[HELP_PC]

Maybe something related to replication but give more details
 
GuidoElia
HELPPC
 

  _  

Da: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Inviato: lunedì 6 luglio 2009 17.04
A: NT System Admin Issues
Oggetto: Weird issue with Domain Controllers


Has anyone experienced any strange issues with Domain Controllers lately?
 
Friday we had every single one of ours randomly reboot with Stop errors 
throughout the day.  We ended up having to remove one and that seemed to have 
calmed down the issues.  Today it seems to have started up again.
 
I have no idea of where to even start looking.
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association


 


 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Richard Stovall]

What's your AV solution?

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

 

Has anyone experienced any strange issues with Domain Controllers
lately?

 

Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.

 

I have no idea of where to even start looking.

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Craig Gauss]

Kaspersky
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Richard Stovall [mailto:richard.stov...@researchdata.com] 
Sent: Monday, July 06, 2009 10:23 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers



What's your AV solution?

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

 

Has anyone experienced any strange issues with Domain Controllers
lately?

 

Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.

 

I have no idea of where to even start looking.

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

XP Activation issue

[David]

Without thinking very hard, I built out a new non-Dell PC for a managing
partner, but used a Dell reinstall XPSP3 disk.  We have volume licensing for
XP, so the actual authentication key is no problem -- but after all the
installation, activation won't work and the MS system appears to believe the
installation media is not genuine.  So, I can't even get to a person to
explain the issue to get a phone activation.  Is there anything I can do
short of a complete reinstall to fix this?

Thanks,

-- 
David

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: XP Activation issue

[Andy Ognenoff]

You can’t mix and match OEM and VL keys.  To use the VL key, you need to
install using VL media.  I would suggest a reinstall using appropriate media
– since it's against the OEM license to use the Dell disk on any machine
other than the one it was purchased with.

 - Andy O. 

From: David [mailto:blazer...@gmail.com] 
Sent: Monday, July 06, 2009 10:26 AM
To: NT System Admin Issues
Subject: XP Activation issue

Without thinking very hard, I built out a new non-Dell PC for a managing
partner, but used a Dell reinstall XPSP3 disk.  We have volume licensing for
XP, so the actual authentication key is no problem -- but after all the
installation, activation won't work and the MS system appears to believe the
installation media is not genuine.  So, I can't even get to a person to
explain the issue to get a phone activation.  Is there anything I can do
short of a complete reinstall to fix this?

Thanks,

-- 
David
 
 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Maglinger, Paul]

What version is your domain?  What's the stop error?  Are all the
servers the same hardware?  Any recent updates?



From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 10:24 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


Kaspersky
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Richard Stovall [mailto:richard.stov...@researchdata.com] 
Sent: Monday, July 06, 2009 10:23 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers



What's your AV solution?

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

 

Has anyone experienced any strange issues with Domain Controllers
lately?

 

Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.

 

I have no idea of where to even start looking.

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: XP Activation issue

[Peter van Houten]

Try this:

http://www.microsoft.com/genuine/selfhelp/XPPkuinst.aspx?displaylang=en&sGuid=8be85dce-e5d8-47fa-9f84-aff1dde2e704

--
Peter van Houten

On the 06/07/2009 17:25, David wrote the following:

Without thinking very hard, I built out a new non-Dell PC for a managing
partner, but used a Dell reinstall XPSP3 disk.  We have volume licensing
for XP, so the actual authentication key is no problem -- but after all
the installation, activation won't work and the MS system appears to
believe the installation media is not genuine.  So, I can't even get to
a person to explain the issue to get a phone activation.  Is there
anything I can do short of a complete reinstall to fix this?

Thanks,

--
David





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: XP Activation issue

[David]

Thank you, I'll try that.


On Mon, Jul 6, 2009 at 8:36 AM, Peter van Houten  wrote:

> Try this:
>
>
> http://www.microsoft.com/genuine/selfhelp/XPPkuinst.aspx?displaylang=en&sGuid=8be85dce-e5d8-47fa-9f84-aff1dde2e704
>
> --
> Peter van Houten
>
> On the 06/07/2009 17:25, David wrote the following:
>
>  Without thinking very hard, I built out a new non-Dell PC for a managing
>> partner, but used a Dell reinstall XPSP3 disk.  We have volume licensing
>> for XP, so the actual authentication key is no problem -- but after all
>> the installation, activation won't work and the MS system appears to
>> believe the installation media is not genuine.  So, I can't even get to
>> a person to explain the issue to get a phone activation.  Is there
>> anything I can do short of a complete reinstall to fix this?
>>
>> Thanks,
>>
>> --
>> David
>>
>>
>>
>>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>



-- 
David

_


I have a photographic memory.  It's just that some of
the film is out of date, and some is double-exposed.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Brian Desmond]

Let's start with a copy of the memory dump. Zip it up and I'll look.

Thanks,
Brian Desmond
br...@briandesmond.com

c - 312.731.3132

Active Directory, 4th Ed - http://www.briandesmond.com/ad4/
Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian

From: Craig Gauss [mailto:gau...@rhahealthcare.org]
Sent: Monday, July 06, 2009 10:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

Has anyone experienced any strange issues with Domain Controllers lately?

Friday we had every single one of ours randomly reboot with Stop errors 
throughout the day.  We ended up having to remove one and that seemed to have 
calmed down the issues.  Today it seems to have started up again.

I have no idea of where to even start looking.


Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Craig Gauss]

Windows Server 2003
 
The stop errors were all similar to this: 0x0007f (0x8,
0xf7727fe0, 0x, 0x).  Nothing really helpful.
 
Servers are a mix of HP DL 140s and DL 380s.
 
No recent updates
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Monday, July 06, 2009 10:31 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


What version is your domain?  What's the stop error?  Are all the
servers the same hardware?  Any recent updates?



From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 10:24 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


Kaspersky
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Richard Stovall [mailto:richard.stov...@researchdata.com] 
Sent: Monday, July 06, 2009 10:23 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers



What's your AV solution?

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

 

Has anyone experienced any strange issues with Domain Controllers
lately?

 

Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.

 

I have no idea of where to even start looking.

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Erik Goldoff]

2003 server ?  Do you have server service, workstation service, netlogon
service errors in the event log ?
 

Erik Goldoff


IT  Consultant

Systems, Networks, & Security 

 

  _  

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers


Has anyone experienced any strange issues with Domain Controllers lately?
 
Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.
 
I have no idea of where to even start looking.
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association


 


 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Maglinger, Paul]

A quick Google came up with this
 
http://forum.kaspersky.com/lofiversion/index.php/t15088.html
 
Old post, but the mention of Kaspersky caught my eye.  Are you sure
there wasn't an update to the AV?



From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 10:49 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


Windows Server 2003
 
The stop errors were all similar to this: 0x0007f (0x8,
0xf7727fe0, 0x, 0x).  Nothing really helpful.
 
Servers are a mix of HP DL 140s and DL 380s.
 
No recent updates
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Monday, July 06, 2009 10:31 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


What version is your domain?  What's the stop error?  Are all the
servers the same hardware?  Any recent updates?



From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 10:24 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


Kaspersky
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Richard Stovall [mailto:richard.stov...@researchdata.com] 
Sent: Monday, July 06, 2009 10:23 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers



What's your AV solution?

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

 

Has anyone experienced any strange issues with Domain Controllers
lately?

 

Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.

 

I have no idea of where to even start looking.

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 

 

 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: XP Activation issue

[Andy Ognenoff]

I don’t think that tool works when you’re trying to use a VL key on an OEM
install, but I could be mistaken.

 - Andy O. 

From: David [mailto:blazer...@gmail.com] 
Sent: Monday, July 06, 2009 10:40 AM
To: NT System Admin Issues
Subject: Re: XP Activation issue

Thank you, I'll try that.

On Mon, Jul 6, 2009 at 8:36 AM, Peter van Houten  wrote:
Try this:

http://www.microsoft.com/genuine/selfhelp/XPPkuinst.aspx?displaylang=en&sGui
d=8be85dce-e5d8-47fa-9f84-aff1dde2e704


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Erik Goldoff]

also, has this server had ms08-067 applied yet ?   ( KB958644 )
 

Erik Goldoff


IT  Consultant

Systems, Networks, & Security 

 

  _  

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers


Has anyone experienced any strange issues with Domain Controllers lately?
 
Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.
 
I have no idea of where to even start looking.
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association


 


 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Vipre monday madness...

[Cameron]

The list is pretty quiet this morning, is everyone else have the same *fun*
I am dealing with machines BSODing.

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Brian Desmond]

  *   0x0008, or Double Fault, indicates that an exception occurs during a 
call to the handler for a prior exception. Typically, the two exceptions are 
handled serially. However, there are several exceptions that cannot be handled 
serially, and in this situation the processor signals a double fault. There are 
two common causes of a double fault:
 *   A kernel stack overflow. This overflow occurs when a guard page is 
hit, and the kernel tries to push a trap frame. Because there is no stack left, 
a stack overflow results, causing the double fault. If you think this overview 
has occurred, use 
!thread
 to determine the stack limits, and then use kb (Display Stack 
Backtrace)
 with a large parameter (for example, kb 100) to display the full stack.
 *   A hardware problem.


Thanks,
Brian Desmond
br...@briandesmond.com

c - 312.731.3132

From: Craig Gauss [mailto:gau...@rhahealthcare.org]
Sent: Monday, July 06, 2009 10:49 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers

Windows Server 2003

The stop errors were all similar to this: 0x0007f (0x8, 0xf7727fe0, 
0x, 0x).  Nothing really helpful.

Servers are a mix of HP DL 140s and DL 380s.

No recent updates


Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572



From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
Sent: Monday, July 06, 2009 10:31 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers
What version is your domain?  What's the stop error?  Are all the servers the 
same hardware?  Any recent updates?


From: Craig Gauss [mailto:gau...@rhahealthcare.org]
Sent: Monday, July 06, 2009 10:24 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers
Kaspersky


Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572



From: Richard Stovall [mailto:richard.stov...@researchdata.com]
Sent: Monday, July 06, 2009 10:23 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers
What's your AV solution?
From: Craig Gauss [mailto:gau...@rhahealthcare.org]
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

Has anyone experienced any strange issues with Domain Controllers lately?

Friday we had every single one of ours randomly reboot with Stop errors 
throughout the day.  We ended up having to remove one and that seemed to have 
calmed down the issues.  Today it seems to have started up again.

I have no idea of where to even start looking.


Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association





















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[David Mazzaccaro]

No BSOD for me... BUTspeaking of Vipre, new this morning I have ALL
my HP laptops reporting this:
-

Threat: ProtectionSystem

Category: Rogue Security Program

Severity: High Risk

Action: Report Only

Traces Found:

File: C:\WINDOWS\system32\accelerometercp.CPL

File: C:\WINDOWS\system32\accelerometerdll.DLL

File: C:\WINDOWS\system32\drivers\Accelerometer.sys

File: C:\WINDOWS\system32\drivers\hpdskflt.sys

 

-

 

 

 




From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Monday, July 06, 2009 12:02 PM
To: NT System Admin Issues
Subject: Vipre monday madness...



The list is pretty quiet this morning, is everyone else have the same
*fun* I am dealing with machines BSODing.

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Vipre monday madness...

[Sherry Abercrombie]

You might want to post this question on the Vipre discussion forum rather
than the NTSysadmin list.

On Mon, Jul 6, 2009 at 11:02 AM, Cameron  wrote:

>  The list is pretty quiet this morning, is everyone else have the same **
> fun** I am dealing with machines BSODing.
>
>
>
>
>
>
>
>
>
>
>
>


-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic."
Arthur C. Clarke

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Maglinger, Paul]

Pretty typical Monday for me (*tap tap tap* knock on wood).
I had a SCSI card fail on me yesterday afternoon though.  Does that
count?



From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Monday, July 06, 2009 11:02 AM
To: NT System Admin Issues
Subject: Vipre monday madness...



The list is pretty quiet this morning, is everyone else have the same
*fun* I am dealing with machines BSODing.

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Vipre monday madness...

[Eric Wittersheim]

No problems here with Vipre.

On Mon, Jul 6, 2009 at 11:09 AM, Sherry Abercrombie wrote:

> You might want to post this question on the Vipre discussion forum rather
> than the NTSysadmin list.
>
>
> On Mon, Jul 6, 2009 at 11:02 AM, Cameron  wrote:
>
>>  The list is pretty quiet this morning, is everyone else have the same **
>> fun** I am dealing with machines BSODing.
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Andy Ognenoff]

Oh ya...unacceptable.

Just glad I didn’t switch my main network to Vipre yet since we run
ThinkPads exclusively.  Just a few here and there got hit.  Have you come up
with a good procedure for recovery if you can’t boot into safe mode?

- Andy O. 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Monday, July 06, 2009 11:02 AM
To: NT System Admin Issues
Subject: Vipre monday madness...

The list is pretty quiet this morning, is everyone else have the same *fun*
I am dealing with machines BSODing.



 
 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Weird issue with Domain Controllers

[Craig Gauss]

I am guessing there probably was.  Kaspersky is sort of what I was
thinking it might be.  The stop error sure looks close.
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Monday, July 06, 2009 11:02 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


A quick Google came up with this
 
http://forum.kaspersky.com/lofiversion/index.php/t15088.html
 
Old post, but the mention of Kaspersky caught my eye.  Are you sure
there wasn't an update to the AV?



From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 10:49 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


Windows Server 2003
 
The stop errors were all similar to this: 0x0007f (0x8,
0xf7727fe0, 0x, 0x).  Nothing really helpful.
 
Servers are a mix of HP DL 140s and DL 380s.
 
No recent updates
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Monday, July 06, 2009 10:31 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


What version is your domain?  What's the stop error?  Are all the
servers the same hardware?  Any recent updates?



From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 10:24 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers


Kaspersky
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: Richard Stovall [mailto:richard.stov...@researchdata.com] 
Sent: Monday, July 06, 2009 10:23 AM
To: NT System Admin Issues
Subject: RE: Weird issue with Domain Controllers



What's your AV solution?

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Monday, July 06, 2009 11:04 AM
To: NT System Admin Issues
Subject: Weird issue with Domain Controllers

 

Has anyone experienced any strange issues with Domain Controllers
lately?

 

Friday we had every single one of ours randomly reboot with Stop errors
throughout the day.  We ended up having to remove one and that seemed to
have calmed down the issues.  Today it seems to have started up again.

 

I have no idea of where to even start looking.

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 

 

 

 

 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Rod Trent]

What's up with Vipre?



Oh ya...unacceptable.

Just glad I didn’t switch my main network to Vipre yet since we run
ThinkPads exclusively. Just a few here and there got hit. Have you come up
with a good procedure for recovery if you can’t boot into safe mode?

- Andy O. 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Monday, July 06, 2009 11:02 AM
To: NT System Admin Issues
Subject: Vipre monday madness...

The list is pretty quiet this morning, is everyone else have the same *fun*
I am dealing with machines BSODing.

 
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ ~

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Andy Ognenoff]

Won't go into it too much on this list - check the Vipre Forum:
http://supportforums.sunbeltsoftware.com/messageview.aspx?catid=23
 &threadid=772&forumid=2

 

Basically false positives on some critical files, especially ThinkPads.

 

 - Andy O. 



From: Rod Trent [mailto:rodtr...@myitforum.com] 

Sent: Monday, July 06, 2009 11:17 AM

To: NT System Admin Issues

Subject: RE: Vipre monday madness...

 

What's up with Vipre?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Davies,Matt]

6 Lenovo machines all with Vipre, all BSOD, since the update
yesterday.

 

Having to run either a XP or Vista system repair to get them all up and
working again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same
*fun* I am dealing with machines BSODing.

 

 

 

 

 


_
This e-mail (including all attachments) is confidential and may be privileged. 
It is for the exclusive use of the addressee only. If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com . Thank You.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Tom Miller]

Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.  
 
Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>

6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.
 
Having to run either a XP or Vista system repair to get them all up and working 
again.
 
Not the happiest day so far.
 
Matt
 

From:Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...


 
The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.
 
 
 
  




This e-mail (including all attachments) is confidential and may be privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.
 
 
 

Confidentiality Notice:  This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure, or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Rod Trent]

Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on 
their systems.



Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also 
added exclusions for those files.  I think the current defs address the 
issues with the ThinkVantage/Lenovo software.  
 
Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>

6 Lenovo machines all with Vipre, all BSOD, since the update 
yesterday.
 
Having to run either a XP or Vista system repair to get them all up and 
working again.
 
Not the happiest day so far.
 
Matt
 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...
 
The list is pretty quiet this morning, is everyone else have the same *fun* 
I am dealing with machines BSODing.
 
 
 

  



This e-mail (including all attachments) is confidential and may be 
privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase 
all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 

 

  

Confidentiality Notice: This e-mail message, including attachments, is for 
the sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.  

 

 

 
 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Davies,Matt]

Which files are restoring ?

 

 

 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: 06 July 2009 17:30
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

 

Same here.  Use the ThinkVantage restore, then run Vipre updates.  I
also added exclusions for those files.  I think the current defs address
the issues with the ThinkVantage/Lenovo software.  

 

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>

6 Lenovo machines all with Vipre, all BSOD, since the update
yesterday.

 

Having to run either a XP or Vista system repair to get them all up and
working again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same
*fun* I am dealing with machines BSODing.

 

 

 

 

 

 



This e-mail (including all attachments) is confidential and may be
privileged.  
It is for the exclusive use of the addressee only.  If you are not the
addressee, 
you are hereby notified that any dissemination of this communication is
strictly 
prohibited. If you have received this communication in error, please
erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 

 

 

Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Andy Ognenoff]

Active Protection System – the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to
function?  I remember IBM was always bad at putting unnecessary stuff on
their systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

R: Vipre monday madness...

[HELP_PC]

Don't blame IBM for a Sunbelt's mistake
 
GuidoElia
HELPPC
 

  _  

Da: Rod Trent [mailto:rodtr...@myitforum.com] 
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...


Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.


  _  



Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.  
 
Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>


6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

 

Having to run either a XP or Vista system repair to get them all up and working 
again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.

 

 

 

 

 





This e-mail (including all attachments) is confidential and may be privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 


 

 


Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

 


 

 


 


 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[David Mazzaccaro]

I have the same thing happening here on every HP laptop... the HP "drive guard" 
system is being picked up as "High Risk"...

 
 



From: HELP_PC [mailto:g...@enter.it] 
Sent: Monday, July 06, 2009 12:38 PM
To: NT System Admin Issues
Subject: R: Vipre monday madness...


Don't blame IBM for a Sunbelt's mistake
 
GuidoElia
HELPPC
 



Da: Rod Trent [mailto:rodtr...@myitforum.com] 
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...


Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.






Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.  
 
Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>


6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

 

Having to run either a XP or Vista system repair to get them all up and working 
again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.

 

 

 

 

 





This e-mail (including all attachments) is confidential and may be privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 

 

 


Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

 

 

 


 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Tim Evans]

It isn't really *needed* to run, but if it isn't removed properly the laptop 
will blue screen.


...Tim

From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Monday, July 06, 2009 9:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.


Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>
6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

Having to run either a XP or Vista system repair to get them all up and working 
again.

Not the happiest day so far.

Matt

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.











This e-mail (including all attachments) is confidential and may be privileged.
It is for the exclusive use of the addressee only.  If you are not the 
addressee,
you are hereby notified that any dissemination of this communication is strictly
prohibited. If you have received this communication in error, please erase all
copies of the message and its attachments and notify us immediately at
h...@generalatlantic.com.  Thank You.










Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.












~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Tim Evans]

Someone else already mentioned here, but just go into rescue and recovery and 
restore the missing files. There is a list on the Vipre forum.


...Tim

> -Original Message-
> From: Andy Ognenoff [mailto:andyognen...@gmail.com]
> Sent: Monday, July 06, 2009 9:11 AM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Oh ya...unacceptable.
> 
> Just glad I didn't switch my main network to Vipre yet since we run
> ThinkPads exclusively.  Just a few here and there got hit.  Have you
> come up
> with a good procedure for recovery if you can't boot into safe mode?
> 
> - Andy O.
> 
> From: Cameron [mailto:cameron.orl...@gmail.com]
> Sent: Monday, July 06, 2009 11:02 AM
> To: NT System Admin Issues
> Subject: Vipre monday madness...
> 
> The list is pretty quiet this morning, is everyone else have the same
> *fun*
> I am dealing with machines BSODing.
> 
> 
> 
> 
> 
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[RichardMcClary]

More to the point (LONG thread on the forum!), it will BSOD if removed 
improperly.  Support is scrambling to get folks recovered...
--
Richard D. McClary
Systems Administrator, Information Technology Group
 
ASPCA®
1717 S. Philo Rd, Ste 36
Urbana, IL  61802
 
richardmccl...@aspca.org
 
P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org
 
The information contained in this e-mail, and any attachments hereto, is 
from The American Society for the Prevention of Cruelty to Animals® (ASPCA
®) and is intended only for use by the addressee(s) named herein and may 
contain legally privileged and/or confidential information. If you are not 
the intended recipient of this e-mail, you are hereby notified that any 
dissemination, distribution, copying or use of the contents of this 
e-mail, and any attachments hereto, is strictly prohibited. If you have 
received this e-mail in error, please immediately notify me by reply email 
and permanently delete the original and any copy of this e-mail and any 
printout thereof.
 

Tim Evans  wrote on 07/06/2009 12:03:04 PM:

> It isn?t really *needed* to run, but if it isn?t removed properly 
> the laptop will blue screen.
> 
> 
> ?Tim
> 
> From: Rod Trent [mailto:rodtr...@myitforum.com] 
> Sent: Monday, July 06, 2009 9:34 AM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Is the software that is being flagged really needed for the Lenovo's
> to function?  I remember IBM was always bad at putting unnecessary 
> stuff on their systems.
> 
> 
> Same here.  Use the ThinkVantage restore, then run Vipre updates.  I
> also added exclusions for those files.  I think the current defs 
> address the issues with the ThinkVantage/Lenovo software. 
> 
> Tom
> 
> >>> "Davies,Matt"  7/6/2009 12:24 PM >>>
> 6 Lenovo machines all with Vipre, all BSOD, since the update 
yesterday.
> 
> Having to run either a XP or Vista system repair to get them all up 
> and working again.
> 
> Not the happiest day so far.
> 
> Matt
> 
> From: Cameron [mailto:cameron.orl...@gmail.com] 
> Sent: 06 July 2009 17:02
> To: NT System Admin Issues
> Subject: Vipre monday madness...
> 
> The list is pretty quiet this morning, is everyone else have the same 
*fun
> * I am dealing with machines BSODing.
> 
> 
> 
> 
> 
> 
> 
> This e-mail (including all attachments) is confidential and may be 
> privileged. 
> It is for the exclusive use of the addressee only.  If you are not 
> the addressee, 
> you are hereby notified that any dissemination of this communication
> is strictly 
> prohibited. If you have received this communication in error, 
pleaseerase all 
> copies of the message and its attachments and notify us immediately at 
> h...@generalatlantic.com.  Thank You.
> 
> 
> 
> 
> 
> Confidentiality Notice: This e-mail message, including attachments, 
> is for the sole use of the intended recipient(s) and may contain 
> confidential and privileged information. Any unauthorized review, 
> use, disclosure, or distribution is prohibited. If you are not the 
> intended recipient, please contact the sender by reply e-mail and 
> destroy all copies of the original message. 
> 
> 
> 
> 
> 
> 
> 
> 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Tim Evans]

For me, support didn't do anything but say they were sorry.

...Tim

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]
Sent: Monday, July 06, 2009 10:05 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...


More to the point (LONG thread on the forum!), it will BSOD if removed 
improperly.  Support is scrambling to get folks recovered...
--
Richard D. McClary
Systems Administrator, Information Technology Group

ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL  61802

richardmccl...@aspca.org

P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


Tim Evans  wrote on 07/06/2009 12:03:04 PM:

> It isn't really *needed* to run, but if it isn't removed properly
> the laptop will blue screen.
>
>
> ...Tim
>
> From: Rod Trent [mailto:rodtr...@myitforum.com]
> Sent: Monday, July 06, 2009 9:34 AM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
>
> Is the software that is being flagged really needed for the Lenovo's
> to function?  I remember IBM was always bad at putting unnecessary
> stuff on their systems.
>
>
> Same here.  Use the ThinkVantage restore, then run Vipre updates.  I
> also added exclusions for those files.  I think the current defs
> address the issues with the ThinkVantage/Lenovo software.
>
> Tom
>
> >>> "Davies,Matt"  7/6/2009 12:24 PM >>>
> 6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.
>
> Having to run either a XP or Vista system repair to get them all up
> and working again.
>
> Not the happiest day so far.
>
> Matt
>
> From: Cameron [mailto:cameron.orl...@gmail.com]
> Sent: 06 July 2009 17:02
> To: NT System Admin Issues
> Subject: Vipre monday madness...
>
> The list is pretty quiet this morning, is everyone else have the same *fun
> * I am dealing with machines BSODing.
>
>
>
>
>
>
> 
> This e-mail (including all attachments) is confidential and may be
> privileged.
> It is for the exclusive use of the addressee only.  If you are not
> the addressee,
> you are hereby notified that any dissemination of this communication
> is strictly
> prohibited. If you have received this communication in error, pleaseerase all
> copies of the message and its attachments and notify us immediately at
> h...@generalatlantic.com.  Thank You.
>
>
>
>
>
> Confidentiality Notice: This e-mail message, including attachments,
> is for the sole use of the intended recipient(s) and may contain
> confidential and privileged information. Any unauthorized review,
> use, disclosure, or distribution is prohibited. If you are not the
> intended recipient, please contact the sender by reply e-mail and
> destroy all copies of the original message.
>
>
>
>
>
>
>
>





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[David Lum]

+1

I'm a Sunbelt fan, but yeah...ouch.  Reading the forums, I'd hate to have to 
try and recover a remote user who doesn't have the IBM disks...
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

From: HELP_PC [mailto:g...@enter.it]
Sent: Monday, July 06, 2009 9:38 AM
To: NT System Admin Issues
Subject: R: Vipre monday madness...

Don't blame IBM for a Sunbelt's mistake

GuidoElia
HELPPC



Da: Rod Trent [mailto:rodtr...@myitforum.com]
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...
Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.


Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>
6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

Having to run either a XP or Vista system repair to get them all up and working 
again.

Not the happiest day so far.

Matt

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.











This e-mail (including all attachments) is confidential and may be privileged.
It is for the exclusive use of the addressee only.  If you are not the 
addressee,
you are hereby notified that any dissemination of this communication is strictly
prohibited. If you have received this communication in error, please erase all
copies of the message and its attachments and notify us immediately at
h...@generalatlantic.com.  Thank You.










Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.
















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Greg Olson]

150 laptops down here this am.
I think we're down to only about 15 now (Of course there remote users).

Never ever thought I'd long to get Symantec back, but it seems every def update 
seems to cause some issue. I really want to like Vipre too.


From: David Lum [mailto:david@nwea.org]
Sent: Monday, July 06, 2009 10:30 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

+1

I'm a Sunbelt fan, but yeah...ouch.  Reading the forums, I'd hate to have to 
try and recover a remote user who doesn't have the IBM disks...
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

From: HELP_PC [mailto:g...@enter.it]
Sent: Monday, July 06, 2009 9:38 AM
To: NT System Admin Issues
Subject: R: Vipre monday madness...

Don't blame IBM for a Sunbelt's mistake

GuidoElia
HELPPC



Da: Rod Trent [mailto:rodtr...@myitforum.com]
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...
Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.


Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>
6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

Having to run either a XP or Vista system repair to get them all up and working 
again.

Not the happiest day so far.

Matt

From: Cameron [mailto:cameron.orl...@gmail.com]
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.











This e-mail (including all attachments) is confidential and may be privileged.
It is for the exclusive use of the addressee only.  If you are not the 
addressee,
you are hereby notified that any dissemination of this communication is strictly
prohibited. If you have received this communication in error, please erase all
copies of the message and its attachments and notify us immediately at
h...@generalatlantic.com.  Thank You.










Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.




















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Tiered Storage Solutions for the little guy?

[Eric E Eskam]

"Richard Stovall"  wrote on 07/02/2009 
11:50:55 AM:

> Anyone have any thoughts about or experiences with tiered storage
> solutions for smaller shops (<100 users and <5 TB of storage on file
> servers)?

I've been anxiously waiting to see some performance numbers for a Drobo 
Pro  connected to a Windows Server via iSCSI - I think it would be ideal 
for this kind of environment.

Eric Eskam
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The contents of this message are mine personally and do not reflect any 
position of the U.S. Government
"The human mind treats a new idea the same way the body treats a strange 
protein; it rejects it."
-  P. B. Medawar
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[David Mazzaccaro]

+1
We may revisit Symantec after SEP11 is history...  
On a side note... I mean seriously... Who is the moron that came up with that 
name "SEP11"?  
And how did it get the stamp of approval???
 
 



From: Greg Olson [mailto:gol...@markettools.com] 
Sent: Monday, July 06, 2009 2:01 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...



150 laptops down here this am. 

I think we're down to only about 15 now (Of course there remote users). 

 

Never ever thought I'd long to get Symantec back, but it seems every def update 
seems to cause some issue. I really want to like Vipre too.  

 

 

From: David Lum [mailto:david@nwea.org] 
Sent: Monday, July 06, 2009 10:30 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

 

+1 

 

I'm a Sunbelt fan, but yeah...ouch.  Reading the forums, I'd hate to have to 
try and recover a remote user who doesn't have the IBM disks...

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

From: HELP_PC [mailto:g...@enter.it] 
Sent: Monday, July 06, 2009 9:38 AM
To: NT System Admin Issues
Subject: R: Vipre monday madness...

 

Don't blame IBM for a Sunbelt's mistake

 

GuidoElia

HELPPC

 

 



Da: Rod Trent [mailto:rodtr...@myitforum.com] 
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.



 

Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.  

 

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>

6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

 

Having to run either a XP or Vista system repair to get them all up and working 
again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.

 

 

 

 

 

 



This e-mail (including all attachments) is confidential and may be privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 

 

 

 

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

 

 

 

 

 

 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

The install that wouldn't stop

[Tom Miller]

Hi Folks,
 
I have some sort of run away install/uninstall on one of my user's PCs for 
AdminStudio.  It keeps asking for the install media, which I don't have.  I 
select cancel, it "undoes" whatever, then starts the whole process again.
 
I don't see anywhere in the registry or Start menu that keeps kicking this 
thing off on boot.  Suggestions?  
 
Thanks,
 
 
 
Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528 
Confidentiality Notice:  This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure, or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Poll: Internal temperature of UPS?

[David Mazzaccaro]

Wondering what others typically see their UPS equipment running an
internal temp at?
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
is???




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: R: Vipre monday madness...

[Jonathan Link]

Yeah, Norton/Symantec never gets a false positive, and has never blue
screend a PC.

On Mon, Jul 6, 2009 at 12:37 PM, HELP_PC  wrote:

>  Don't blame IBM for a Sunbelt's mistake
>
> *GuidoElia*
> *HELPPC*
>
>
>  --
> *Da:* Rod Trent [mailto:rodtr...@myitforum.com]
> *Inviato:* lunedì 6 luglio 2009 18.34
> *A:* NT System Admin Issues
> *Oggetto:* RE: Vipre monday madness...
>
> Is the software that is being flagged really needed for the Lenovo's to
> function?  I remember IBM was always bad at putting unnecessary stuff on
> their systems.
>
> --
>
>
> Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also
> added exclusions for those files.  I think the current defs address the
> issues with the ThinkVantage/Lenovo software.
>
> Tom
>
> >>> "Davies,Matt"  7/6/2009 12:24 PM >>>
>
> 6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.
>
>
>
> Having to run either a XP or Vista system repair to get them all up and
> working again.
>
>
>
> Not the happiest day so far.
>
>
>
> Matt
>
>
>
> *From:* Cameron [mailto:cameron.orl...@gmail.com]
> *Sent:* 06 July 2009 17:02
> *To:* NT System Admin Issues
> *Subject:* Vipre monday madness...
>
>
>
> The list is pretty quiet this morning, is everyone else have the same **
> fun** I am dealing with machines BSODing.
>
>
>
>
>
>
>
>
>
>
>
>
>
> 
>
> This e-mail (including all attachments) is confidential and may be
> privileged.
> It is for the exclusive use of the addressee only.  If you are not the
> addressee,
> you are hereby notified that any dissemination of this communication is
> strictly
> prohibited. If you have received this communication in error, please erase
> all
> copies of the message and its attachments and notify us immediately at
> h...@generalatlantic.com.  Thank You.
>
>
>
>
>
>
>
>
>
>
> Confidentiality Notice: This e-mail message, including attachments, is for
> the sole use of the intended recipient(s) and may contain confidential and
> privileged information. Any unauthorized review, use, disclosure, or
> distribution is prohibited. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: The install that wouldn't stop

[David Mazzaccaro]

Try the Windows Installer Cleanup Utility?
http://support.microsoft.com/kb/290301
 
Or Windows System Recovery and go back to a time before the install?
 
Or run msconfig and look at "startup" tab... start unchecking stuff in
there.
 



From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Monday, July 06, 2009 2:25 PM
To: NT System Admin Issues
Subject: The install that wouldn't stop


Hi Folks,
 
I have some sort of run away install/uninstall on one of my user's PCs
for AdminStudio.  It keeps asking for the install media, which I don't
have.  I select cancel, it "undoes" whatever, then starts the whole
process again.
 
I don't see anywhere in the registry or Start menu that keeps kicking
this thing off on boot.  Suggestions?  
 
Thanks,
 
 
 
Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528 


Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Vipre monday madness...

[Jon Harris]

Amen!

Jon

On Mon, Jul 6, 2009 at 2:26 PM, Rod Trent  wrote:

>  It’s never bad enough to revisit Symantec!
>
>
>
> *From:* David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com]
> *Sent:* Monday, July 06, 2009 2:21 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: Vipre monday madness...
>
>
>
> +1
>
> We may revisit Symantec after SEP11 is history...
>
> On a side note... I mean seriously... Who is the moron that came up with
> that name "SEP11"?
>
> And how did it get the stamp of approval???
>
>
>
>
>
>
>  --
>
> *From:* Greg Olson [mailto:gol...@markettools.com]
> *Sent:* Monday, July 06, 2009 2:01 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Vipre monday madness...
>
> 150 laptops down here this am.
>
> I think we’re down to only about 15 now (Of course there remote users).
>
>
>
> Never ever thought I’d long to get Symantec back, but it seems every def
> update seems to cause some issue. I really want to like Vipre too.
>
>
>
>
>
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Monday, July 06, 2009 10:30 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Vipre monday madness...
>
>
>
> +1
>
>
>
> I’m a Sunbelt fan, but yeah…ouch.  Reading the forums, I’d hate to have to
> try and recover a remote user who doesn’t have the IBM disks…
>
> *David Lum** **// *SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 *// *(Cell) 503.267.9764
>
>
>
> *From:* HELP_PC [mailto:g...@enter.it]
> *Sent:* Monday, July 06, 2009 9:38 AM
> *To:* NT System Admin Issues
> *Subject:* R: Vipre monday madness...
>
>
>
> Don't blame IBM for a Sunbelt's mistake
>
>
>
> *GuidoElia*
>
> *HELPPC*
>
>
>
>
>  --
>
> *Da:* Rod Trent [mailto:rodtr...@myitforum.com]
> *Inviato:* lunedì 6 luglio 2009 18.34
> *A:* NT System Admin Issues
> *Oggetto:* RE: Vipre monday madness...
>
> Is the software that is being flagged really needed for the Lenovo's to
> function?  I remember IBM was always bad at putting unnecessary stuff on
> their systems.
>  --
>
>
>
> Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also
> added exclusions for those files.  I think the current defs address the
> issues with the ThinkVantage/Lenovo software.
>
>
>
> Tom
>
> >>> "Davies,Matt"  7/6/2009 12:24 PM >>>
>
> 6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.
>
>
>
> Having to run either a XP or Vista system repair to get them all up and
> working again.
>
>
>
> Not the happiest day so far.
>
>
>
> Matt
>
>
>
> *From:* Cameron [mailto:cameron.orl...@gmail.com]
> *Sent:* 06 July 2009 17:02
> *To:* NT System Admin Issues
> *Subject:* Vipre monday madness...
>
>
>
> The list is pretty quiet this morning, is everyone else have the same **
> fun** I am dealing with machines BSODing.
>
>
>
>
>
>
>
>
>
>
>
>
>
> 
>
> This e-mail (including all attachments) is confidential and may be
> privileged.
> It is for the exclusive use of the addressee only.  If you are not the
> addressee,
> you are hereby notified that any dissemination of this communication is
> strictly
> prohibited. If you have received this communication in error, please erase
> all
> copies of the message and its attachments and notify us immediately at
> h...@generalatlantic.com.  Thank You.
>
>
>
>
>
>
>
>
>
>
>
> Confidentiality Notice: This e-mail message, including attachments, is for
> the sole use of the intended recipient(s) and may contain confidential and
> privileged information. Any unauthorized review, use, disclosure, or
> distribution is prohibited. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Vipre monday madness...

[Len Hammond]

+1or revisit McAfee!!


Len Hammond
CSI:Hartland
lenhamm...@gmail.com


On Mon, Jul 6, 2009 at 2:26 PM, Rod Trent  wrote:

>  It’s never bad enough to revisit Symantec!
>
>
>
> *From:* David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com]
> *Sent:* Monday, July 06, 2009 2:21 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: Vipre monday madness...
>
>
>
> +1
>
> We may revisit Symantec after SEP11 is history...
>
> On a side note... I mean seriously... Who is the moron that came up with
> that name "SEP11"?
>
> And how did it get the stamp of approval???
>
>
>
>
>
>
>  --
>
> *From:* Greg Olson [mailto:gol...@markettools.com]
> *Sent:* Monday, July 06, 2009 2:01 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Vipre monday madness...
>
> 150 laptops down here this am.
>
> I think we’re down to only about 15 now (Of course there remote users).
>
>
>
> Never ever thought I’d long to get Symantec back, but it seems every def
> update seems to cause some issue. I really want to like Vipre too.
>
>
>
>
>
> *From:* David Lum [mailto:david@nwea.org]
> *Sent:* Monday, July 06, 2009 10:30 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Vipre monday madness...
>
>
>
> +1
>
>
>
> I’m a Sunbelt fan, but yeah…ouch.  Reading the forums, I’d hate to have to
> try and recover a remote user who doesn’t have the IBM disks…
>
> *David Lum** **// *SYSTEMS ENGINEER
> NORTHWEST EVALUATION ASSOCIATION
> (Desk) 971.222.1025 *// *(Cell) 503.267.9764
>
>
>
> *From:* HELP_PC [mailto:g...@enter.it]
> *Sent:* Monday, July 06, 2009 9:38 AM
> *To:* NT System Admin Issues
> *Subject:* R: Vipre monday madness...
>
>
>
> Don't blame IBM for a Sunbelt's mistake
>
>
>
> *GuidoElia*
>
> *HELPPC*
>
>
>
>
>  --
>
> *Da:* Rod Trent [mailto:rodtr...@myitforum.com]
> *Inviato:* lunedì 6 luglio 2009 18.34
> *A:* NT System Admin Issues
> *Oggetto:* RE: Vipre monday madness...
>
> Is the software that is being flagged really needed for the Lenovo's to
> function?  I remember IBM was always bad at putting unnecessary stuff on
> their systems.
>  --
>
>
>
> Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also
> added exclusions for those files.  I think the current defs address the
> issues with the ThinkVantage/Lenovo software.
>
>
>
> Tom
>
> >>> "Davies,Matt"  7/6/2009 12:24 PM >>>
>
> 6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.
>
>
>
> Having to run either a XP or Vista system repair to get them all up and
> working again.
>
>
>
> Not the happiest day so far.
>
>
>
> Matt
>
>
>
> *From:* Cameron [mailto:cameron.orl...@gmail.com]
> *Sent:* 06 July 2009 17:02
> *To:* NT System Admin Issues
> *Subject:* Vipre monday madness...
>
>
>
> The list is pretty quiet this morning, is everyone else have the same **
> fun** I am dealing with machines BSODing.
>
>
>
>
>
>
>
>
>
>
>
>
>
> 
>
> This e-mail (including all attachments) is confidential and may be
> privileged.
> It is for the exclusive use of the addressee only.  If you are not the
> addressee,
> you are hereby notified that any dissemination of this communication is
> strictly
> prohibited. If you have received this communication in error, please erase
> all
> copies of the message and its attachments and notify us immediately at
> h...@generalatlantic.com.  Thank You.
>
>
>
>
>
>
>
>
>
>
>
> Confidentiality Notice: This e-mail message, including attachments, is for
> the sole use of the intended recipient(s) and may contain confidential and
> privileged information. Any unauthorized review, use, disclosure, or
> distribution is prohibited. If you are not the intended recipient, please
> contact the sender by reply e-mail and destroy all copies of the original
> message.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: The install that wouldn't stop

[Joe Tinney]

I recently ran into this problem (not with this product, but a different
one) and I used Process Explorer to determine its parent process. In
this case it happened to be HP's "awesome" Printer/Scanner/Copier
software that someone didn't complete the installation of. Removing the
installed software that was causing this to launch fixed the problem.
You can access Sysinternals Process Explorer by pasting
'http://live.sysinternals.com/procexp.exe' (no quotes) into your Run
dialog. It is about 4 megs to download and run. You can use the Target
icon   (click on the target and drag it onto the window) and it will
highlight the process running that window in the listing of processes
that are running on your system. To view the details of that process
once it is highlighted you can either double-click it or go to Process >
Properties (helpful if the process is bouncing around on the List view).

Viewing the processes in Tree view (View > Show Process Tree) will show
the parent/child process relationship to help you investigate further.

Best of luck!

 

From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Monday, July 06, 2009 2:45 PM
To: NT System Admin Issues
Subject: RE: The install that wouldn't stop

 

Its not a start menu or reg/run issue.
It's a windows installer issue. Check the web, I don't have the link
handy but the fix is related the service.

jlc

 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Monday, July 06, 2009 12:25 PM
To: NT System Admin Issues
Subject: The install that wouldn't stop

 

Hi Folks,

 

I have some sort of run away install/uninstall on one of my user's PCs
for AdminStudio.  It keeps asking for the install media, which I don't
have.  I select cancel, it "undoes" whatever, then starts the whole
process again.

 

I don't see anywhere in the registry or Start menu that keeps kicking
this thing off on boot.  Suggestions?  

 

Thanks,

 

 

 

Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528 

Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<>

RE: Poll: Internal temperature of UPS?

[Jacob]

APC Silcon 30KVA. Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an internal
temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that is??? 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[David Mazzaccaro]

WOW.
How cold is the ROOM
 



From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:06 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?



APC Silcon 30KVA... Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an
internal temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
is??? 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[Maglinger, Paul]

APC Symmetra 20K - 91.4 F
APC Symmetra 80K - 91.4 F



From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 2:06 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?



APC Silcon 30KVA... Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an
internal temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
is??? 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Vipre monday madness...

[Cameron]

A fix that seems to work (as long as they haven't blue-screened)

 

Get a copy of the following and put them in the System32 directory

TPHDEXLG.exe

TpShCPL.cpl

ThShCPL.DLL

TpShocks.exe

 

Get a copy of the following and put them in the System32\Drivers directory

ApsHM86.sys

Apsx86.sys

 

What I found was that if they had already blue-screened, then an additional
step was needed.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

Delete the key for TPSHOCKS

 

Anyways YMMV but it worked for all the machines I had to touch

 

 

Cheers

Cameron

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: The install that wouldn't stop

[Joseph L. Casale]

Its not a start menu or reg/run issue.
It's a windows installer issue. Check the web, I don't have the link handy but 
the fix is related the service.
jlc

From: Tom Miller [mailto:tmil...@hnncsb.org]
Sent: Monday, July 06, 2009 12:25 PM
To: NT System Admin Issues
Subject: The install that wouldn't stop

Hi Folks,

I have some sort of run away install/uninstall on one of my user's PCs for 
AdminStudio.  It keeps asking for the install media, which I don't have.  I 
select cancel, it "undoes" whatever, then starts the whole process again.

I don't see anywhere in the registry or Start menu that keeps kicking this 
thing off on boot.  Suggestions?

Thanks,



Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[Joseph L. Casale]

I'd say that's getting pretty warm if reliability is a concern:)
I have one that is sitting at 70.7 degrees right now...
jlc

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com]
Sent: Monday, July 06, 2009 12:29 PM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?


Wondering what others typically see their UPS equipment running an internal 
temp at?
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that is???






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Alex Eckelberry]

That's correct -- an FP this morning was detecting certain of the Shock 
Detection files on Thinkpads as malware.  This has been corrected and we are 
doing a major review of our internal processes and procedures.  As with any of 
these types of things, it was a combination of circumstances which led to this 
definition even getting out in the first place. 

I sincerely apologize.  We are not happy this detection was able to get out and 
are committed to not letting it happen again.  


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 
 


-Original Message-
From: Andy Ognenoff [mailto:andyognen...@gmail.com] 
Sent: Monday, July 06, 2009 12:37 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Active Protection System - the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to
function?  I remember IBM was always bad at putting unnecessary stuff on
their systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Alex Eckelberry]

>Never ever thought I'd long to get Symantec back, but it seems every

>def update seems to cause some issue. I really want to like Vipre too.

 

 

Look, I really understand your frustration with this FP, but we publish 
multiple updates every day.  We are dealing with literally millions of 
detections that go out without any issue -- are you saying that every update 
you're getting is causing problems? 

 

Alex

 

 

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com   MSN: 
alex...@hotmail.com   
w: www.sunbeltsoftware.com   b: 
www.sunbeltblog.com  

 

 

 

 

 

 

From: Greg Olson [mailto:gol...@markettools.com] 
Sent: Monday, July 06, 2009 2:01 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

 

150 laptops down here this am. 

I think we're down to only about 15 now (Of course there remote users). 

 

Never ever thought I'd long to get Symantec back, but it seems every def update 
seems to cause some issue. I really want to like Vipre too.  

 

 

From: David Lum [mailto:david@nwea.org] 
Sent: Monday, July 06, 2009 10:30 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

 

+1 

 

I'm a Sunbelt fan, but yeah...ouch.  Reading the forums, I'd hate to have to 
try and recover a remote user who doesn't have the IBM disks...

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

From: HELP_PC [mailto:g...@enter.it] 
Sent: Monday, July 06, 2009 9:38 AM
To: NT System Admin Issues
Subject: R: Vipre monday madness...

 

Don't blame IBM for a Sunbelt's mistake

 

GuidoElia

HELPPC

 

 



Da: Rod Trent [mailto:rodtr...@myitforum.com] 
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.



 

Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.  

 

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>

6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

 

Having to run either a XP or Vista system repair to get them all up and working 
again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.

 

 

 

 

 

 



This e-mail (including all attachments) is confidential and may be privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 

 

 

 

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[David Mazzaccaro]

Wow.  (jealous)
 
 



From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:20 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?



70.

 

But there is an output from the HVAC next to the unit.

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 12:08 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

 

WOW.

How cold is the ROOM

 

 



From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:06 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

APC Silcon 30KVA... Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an
internal temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
is??? 

 

 

 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[David Mazzaccaro]

It should be noted that it is NOT only Thinkpads that are affected.
The "shock/motion detection" on HP's as well as possibly other manufactures is 
affected as well.
 

-Original Message-
From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Monday, July 06, 2009 3:19 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

That's correct -- an FP this morning was detecting certain of the Shock 
Detection files on Thinkpads as malware.  This has been corrected and we are 
doing a major review of our internal processes and procedures.  As with any of 
these types of things, it was a combination of circumstances which led to this 
definition even getting out in the first place. 

I sincerely apologize.  We are not happy this detection was able to get out and 
are committed to not letting it happen again.  


Alex

Alex Eckelberry, CEO
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 
 


-Original Message-
From: Andy Ognenoff [mailto:andyognen...@gmail.com]
Sent: Monday, July 06, 2009 12:37 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Active Protection System - the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[Jacob]

Used to be at 85.. until servers and load balancers crashed.

 

Replacing hard drives, CPUs, and motherboards was costing more than cooling
the room itself.

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 12:28 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

 

Wow.  (jealous)

 

 

 

  _  

From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:20 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

70.

 

But there is an output from the HVAC next to the unit.

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 12:08 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

 

WOW.

How cold is the ROOM

 

 

  _  

From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:06 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

APC Silcon 30KVA. Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an internal
temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that is??? 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[David Mazzaccaro]

 
 
Guess I'm back to normal... for now...
 



From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 3:28 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?


Wow.  (jealous)
 
 



From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:20 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?



70.

 

But there is an output from the HVAC next to the unit.

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 12:08 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

 

WOW.

How cold is the ROOM

 

 



From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:06 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

APC Silcon 30KVA... Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an
internal temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
is??? 

 

 

 

 

 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<>

Re: The install that wouldn't stop

[RichardMcClary]

Windows Installer CleanUp Utility...

http://support.microsoft.com/kb/290301

Tricky to get this installed as the rogue installer MSIEXEC needs to be 
killed long enough to start this installer going.  Check the notes in the 
KB.

"Tom Miller"  wrote on 07/06/2009 01:25:07 PM:

> Hi Folks,
> 
> I have some sort of run away install/uninstall on one of my user's 
> PCs for AdminStudio.  It keeps asking for the install media, which I
> don't have.  I select cancel, it "undoes" whatever, then starts the 
> whole process again.
> 
> I don't see anywhere in the registry or Start menu that keeps 
> kicking this thing off on boot.  Suggestions? 
> 
> Thanks,
> 
> 
> 
> Tom Miller
> Engineer, Information Technology
> Hampton-Newport News Community Services Board
> 757-788-0528 
> Confidentiality Notice: This e-mail message, including attachments, 
> is for the sole use of the intended recipient(s) and may contain 
> confidential and privileged information. Any unauthorized review, 
> use, disclosure, or distribution is prohibited. If you are not the 
> intended recipient, please contact the sender by reply e-mail and 
> destroy all copies of the original message. 
> 
> 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Richard Stovall]

I agree with your sentiments in principle, but the Vipre folks really do need 
to tighten it up or else they will wind up with same bad reputation.

 

From: Len Hammond [mailto:lenhammo...@gmail.com] 
Sent: Monday, July 06, 2009 2:59 PM
To: NT System Admin Issues
Subject: Re: Vipre monday madness...

 

+1or revisit McAfee!!

 


Len Hammond
CSI:Hartland
lenhamm...@gmail.com



On Mon, Jul 6, 2009 at 2:26 PM, Rod Trent  wrote:

It's never bad enough to revisit Symantec!

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 2:21 PM 


To: NT System Admin Issues
Subject: RE: Vipre monday madness...

 

+1

We may revisit Symantec after SEP11 is history...  

On a side note... I mean seriously... Who is the moron that came up with that 
name "SEP11"?  

And how did it get the stamp of approval???

 

 

 



From: Greg Olson [mailto:gol...@markettools.com] 
Sent: Monday, July 06, 2009 2:01 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

150 laptops down here this am. 

I think we're down to only about 15 now (Of course there remote users). 

 

Never ever thought I'd long to get Symantec back, but it seems every def update 
seems to cause some issue. I really want to like Vipre too.  

 

 

From: David Lum [mailto:david@nwea.org] 
Sent: Monday, July 06, 2009 10:30 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

 

+1 

 

I'm a Sunbelt fan, but yeah...ouch.  Reading the forums, I'd hate to have to 
try and recover a remote user who doesn't have the IBM disks...

David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764

 

From: HELP_PC [mailto:g...@enter.it] 
Sent: Monday, July 06, 2009 9:38 AM
To: NT System Admin Issues
Subject: R: Vipre monday madness...

 

Don't blame IBM for a Sunbelt's mistake

 

GuidoElia

HELPPC

 

 



Da: Rod Trent [mailto:rodtr...@myitforum.com] 
Inviato: lunedì 6 luglio 2009 18.34
A: NT System Admin Issues
Oggetto: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to 
function?  I remember IBM was always bad at putting unnecessary stuff on their 
systems.



 

Same here.  Use the ThinkVantage restore, then run Vipre updates.  I also added 
exclusions for those files.  I think the current defs address the issues with 
the ThinkVantage/Lenovo software.  

 

Tom

>>> "Davies,Matt"  7/6/2009 12:24 PM >>>

6 Lenovo machines all with Vipre, all BSOD, since the update yesterday.

 

Having to run either a XP or Vista system repair to get them all up and working 
again.

 

Not the happiest day so far.

 

Matt

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: 06 July 2009 17:02
To: NT System Admin Issues
Subject: Vipre monday madness...

 

The list is pretty quiet this morning, is everyone else have the same *fun* I 
am dealing with machines BSODing.

 

 

 

 

 

 



This e-mail (including all attachments) is confidential and may be privileged.  
It is for the exclusive use of the addressee only.  If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com.  Thank You.

 

 

 

 

 

Confidentiality Notice: This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information. Any unauthorized review, use, disclosure, or 
distribution is prohibited. If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message. 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Tim Evans]

With all due respect, we've heard that before. I recognize that you have a 
tough job to do and that FP's will happen. What I have a problem with is that 
there are no provisions to help recover from a situation like this. Once the 
user has rebooted, the files can not be recovered from quarantine at all. We 
need a way to get those files back out of quarantine. How about a utility I can 
run from a WinPE CD or some kind of LiveCD we can run. Ideally, it should be 
able to be done remotely, although I understand that would be difficult with a 
system that won't boot.

.Tim


> -Original Message-
> From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
> Sent: Monday, July 06, 2009 12:19 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> That's correct -- an FP this morning was detecting certain of the Shock
> Detection files on Thinkpads as malware.  This has been corrected and we
> are doing a major review of our internal processes and procedures.  As
> with any of these types of things, it was a combination of circumstances
> which led to this definition even getting out in the first place.
> 
> I sincerely apologize.  We are not happy this detection was able to get
> out and are committed to not letting it happen again.
> 
> 
> Alex
> 
> Alex Eckelberry, CEO
> Sunbelt Software
> 33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
> e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com
> w: www.sunbeltsoftware.com b: www.sunbeltblog.com
> 
> 
> 
> 
> -Original Message-
> From: Andy Ognenoff [mailto:andyognen...@gmail.com]
> Sent: Monday, July 06, 2009 12:37 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Active Protection System - the shock detection stuff.
> 
>  - Andy O.
> 
> From: Rod Trent [mailto:rodtr...@myitforum.com]
> Sent: Monday, July 06, 2009 11:34 AM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Is the software that is being flagged really needed for the Lenovo's to
> function?  I remember IBM was always bad at putting unnecessary stuff on
> their systems.
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[Jacob]

70.

 

But there is an output from the HVAC next to the unit.

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 12:08 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

 

WOW.

How cold is the ROOM

 

 

  _  

From: Jacob [mailto:ja...@excaliburfilms.com] 
Sent: Monday, July 06, 2009 3:06 PM
To: NT System Admin Issues
Subject: RE: Poll: Internal temperature of UPS?

APC Silcon 30KVA. Battery temp at 66 F 

 

From: David Mazzaccaro [mailto:david.mazzacc...@hudsonhhc.com] 
Sent: Monday, July 06, 2009 11:29 AM
To: NT System Admin Issues
Subject: Poll: Internal temperature of UPS?

 

Wondering what others typically see their UPS equipment running an internal
temp at? 
My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that is??? 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

New IE zero day exploit in the wild

[Alex Eckelberry]

Our labs have confirmed this and it is quite nasty.  Best bet for now is
to set the killbits. Or don't use IE. 

 

Some references:

 

Microsoft: 

 

http://www.microsoft.com/technet/security/advisory/972890.mspx

 

SANS: 

 

http://isc.sans.org/diary.html?storyid=6733

 

I would take this one quite seriously.  

 

Alex

 

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com   MSN:
alex...@hotmail.com   
w: www.sunbeltsoftware.com   b:
www.sunbeltblog.com  

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Gene Giannamore]

Suggestion: create a bootable CD to allow admins to restore quarantined files, 
and/or a BartPE plugin to do the same. Just in case this were to happen again 
(no one can guarantee the future).




Gene Giannamore
Abide International Inc.
Technical Support
561 1st Street West
Sonoma,Ca.95476
(707) 935-1577Office
(707) 935-9387Fax
(707) 766-4185Cell
gene.giannam...@abideinternational.com
www.abideinternational.com



-Original Message-
From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Monday, July 06, 2009 12:19 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

That's correct -- an FP this morning was detecting certain of the Shock 
Detection files on Thinkpads as malware.  This has been corrected and we are 
doing a major review of our internal processes and procedures.  As with any of 
these types of things, it was a combination of circumstances which led to this 
definition even getting out in the first place. 

I sincerely apologize.  We are not happy this detection was able to get out and 
are committed to not letting it happen again.  


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 
 


-Original Message-
From: Andy Ognenoff [mailto:andyognen...@gmail.com] 
Sent: Monday, July 06, 2009 12:37 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Active Protection System - the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to
function?  I remember IBM was always bad at putting unnecessary stuff on
their systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Alex Eckelberry]

Yes, we will do that.

-Original Message-
From: Gene Giannamore [mailto:gene.giannam...@abideinternational.com] 
Sent: Monday, July 06, 2009 4:58 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Suggestion: create a bootable CD to allow admins to restore quarantined files, 
and/or a BartPE plugin to do the same. Just in case this were to happen again 
(no one can guarantee the future).




Gene Giannamore
Abide International Inc.
Technical Support
561 1st Street West
Sonoma,Ca.95476
(707) 935-1577Office
(707) 935-9387Fax
(707) 766-4185Cell
gene.giannam...@abideinternational.com
www.abideinternational.com



-Original Message-
From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Monday, July 06, 2009 12:19 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

That's correct -- an FP this morning was detecting certain of the Shock 
Detection files on Thinkpads as malware.  This has been corrected and we are 
doing a major review of our internal processes and procedures.  As with any of 
these types of things, it was a combination of circumstances which led to this 
definition even getting out in the first place. 

I sincerely apologize.  We are not happy this detection was able to get out and 
are committed to not letting it happen again.  


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 
 


-Original Message-
From: Andy Ognenoff [mailto:andyognen...@gmail.com] 
Sent: Monday, July 06, 2009 12:37 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Active Protection System - the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to
function?  I remember IBM was always bad at putting unnecessary stuff on
their systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Davies,Matt]

Information from sunbelt a little while ago.

We have new definitions out version 5230, the false positive should be resolved 
in these definitions, please verify your agents are getting this update.

Also here are some more detailed instructions on how to recover the HP 
computers.
 
http://support.sunbelt-software.com/Default.aspx?answerid=1871 

Here are some more details instructions on the Lenovo laptops. 

http://support.sunbelt-software.com/Default.aspx?answerid=1870
 


-Original Message-
From: Gene Giannamore [mailto:gene.giannam...@abideinternational.com] 
Sent: 06 July 2009 21:58
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Suggestion: create a bootable CD to allow admins to restore quarantined files, 
and/or a BartPE plugin to do the same. Just in case this were to happen again 
(no one can guarantee the future).




Gene Giannamore
Abide International Inc.
Technical Support
561 1st Street West
Sonoma,Ca.95476
(707) 935-1577Office
(707) 935-9387Fax
(707) 766-4185Cell
gene.giannam...@abideinternational.com
www.abideinternational.com



-Original Message-
From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Monday, July 06, 2009 12:19 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

That's correct -- an FP this morning was detecting certain of the Shock 
Detection files on Thinkpads as malware.  This has been corrected and we are 
doing a major review of our internal processes and procedures.  As with any of 
these types of things, it was a combination of circumstances which led to this 
definition even getting out in the first place. 

I sincerely apologize.  We are not happy this detection was able to get out and 
are committed to not letting it happen again.  


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 
 


-Original Message-
From: Andy Ognenoff [mailto:andyognen...@gmail.com] 
Sent: Monday, July 06, 2009 12:37 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Active Protection System - the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to
function?  I remember IBM was always bad at putting unnecessary stuff on
their systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~




_
This e-mail (including all attachments) is confidential and may be privileged. 
It is for the exclusive use of the addressee only. If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com . Thank You.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Kim Longenbaugh]

I haven't started on our Vipre trials yet.  Is there a way to configure the 
software so that when it detects something (FP or not), it quarantines the 
suspects instead of deleting them?  
I suppose that would help only if you had a way to boot the server and you knew 
where the quarantined items came from so you could move them back.

-Original Message-
From: Davies,Matt [mailto:mdav...@generalatlantic.com] 
Sent: Monday, July 06, 2009 4:30 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Information from sunbelt a little while ago.

We have new definitions out version 5230, the false positive should be resolved 
in these definitions, please verify your agents are getting this update.

Also here are some more detailed instructions on how to recover the HP 
computers.
 
http://support.sunbelt-software.com/Default.aspx?answerid=1871 

Here are some more details instructions on the Lenovo laptops. 

http://support.sunbelt-software.com/Default.aspx?answerid=1870
 


-Original Message-
From: Gene Giannamore [mailto:gene.giannam...@abideinternational.com] 
Sent: 06 July 2009 21:58
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Suggestion: create a bootable CD to allow admins to restore quarantined files, 
and/or a BartPE plugin to do the same. Just in case this were to happen again 
(no one can guarantee the future).




Gene Giannamore
Abide International Inc.
Technical Support
561 1st Street West
Sonoma,Ca.95476
(707) 935-1577Office
(707) 935-9387Fax
(707) 766-4185Cell
gene.giannam...@abideinternational.com
www.abideinternational.com



-Original Message-
From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Monday, July 06, 2009 12:19 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

That's correct -- an FP this morning was detecting certain of the Shock 
Detection files on Thinkpads as malware.  This has been corrected and we are 
doing a major review of our internal processes and procedures.  As with any of 
these types of things, it was a combination of circumstances which led to this 
definition even getting out in the first place. 

I sincerely apologize.  We are not happy this detection was able to get out and 
are committed to not letting it happen again.  


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 
 


-Original Message-
From: Andy Ognenoff [mailto:andyognen...@gmail.com] 
Sent: Monday, July 06, 2009 12:37 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Active Protection System - the shock detection stuff.

 - Andy O. 

From: Rod Trent [mailto:rodtr...@myitforum.com] 
Sent: Monday, July 06, 2009 11:34 AM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

Is the software that is being flagged really needed for the Lenovo's to
function?  I remember IBM was always bad at putting unnecessary stuff on
their systems.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~




_
This e-mail (including all attachments) is confidential and may be privileged. 
It is for the exclusive use of the addressee only. If you are not the 
addressee, 
you are hereby notified that any dissemination of this communication is 
strictly 
prohibited. If you have received this communication in error, please erase all 
copies of the message and its attachments and notify us immediately at 
h...@generalatlantic.com . Thank You.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Vipre monday madness...

[Tim Evans]

That's what it does - it quarantines the files so they can't be accessed any 
other way than thru the Vipre interface. If you catch the system  before it 
reboots, you can remove the files from quarantine no problem. If the system 
reboots, it blue screens and you can't get into the Vipre interface to release 
the files - catch 22, hence the need for a stand along tool to manage the 
quarantine.


.Tim


> -Original Message-
> From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
> Sent: Monday, July 06, 2009 2:41 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> I haven't started on our Vipre trials yet.  Is there a way to configure
> the software so that when it detects something (FP or not), it
> quarantines the suspects instead of deleting them?
> I suppose that would help only if you had a way to boot the server and
> you knew where the quarantined items came from so you could move them
> back.
> 
> -Original Message-
> From: Davies,Matt [mailto:mdav...@generalatlantic.com]
> Sent: Monday, July 06, 2009 4:30 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Information from sunbelt a little while ago.
> 
> We have new definitions out version 5230, the false positive should be
> resolved in these definitions, please verify your agents are getting
> this update.
> 
> Also here are some more detailed instructions on how to recover the HP
> computers.
> 
> http://support.sunbelt-software.com/Default.aspx?answerid=1871
> 
> Here are some more details instructions on the Lenovo laptops.
> 
> http://support.sunbelt-software.com/Default.aspx?answerid=1870
> 
> 
> 
> -Original Message-
> From: Gene Giannamore [mailto:gene.giannam...@abideinternational.com]
> Sent: 06 July 2009 21:58
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Suggestion: create a bootable CD to allow admins to restore quarantined
> files, and/or a BartPE plugin to do the same. Just in case this were to
> happen again (no one can guarantee the future).
> 
> 
> 
> 
> Gene Giannamore
> Abide International Inc.
> Technical Support
> 561 1st Street West
> Sonoma,Ca.95476
> (707) 935-1577Office
> (707) 935-9387Fax
> (707) 766-4185Cell
> gene.giannam...@abideinternational.com
> www.abideinternational.com
> 
> 
> 
> -Original Message-
> From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
> Sent: Monday, July 06, 2009 12:19 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> That's correct -- an FP this morning was detecting certain of the Shock
> Detection files on Thinkpads as malware.  This has been corrected and we
> are doing a major review of our internal processes and procedures.  As
> with any of these types of things, it was a combination of circumstances
> which led to this definition even getting out in the first place.
> 
> I sincerely apologize.  We are not happy this detection was able to get
> out and are committed to not letting it happen again.
> 
> 
> Alex
> 
> Alex Eckelberry, CEO
> Sunbelt Software
> 33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
> e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com
> w: www.sunbeltsoftware.com b: www.sunbeltblog.com
> 
> 
> 
> 
> -Original Message-
> From: Andy Ognenoff [mailto:andyognen...@gmail.com]
> Sent: Monday, July 06, 2009 12:37 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Active Protection System - the shock detection stuff.
> 
>  - Andy O.
> 
> From: Rod Trent [mailto:rodtr...@myitforum.com]
> Sent: Monday, July 06, 2009 11:34 AM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Is the software that is being flagged really needed for the Lenovo's to
> function?  I remember IBM was always bad at putting unnecessary stuff on
> their systems.
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> 
> 
> _
> This e-mail (including all attachments) is confidential and may be
> privileged.
> It is for the exclusive use of the addressee only. If you are not the
> addressee,
> you are hereby notified that any dissemination of this communication is
> strictly
> prohibited. If you have received this communication in error, please
> erase all
> copies of the message and its attachments and notify us immediately at
> h...@generalatlantic.com . Thank You.
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ 

RE: Vipre monday madness...

[Alex Eckelberry]

Correct -- Kim, as Tim points out, it was a very unusual set of circumstances 
that led to this problem.  Normally, one could simply un-quarantine the file.  

Alex


-Original Message-
From: Tim Evans [mailto:tev...@sparling.com] 
Sent: Monday, July 06, 2009 5:44 PM
To: NT System Admin Issues
Subject: RE: Vipre monday madness...

That's what it does - it quarantines the files so they can't be accessed any 
other way than thru the Vipre interface. If you catch the system  before it 
reboots, you can remove the files from quarantine no problem. If the system 
reboots, it blue screens and you can't get into the Vipre interface to release 
the files - catch 22, hence the need for a stand along tool to manage the 
quarantine.


.Tim


> -Original Message-
> From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
> Sent: Monday, July 06, 2009 2:41 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> I haven't started on our Vipre trials yet.  Is there a way to configure
> the software so that when it detects something (FP or not), it
> quarantines the suspects instead of deleting them?
> I suppose that would help only if you had a way to boot the server and
> you knew where the quarantined items came from so you could move them
> back.
> 
> -Original Message-
> From: Davies,Matt [mailto:mdav...@generalatlantic.com]
> Sent: Monday, July 06, 2009 4:30 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Information from sunbelt a little while ago.
> 
> We have new definitions out version 5230, the false positive should be
> resolved in these definitions, please verify your agents are getting
> this update.
> 
> Also here are some more detailed instructions on how to recover the HP
> computers.
> 
> http://support.sunbelt-software.com/Default.aspx?answerid=1871
> 
> Here are some more details instructions on the Lenovo laptops.
> 
> http://support.sunbelt-software.com/Default.aspx?answerid=1870
> 
> 
> 
> -Original Message-
> From: Gene Giannamore [mailto:gene.giannam...@abideinternational.com]
> Sent: 06 July 2009 21:58
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Suggestion: create a bootable CD to allow admins to restore quarantined
> files, and/or a BartPE plugin to do the same. Just in case this were to
> happen again (no one can guarantee the future).
> 
> 
> 
> 
> Gene Giannamore
> Abide International Inc.
> Technical Support
> 561 1st Street West
> Sonoma,Ca.95476
> (707) 935-1577Office
> (707) 935-9387Fax
> (707) 766-4185Cell
> gene.giannam...@abideinternational.com
> www.abideinternational.com
> 
> 
> 
> -Original Message-
> From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
> Sent: Monday, July 06, 2009 12:19 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> That's correct -- an FP this morning was detecting certain of the Shock
> Detection files on Thinkpads as malware.  This has been corrected and we
> are doing a major review of our internal processes and procedures.  As
> with any of these types of things, it was a combination of circumstances
> which led to this definition even getting out in the first place.
> 
> I sincerely apologize.  We are not happy this detection was able to get
> out and are committed to not letting it happen again.
> 
> 
> Alex
> 
> Alex Eckelberry, CEO
> Sunbelt Software
> 33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
> e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com
> w: www.sunbeltsoftware.com b: www.sunbeltblog.com
> 
> 
> 
> 
> -Original Message-
> From: Andy Ognenoff [mailto:andyognen...@gmail.com]
> Sent: Monday, July 06, 2009 12:37 PM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Active Protection System - the shock detection stuff.
> 
>  - Andy O.
> 
> From: Rod Trent [mailto:rodtr...@myitforum.com]
> Sent: Monday, July 06, 2009 11:34 AM
> To: NT System Admin Issues
> Subject: RE: Vipre monday madness...
> 
> Is the software that is being flagged really needed for the Lenovo's to
> function?  I remember IBM was always bad at putting unnecessary stuff on
> their systems.
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> 
> 
> 
> _
> This e-mail (including all attachments) is confidential and may be
> privileged.
> It is for the exclusive use of the addressee only. If you are not the
> addressee,
> you are hereby notified that any dissemination of this communication is
> strictly
> p

Re: Poll: Internal temperature of UPS?

[Ben Scott]

\On Mon, Jul 6, 2009 at 2:29 PM, David
Mazzaccaro wrote:
> Wondering what others typically see their UPS equipment running an internal
> temp at?
> My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that is???

  I have no hard evidence, but I suspect APC UPSes have some kind of
long-standard failure mode where they overcharge the batteries,
leading to the batteries swelling and getting stuck in the unit.  High
temperatures would be another symptom of overcharging.  Check to see
if the batteries will still slide out of the unit or not.  If not, be
ready with a screwdriver and a downtime window the next battery
change.  You'll have to disassemble the entire chassis.

  As I said, no hard evidence, but I've experienced stuck swollen
batteries several times myself.  Only with APC.  Many others report
the same.  Google finds many, many hits for this for APC, few or none
for other manufactures.

  This apparent design defect is my only complaint about APC.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Poll: Internal temperature of UPS?

[Devin Meade]

Heh, that reminds me:




On Mon, Jul 6, 2009 at 5:16 PM, Ben Scott  wrote:

> \On Mon, Jul 6, 2009 at 2:29 PM, David
> Mazzaccaro wrote:
> > Wondering what others typically see their UPS equipment running an
> internal
> > temp at?
> > My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
> is???
>
>   I have no hard evidence, but I suspect APC UPSes have some kind of
> long-standard failure mode where they overcharge the batteries,
> leading to the batteries swelling and getting stuck in the unit.  High
> temperatures would be another symptom of overcharging.  Check to see
> if the batteries will still slide out of the unit or not.  If not, be
> ready with a screwdriver and a downtime window the next battery
> change.  You'll have to disassemble the entire chassis.
>
>  As I said, no hard evidence, but I've experienced stuck swollen
> batteries several times myself.  Only with APC.  Many others report
> the same.  Google finds many, many hits for this for APC, few or none
> for other manufactures.
>
>  This apparent design defect is my only complaint about APC.
>
> -- Ben
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>



-- 
Devin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Poll: Internal temperature of UPS?

[Ben Scott]

On Mon, Jul 6, 2009 at 6:22 PM, Devin Meade wrote:
> Heh, that reminds me:
>
>

  Did you forget again?  ;-)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Poll: Internal temperature of UPS?

[Steven M. Caesare]

Our Compaq/HP's have done it as well.

PITA to get them out, and the battery "trays" on these units blow
chunks... they are so flimsy as to be worthless.

-sc

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Monday, July 06, 2009 6:16 PM
To: NT System Admin Issues
Subject: Re: Poll: Internal temperature of UPS?

\On Mon, Jul 6, 2009 at 2:29 PM, David
Mazzaccaro wrote:
> Wondering what others typically see their UPS equipment running an
internal
> temp at?
> My APC 3000XLS has gotten up to 103.2 F, just wondering how bad that
is???

  I have no hard evidence, but I suspect APC UPSes have some kind of
long-standard failure mode where they overcharge the batteries,
leading to the batteries swelling and getting stuck in the unit.  High
temperatures would be another symptom of overcharging.  Check to see
if the batteries will still slide out of the unit or not.  If not, be
ready with a screwdriver and a downtime window the next battery
change.  You'll have to disassemble the entire chassis.

  As I said, no hard evidence, but I've experienced stuck swollen
batteries several times myself.  Only with APC.  Many others report
the same.  Google finds many, many hits for this for APC, few or none
for other manufactures.

  This apparent design defect is my only complaint about APC.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

OT: Dell Small Business sales

[Gene Giannamore]

Need to switch sales team due to irreconcilable differences. Has anyone done 
this recently? How? I meet resistance each time I try.




Gene Giannamore
Abide International Inc.
Technical Support
561 1st Street West
Sonoma,Ca.95476
(707) 935-1577Office
(707) 935-9387Fax
(707) 766-4185Cell
gene.giannam...@abideinternational.com
www.abideinternational.com



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT: Dell Small Business sales

[Don Ely]

Take your business elsewhere, that might get their attention...

On Mon, Jul 6, 2009 at 4:22 PM, Gene Giannamore <
gene.giannam...@abideinternational.com> wrote:

>  Need to switch sales team due to irreconcilable differences. Has anyone
> done this recently? How? I meet resistance each time I try.
>
>
>
>
>
>
>
>
>
> Gene Giannamore
>
> Abide International Inc.
>
> Technical Support
>
> 561 1st Street West
>
> Sonoma,Ca.95476
>
> (707) 935-1577Office
>
> (707) 935-9387Fax
>
> (707) 766-4185Cell
>
> gene.giannam...@abideinternational.com
>
> www.abideinternational.com
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Dell Small Business sales

[James Kerr]

Just switch to HP.
  - Original Message - 
  From: Gene Giannamore 
  To: NT System Admin Issues 
  Sent: Monday, July 06, 2009 7:22 PM
  Subject: OT: Dell Small Business sales


  Need to switch sales team due to irreconcilable differences. Has anyone done 
this recently? How? I meet resistance each time I try. 

   

   

   

   

  Gene Giannamore

  Abide International Inc.

  Technical Support

  561 1st Street West

  Sonoma,Ca.95476

  (707) 935-1577Office

  (707) 935-9387Fax

  (707) 766-4185Cell

  gene.giannam...@abideinternational.com

  www.abideinternational.com

   

   




 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: New IE zero day exploit in the wild

[Ken Schaefer]

Seems to be XP / Windows Server 2003 only?
Cheers
Ken


From: Alex Eckelberry [al...@sunbelt-software.com]
Sent: Tuesday, 7 July 2009 5:56 AM
To: NT System Admin Issues
Subject: New IE zero day exploit in the wild

Our labs have confirmed this and it is quite nasty.  Best bet for now is to set 
the killbits. Or don't use IE.

Some references:

Microsoft:

http://www.microsoft.com/technet/security/advisory/972890.mspx

SANS:

http://isc.sans.org/diary.html?storyid=6733

I would take this one quite seriously.

Alex



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: New IE zero day exploit in the wild

[Carl Houseman]

Recommendation from MS is to set the killbits everywhere.

 

http://www.microsoft.com/technet/security/advisory/972890.mspx

 

Carl

 

From: Ken Schaefer [mailto:k...@adopenstatic.com] 
Sent: Monday, July 06, 2009 9:06 PM
To: NT System Admin Issues
Subject: RE: New IE zero day exploit in the wild

 

Seems to be XP / Windows Server 2003 only?

Cheers

Ken

 

  _  

From: Alex Eckelberry [al...@sunbelt-software.com]
Sent: Tuesday, 7 July 2009 5:56 AM
To: NT System Admin Issues
Subject: New IE zero day exploit in the wild

Our labs have confirmed this and it is quite nasty.  Best bet for now is to
set the killbits. Or don't use IE. 

 

Some references:

 

Microsoft: 

 

http://www.microsoft.com/technet/security/advisory/972890.mspx

 

SANS: 

 

http://isc.sans.org/diary.html?storyid=6733

 

I would take this one quite seriously.  

 

Alex

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT: Dell Small Business sales

[Jon Harris]

There are several small business types that Rep Dell but would still send a
message to Dell.  I can tell you two if you want.

Jon

On Mon, Jul 6, 2009 at 7:24 PM, Don Ely  wrote:

> Take your business elsewhere, that might get their attention...
>
>
> On Mon, Jul 6, 2009 at 4:22 PM, Gene Giannamore <
> gene.giannam...@abideinternational.com> wrote:
>
>>  Need to switch sales team due to irreconcilable differences. Has anyone
>> done this recently? How? I meet resistance each time I try.
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> Gene Giannamore
>>
>> Abide International Inc.
>>
>> Technical Support
>>
>> 561 1st Street West
>>
>> Sonoma,Ca.95476
>>
>> (707) 935-1577Office
>>
>> (707) 935-9387Fax
>>
>> (707) 766-4185Cell
>>
>> gene.giannam...@abideinternational.com
>>
>> www.abideinternational.com
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT: Dell Small Business sales

[Jonathan Link]

Who is resisting?  All reps have a manager, speaking to them should resolve
your issues.  That being the case, suggesting you might look to a Dell
Partner for better service may prompt a better response.

On Mon, Jul 6, 2009 at 7:22 PM, Gene Giannamore <
gene.giannam...@abideinternational.com> wrote:

>  Need to switch sales team due to irreconcilable differences. Has anyone
> done this recently? How? I meet resistance each time I try.
>
>
>
>
>
>
>
>
>
> Gene Giannamore
>
> Abide International Inc.
>
> Technical Support
>
> 561 1st Street West
>
> Sonoma,Ca.95476
>
> (707) 935-1577Office
>
> (707) 935-9387Fax
>
> (707) 766-4185Cell
>
> gene.giannam...@abideinternational.com
>
> www.abideinternational.com
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT: Dell Small Business sales

[Ben Scott]

On Mon, Jul 6, 2009 at 7:22 PM, Gene
Giannamore wrote:
> Need to switch sales team due to irreconcilable differences. Has anyone done
> this recently? How? I meet resistance each time I try.

  Every email contact I've had with Dell in the past several years has
included their supervisor's information in either their introduction,
or with every message.  In some cases, their supervisor's supervisor
as well.  Start there.

  You can also just call 800-WWW-DELL and punch the buttons for the
general sales queue and explain you want a new rep; I did that myself
many years ago.

  There's also an "Unresolved Issues" page on their web site.  It's
aimed more at specific cases, but it puts you in touch with a customer
satisfaction rep, which may be what you need.

https://support.dell.com/support/topics/global.aspx/support/dellcare/outstanding_issues_care

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~