Re: Tool to find wireless password

[Angus Scott-Fleming]

On 7 May 2010 at 15:55, Richard Stovall  wrote:

> Try this.
> http://www.nirsoft.net/utils/wireless_key.html

+1, but you have to tell VIPRE WirelessKeyView is not a hacking tool.  VIPRE 
doesn't like many of the Nirsoft tools.


--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: NOD32 Antivirus

[Angus Scott-Fleming]

On 6 May 2010 at 12:35, Micheal Espinola Jr  wrote:

> I also remember listening to radio via amplitude modulation! ;-)

Still do, listening to ball games and talk radio...

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: NOD32 Antivirus

[Angus Scott-Fleming]

On 6 May 2010 at 15:07, Maglinger, Paul  wrote:

> LPs and 45s!  Not old enough to remember 78s.

I have played 78s.  None left in the collection, though.

Why, when I was born Eisenhower was still president and we carved our own ICs 
out of wood.

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Chkdsk on RAID 5

[Ken Schaefer]

Hi,

Chkdsk doesn't know anything about the underlying disk subsystem - that's all 
managed by the storage miniport driver from the RAID controller vendor and the 
actual hardware RAID controller. If chkdsk says "this part is bad, don't use 
it" then it's up to the RAID controller vendor to implement the necessary 
functionality to move the data and/recalculate parity. The individual disks 
attached to the controller (I suspect) are the ones that keep track of which 
sectors are useable and make that information available to the RAID controller.

Cheers
Ken

From: Andrew Levicki [mailto:and...@levicki.me.uk]
Sent: Saturday, 8 May 2010 11:12 AM
To: NT System Admin Issues
Subject: Re: Chkdsk on RAID 5

Hi John,

Do you have any feedback for us on how this went, please?

I've been puzzling over the issue of running chkdsk on RAID arrays and have 
done a little research but I cannot find anything from Microsoft about it and 
opinion is divided.

My concern is this: how can the chkdsk software repair a physical disk 
subsystem? For example, I have a RAID-5 array and one of the disks in that 
array has a bad sector, how does chkdsk mark that bad sector without affecting 
the parity information across the rest of the array? Or lets say I have a 
RAID-1 mirror and one of the disks has a bad sector. Does it also mark a sector 
on my good disk as being bad?

I would think if you are running hardware RAID, the hardware vendor would 
include a diagnostic utility which would be better to run than chkdsk. (e.g. hp 
Array diagnostics utility).

Sorry to reopen the case, but I'm not so sure that it was so wise to let it 
rip...

Kind regards,

andrew
On 6 May 2010 00:56, John Hornbuckle 
mailto:john.hornbuc...@taylor.k12.fl.us>> 
wrote:
Yeah, we have reliable backups--so we're prepared for the worst.

I'm going to run it tonight after my users have gone home and I can dismount 
the volume without disruption. I'm hoping that chkdsk fixes the problem (four 
files are inaccessible), or at least has no effect. But I'm prepared for the 
possibility that it will make things worse.



John

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Wednesday, May 05, 2010 11:08 AM
To: NT System Admin Issues
Subject: Re: Chkdsk on RAID 5

On Wed, May 5, 2010 at 8:41 AM, John Hornbuckle 
mailto:john.hornbuc...@taylor.k12.fl.us>> 
wrote:
> Is it safe to run chkdsk /f on a RAID 5 array?

 It's no more or less safe than running it on a single disk.

 (Which is to say: The filesystem is already damaged.  You've probabbly already 
lost data.  CHKDSK will almost certainly fix the errors on the filesystem.  
It's theoretically possible for CHKDSK to make things worse, although in 
practice that is exceedingly rare.
Backups are always a good idea.  This product is sold by weight, not be volume. 
 Void where prohibited.  Be kind to animals.  Brush after every meal.)

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

NOTICE: Florida has a broad public records law. Most written communications to 
or from this entity are public records that will be disclosed to the public and 
the media upon request. E-mail communications may be subject to public 
disclosure.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~



--
Kind regards,

Andrew Levicki
MCITP:EDST7/EMA/EA,MCSE,MCSA,MCP,CCNA,ITIL





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Chkdsk on RAID 5

[Steven Peck]

We've used chdsk /f /r on any variety of hardware RAID systems.  We
have a system with a 1.2TB LUN tat frys occasionally and they run it
at least every month or two.  It takes 4-6 hours but it does work just
fine.

On Fri, May 7, 2010 at 8:11 PM, Andrew Levicki  wrote:
> Hi John,
> Do you have any feedback for us on how this went, please?
> I've been puzzling over the issue of running chkdsk on RAID arrays and have
> done a little research but I cannot find anything from Microsoft about it
> and opinion is divided.
> My concern is this: how can the chkdsk software repair a physical disk
> subsystem? For example, I have a RAID-5 array and one of the disks in that
> array has a bad sector, how does chkdsk mark that bad sector without
> affecting the parity information across the rest of the array? Or lets say I
> have a RAID-1 mirror and one of the disks has a bad sector. Does it also
> mark a sector on my good disk as being bad?
> I would think if you are running hardware RAID, the hardware vendor would
> include a diagnostic utility which would be better to run than chkdsk. (e.g.
> hp Array diagnostics utility).
> Sorry to reopen the case, but I'm not so sure that it was so wise to let it
> rip...
> Kind regards,
> andrew
>
> On 6 May 2010 00:56, John Hornbuckle 
> wrote:
>>
>> Yeah, we have reliable backups--so we're prepared for the worst.
>>
>> I'm going to run it tonight after my users have gone home and I can
>> dismount the volume without disruption. I'm hoping that chkdsk fixes the
>> problem (four files are inaccessible), or at least has no effect. But I'm
>> prepared for the possibility that it will make things worse.
>>
>>
>>
>> John
>>
>> -Original Message-
>> From: Ben Scott [mailto:mailvor...@gmail.com]
>> Sent: Wednesday, May 05, 2010 11:08 AM
>> To: NT System Admin Issues
>> Subject: Re: Chkdsk on RAID 5
>>
>> On Wed, May 5, 2010 at 8:41 AM, John Hornbuckle
>>  wrote:
>> > Is it safe to run chkdsk /f on a RAID 5 array?
>>
>>  It's no more or less safe than running it on a single disk.
>>
>>  (Which is to say: The filesystem is already damaged.  You've probabbly
>> already lost data.  CHKDSK will almost certainly fix the errors on the
>> filesystem.  It's theoretically possible for CHKDSK to make things worse,
>> although in practice that is exceedingly rare.
>> Backups are always a good idea.  This product is sold by weight, not be
>> volume.  Void where prohibited.  Be kind to animals.  Brush after every
>> meal.)
>>
>> -- Ben
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>>   ~
>>
>>
>> NOTICE: Florida has a broad public records law. Most written
>> communications to or from this entity are public records that will be
>> disclosed to the public and the media upon request. E-mail communications
>> may be subject to public disclosure.
>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>
>
>
> --
> Kind regards,
>
> Andrew Levicki
> MCITP:EDST7/EMA/EA,MCSE,MCSA,MCP,CCNA,ITIL
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Citrix Synergy

[Webster]

If anyone from the list is going to Synergy in San Francisco, e-mail me off
list and I will send you an invite to the huge party my new employer is
putting on along with 6 other Citrix Platinum Partners.

 

 

Carl Webster

Citrix Technology Professional

http://dabcc.com/Webster

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Chkdsk on RAID 5

[Andrew Levicki]

Hi John,

Do you have any feedback for us on how this went, please?

I've been puzzling over the issue of running chkdsk on RAID arrays and have
done a little research but I cannot find anything from Microsoft about it
and opinion is divided.

My concern is this: how can the chkdsk software repair a physical disk
subsystem? For example, I have a RAID-5 array and one of the disks in that
array has a bad sector, how does chkdsk mark that bad sector without
affecting the parity information across the rest of the array? Or lets say I
have a RAID-1 mirror and one of the disks has a bad sector. Does it also
mark a sector on my good disk as being bad?

I would think if you are running hardware RAID, the hardware vendor would
include a diagnostic utility which would be better to run than chkdsk. (e.g.
hp Array diagnostics utility).

Sorry to reopen the case, but I'm not so sure that it was so wise to let it
rip...

Kind regards,

andrew

On 6 May 2010 00:56, John Hornbuckle wrote:

> Yeah, we have reliable backups--so we're prepared for the worst.
>
> I'm going to run it tonight after my users have gone home and I can
> dismount the volume without disruption. I'm hoping that chkdsk fixes the
> problem (four files are inaccessible), or at least has no effect. But I'm
> prepared for the possibility that it will make things worse.
>
>
>
> John
>
> -Original Message-
> From: Ben Scott [mailto:mailvor...@gmail.com]
> Sent: Wednesday, May 05, 2010 11:08 AM
> To: NT System Admin Issues
> Subject: Re: Chkdsk on RAID 5
>
> On Wed, May 5, 2010 at 8:41 AM, John Hornbuckle <
> john.hornbuc...@taylor.k12.fl.us> wrote:
> > Is it safe to run chkdsk /f on a RAID 5 array?
>
>  It's no more or less safe than running it on a single disk.
>
>  (Which is to say: The filesystem is already damaged.  You've probabbly
> already lost data.  CHKDSK will almost certainly fix the errors on the
> filesystem.  It's theoretically possible for CHKDSK to make things worse,
> although in practice that is exceedingly rare.
> Backups are always a good idea.  This product is sold by weight, not be
> volume.  Void where prohibited.  Be kind to animals.  Brush after every
> meal.)
>
> -- Ben
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
>
> NOTICE: Florida has a broad public records law. Most written communications
> to or from this entity are public records that will be disclosed to the
> public and the media upon request. E-mail communications may be subject to
> public disclosure.
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>


-- 
Kind regards,

Andrew Levicki
MCITP:EDST7/EMA/EA,MCSE,MCSA,MCP,CCNA,ITIL

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Sunbelt, McAfee, Symantec - now Clam

[Alex Eckelberry]

These are all forms of signatures, most particularly the hash.  I suppose it's 
a question of nomenclature. 

Alex
 

-Original Message-
From: Phil Brutsche [mailto:p...@optimumdata.com] 
Sent: Friday, May 07, 2010 7:20 PM
To: NT System Admin Issues
Subject: Re: Sunbelt, McAfee, Symantec - now Clam

Application whitelisting doesn't necessarily use signatures.

Microsoft's AppLocker and it's predecessor, Software Restriction Policies, can 
whitelist based on:
 * folder paths
 * file name
 * file hashes
 * executables signed by with a software publisher's X.509 code-signing 
certificate

Alex Eckelberry wrote:
> Not sure about that.  What happens when the whitelisting vendor screws 
> up a dat file, and you can't run any of your programs at all because 
> they are not "allowed"?  The problem is compounded by the fact that 
> there are far more legitimate files released daily than there are 
> malicious files, so whitelisting applications need to update even more 
> than blacklisting apps.

-- 

Phil Brutsche
p...@optimumdata.com

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

OT: IBM i-series machine training

[Jon Harris]

I need some input on the IBM i-series machine training.  Since this is
truely OT I would prefer to do it offlist.  They have several options and
need to know what others thought of the online/web/classroom training.  I
have to get up to speed on this and fast.  From what I am seeing at the
moment it looks like a mix will be what I will end up with but I still would
like to find out what anyone else that has already done the training thought
of it.

Thanks a lot,

Jon

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: 24 hour time format

[joseph palmieri]

novell and landesk

--- On Fri, 5/7/10, Rob Bonfiglio  wrote:

From: Rob Bonfiglio 
Subject: Re: 24 hour time format
To: "NT System Admin Issues" 
Date: Friday, May 7, 2010, 4:53 PM

Just curious, what are you using for authentication and system management?  70 
machines is a lot of machines to try to keep up with using local user accounts 
and having to go around to each machine for updates/maintenance.



On Thu, May 6, 2010 at 6:16 PM, joseph palmieri  wrote:





it is there but it only applies to accounts create after this change...issue is 
that 70 wks were rolled out and requirements changed 


--- On Thu, 5/6/10, Kurt Buff  wrote:



From: Kurt Buff 
Subject: Re: 24 hour time format 

To: "NT System Admin Issues" 
Date: Thursday, May 6, 2010, 5:39 PM




I do this during installs on Win2k3, manually. There's a checkbox in
the Regional settings to make it default for all users, but it doesn't
appear to be available for XP.



On Thu, May 6, 2010 at 13:34, Brian Desmond  wrote:
>
> You’d want to tweak the regional settings for the box…

>
>
>
> Thanks,
>
> Brian Desmond
>
> br...@briandesmond.com
>
>
>
> c   – 312.731.3132

>
>
>
> From: joseph palmieri [mailto:jpalm...@yahoo.com]
> Sent: Thursday, May 06, 2010 3:26 PM
> To: NT System Admin Issues

> Subject: 24 hour time format
>
>
>
> Can anyone provide assistance in setting up Windows XP workstations so that 
> all users who login receive the time in 24 hour format? We do not use AD
>

>
>
>
>
>
>
>
>
>


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~




 
 



 

 



  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Sunbelt, McAfee, Symantec - now Clam

[Phil Brutsche]

Application whitelisting doesn't necessarily use signatures.

Microsoft's AppLocker and it's predecessor, Software Restriction
Policies, can whitelist based on:
 * folder paths
 * file name
 * file hashes
 * executables signed by with a software publisher's X.509 code-signing
certificate

Alex Eckelberry wrote:
> Not sure about that.  What happens when the whitelisting vendor
> screws up a dat file, and you can't run any of your programs at all
> because they are not "allowed"?  The problem is compounded by the
> fact that there are far more legitimate files released daily than
> there are malicious files, so whitelisting applications need to
> update even more than blacklisting apps.

-- 

Phil Brutsche
p...@optimumdata.com

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: cisco ap's

[Raper, Jonathan - Eagle]

We're running AIR-LAP1142N-A-K9, for all of our APs. Pure 802.11n environment, 
and are processing 802.1x authentication through ACS 4.2 (on physical 
appliance) and ACS 5.1 running on VMware (we'll soon be transitioning the 
appliances to ACS 5.1.

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians & Associates, PA
jra...@eaglemds.com
www.eaglemds.com


-Original Message-
From: Chyka, Robert [mailto:bch...@medaille.edu]
Sent: Friday, May 07, 2010 6:43 PM
To: NT System Admin Issues
Subject: RE: cisco ap's

So we have 4402 controllers all with 1242 aps...all lightweight.

We are looking to add a N subnet...what cisco lightweight model is recommended? 
 We run wpa2 enterprise with tkip, peap and 802.11x for authentication.

I want to compare the recommended from the list with our reseller.

Thanks!

-Original Message-
From: Phil Brutsche 
Sent: Friday, May 07, 2010 6:38 PM
To: NT System Admin Issues 
Subject: Re: cisco ap's

The "n" refers to the 802.11 radio it is equipped with. In this case,
802.11n. A 802.11g access point would be a AIR-AP1231G-A-K9 or a
AIR-AP1242G-A-K9.

The "A" in the model number refers to the regional EM compliance for
S-band microwave transmissions. Not everyone uses the same 11 channels
we do in NA.

"A" is for NA
"E" is for EU
"J" is for Japan

The K9 means strong encryption - in the case of an access point
128-bit WEP, TKIP and AES. If it lacked strong encryption (generally
encryption keys under 128-bit) it would be "K8".

If you have a simple "K" then you do not have a complete part number.
I guarantee that there is a "9" missing there. After the AP340 there
was no such thing as a "K8" access point, and most certainly *not* a
modern 802.11n unit.

As you found out a AIR-LAP1142N-A-K9 is a lightweight access point,
they expect you to use a wireless controller with it.

andy  previously uttered:

> Cisco aironet standalone ap-1142n-a-k9
>
> On the cisco access points
>
> ap - standalone access point.
> 1142 - model
> n - n series
> a- american?
>
> what does the K9 stand for?
>
>
> is there a difference between
> AIR-AP1142N-A-K
> and
> AIR-AP1142N-A-K9
>
> I already got burned by the L.

--

Phil Brutsche
p...@optimumdata.com


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


Any medical information contained in this electronic message is CONFIDENTIAL 
and privileged. It is unlawful for unauthorized persons to view, copy, 
disclose, or disseminate CONFIDENTIAL information. This electronic message may 
contain information that is confidential and/or legally privileged. It is 
intended only for the use of the individual(s) and/or entity named as 
recipients in the message. If you are not an intended recipient of this 
message, please notify the sender immediately and delete this material from 
your computer. Do not deliver, distribute or copy this message, and do not 
disclose its contents or take any action in reliance on the information that it 
contains.


Any medical information contained in this electronic message is CONFIDENTIAL 
and privileged. It is unlawful for unauthorized persons to view, copy, 
disclose, or disseminate CONFIDENTIAL information. This electronic message may 
contain information that is confidential and/or legally privileged. It is 
intended only for the use of the individual(s) and/or entity named as 
recipients in the message. If you are not an intended recipient of this 
message, please notify the sender immediately and delete this material from 
your computer. Do not deliver, distribute or copy this message, and do not 
disclose its contents or take any action in reliance on the information that it 
contains.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Sunbelt, McAfee, Symantec - now Clam

[Kurt Buff]

I was speaking from a business use perspective, where there's enough
IT support to whitelist as necessary. In that scenario, I think that
the application whitelisting is very feasible, but needs to be coupled
with users only having non-admin access, and only a defined set of
apps in play.

>From a personal-use perspective, application whitelisting is a much
longer and harder row to hoe.

Kurt

On Fri, May 7, 2010 at 16:00, Alex Eckelberry
 wrote:
> Not sure about that.  What happens when the whitelisting vendor screws up a 
> dat file, and you can't run any of your programs at all because they are not 
> "allowed"?  The problem is compounded by the fact that there are far more 
> legitimate files released daily than there are malicious files, so 
> whitelisting applications need to update even more than blacklisting apps.
>
> Alex
>
> -Original Message-
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
> Sent: Friday, May 07, 2010 6:26 PM
> To: NT System Admin Issues
> Subject: Re: Sunbelt, McAfee, Symantec - now Clam
>
> It's called "Appliation Whitelisting", methinks.
>
> On Fri, May 7, 2010 at 11:59, Andrew S. Baker  wrote:
>> First off, the ClamAV issue was somewhat mitigated by them telling everyone
>> to be off of v96 for a few weeks.  :)
>> But, the reality of this situation is that signature-based host-level
>> protection is getting to the point where the human error factor is too high.
>>  (I feel a blog entry coming up soon)
>> In order to attack the threats that are out there, signatures need to be
>> updated frequently, and increasing the frequency places greater burden on
>> the QA process, and increases the risk of a self-inflicted DoS.
>> What this signifies is that we need to start demanding a different approach
>> to host-based protection *as the norm*, because there is now as great a
>> chance that your system can be made ineffective from an AV update as from an
>> actual piece of malware.
>> AV in its current form really has to die, as there is no way for the good
>> guys to keep up with the bad guys, leaving us vulnerable to even more
>> foolishness from creative bad guys.
>> -ASB: http://XeeSM.com/AndrewBaker
>>
>>
>> On Fri, May 7, 2010 at 1:27 PM, Kurt Buff  wrote:
>>>
>>> -  Original Message 
>>> Subject: [Clamav-announce] problem with daily.cvd 10938
>>> Date: Fri, 7 May 2010 13:06:56 +0200
>>> From: Luca Gibelli 
>>> Reply-To: nore...@clamav.net
>>> To: ClamAV Announce 
>>>
>>> Dear ClamAV users,
>>>
>>> about 15 mins ago we released daily.cvd 10938. This update apparently
>>> caused a segmentation fault in all ClamAV versions older than 0.96
>>> on 32 bit systems.
>>>
>>> We just released daily.cvd 10939 which removes the faulty signature and
>>> we have taken measures to ensure that this problem won't happen again.
>>>
>>> We recommend using a monitor tool like clamdwatch or clamdmon to
>>> automatically restart clamd whenever it dies.
>>>
>>> If you are already using a similar solution, your clamd will be
>>> restarted automatically as soon as freshclam downloads the daily.cvd
>>> 10939 update.
>>>
>>> We apologise for the inconvenience.
>>>
>>> Regards,
>>>
>>> - --
>>> Luca Gibelli (luca _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit
>>> [Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
>>> PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
>>> ___
>>>
>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>> ~   ~
>>>
>>
>>
>>
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: cisco ap's

[Phil Brutsche]

Any Cisco access point capable of being a LAP will meet those requirements.

Generally speaking I would go with the 1252 over the 1142 - the former
can use any RP-TNC antenna you like while the latter can only use their
internal antenna.

I see Cisco has 1260-series and 3500-series APs these days, but they are
new enough you may not be able get one until later in the year. It
appears they are lightweight only.

Chyka, Robert wrote:
> So we have 4402 controllers all with 1242 aps...all lightweight.
> 
> We are looking to add a N subnet...what cisco lightweight model is 
> recommended?  We run wpa2 enterprise with tkip, peap and 802.11x for 
> authentication.
> 
> I want to compare the recommended from the list with our reseller.
> 
> Thanks!
> 
> -Original Message-
> From: Phil Brutsche 
> Sent: Friday, May 07, 2010 6:38 PM
> To: NT System Admin Issues 
> Subject: Re: cisco ap's
> 
> The "n" refers to the 802.11 radio it is equipped with. In this case,  
> 802.11n. A 802.11g access point would be a AIR-AP1231G-A-K9 or a  
> AIR-AP1242G-A-K9.
> 
> The "A" in the model number refers to the regional EM compliance for  
> S-band microwave transmissions. Not everyone uses the same 11 channels  
> we do in NA.
> 
> "A" is for NA
> "E" is for EU
> "J" is for Japan
> 
> The K9 means strong encryption - in the case of an access point  
> 128-bit WEP, TKIP and AES. If it lacked strong encryption (generally  
> encryption keys under 128-bit) it would be "K8".
> 
> If you have a simple "K" then you do not have a complete part number.  
> I guarantee that there is a "9" missing there. After the AP340 there  
> was no such thing as a "K8" access point, and most certainly *not* a  
> modern 802.11n unit.
> 
> As you found out a AIR-LAP1142N-A-K9 is a lightweight access point,  
> they expect you to use a wireless controller with it.
> 
> andy  previously uttered:
> 
>> Cisco aironet standalone ap-1142n-a-k9
>>
>> On the cisco access points
>>
>> ap - standalone access point.
>> 1142 - model
>> n - n series
>> a- american?
>>
>> what does the K9 stand for?
>>
>>
>> is there a difference between
>> AIR-AP1142N-A-K
>> and
>> AIR-AP1142N-A-K9
>>
>> I already got burned by the L.
> 


-- 

Phil Brutsche
p...@optimumdata.com

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Sunbelt, McAfee, Symantec - now Clam

[Alex Eckelberry]

Not sure about that.  What happens when the whitelisting vendor screws up a dat 
file, and you can't run any of your programs at all because they are not 
"allowed"?  The problem is compounded by the fact that there are far more 
legitimate files released daily than there are malicious files, so whitelisting 
applications need to update even more than blacklisting apps. 

Alex

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, May 07, 2010 6:26 PM
To: NT System Admin Issues
Subject: Re: Sunbelt, McAfee, Symantec - now Clam

It's called "Appliation Whitelisting", methinks.

On Fri, May 7, 2010 at 11:59, Andrew S. Baker  wrote:
> First off, the ClamAV issue was somewhat mitigated by them telling everyone
> to be off of v96 for a few weeks.  :)
> But, the reality of this situation is that signature-based host-level
> protection is getting to the point where the human error factor is too high.
>  (I feel a blog entry coming up soon)
> In order to attack the threats that are out there, signatures need to be
> updated frequently, and increasing the frequency places greater burden on
> the QA process, and increases the risk of a self-inflicted DoS.
> What this signifies is that we need to start demanding a different approach
> to host-based protection *as the norm*, because there is now as great a
> chance that your system can be made ineffective from an AV update as from an
> actual piece of malware.
> AV in its current form really has to die, as there is no way for the good
> guys to keep up with the bad guys, leaving us vulnerable to even more
> foolishness from creative bad guys.
> -ASB: http://XeeSM.com/AndrewBaker
>
>
> On Fri, May 7, 2010 at 1:27 PM, Kurt Buff  wrote:
>>
>> -  Original Message 
>> Subject: [Clamav-announce] problem with daily.cvd 10938
>> Date: Fri, 7 May 2010 13:06:56 +0200
>> From: Luca Gibelli 
>> Reply-To: nore...@clamav.net
>> To: ClamAV Announce 
>>
>> Dear ClamAV users,
>>
>> about 15 mins ago we released daily.cvd 10938. This update apparently
>> caused a segmentation fault in all ClamAV versions older than 0.96
>> on 32 bit systems.
>>
>> We just released daily.cvd 10939 which removes the faulty signature and
>> we have taken measures to ensure that this problem won't happen again.
>>
>> We recommend using a monitor tool like clamdwatch or clamdmon to
>> automatically restart clamd whenever it dies.
>>
>> If you are already using a similar solution, your clamd will be
>> restarted automatically as soon as freshclam downloads the daily.cvd
>> 10939 update.
>>
>> We apologise for the inconvenience.
>>
>> Regards,
>>
>> - --
>> Luca Gibelli (luca _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit
>> [Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
>> PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
>> ___
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: cisco ap's

[Chyka, Robert]

So we have 4402 controllers all with 1242 aps...all lightweight.

We are looking to add a N subnet...what cisco lightweight model is recommended? 
 We run wpa2 enterprise with tkip, peap and 802.11x for authentication.

I want to compare the recommended from the list with our reseller.

Thanks!

-Original Message-
From: Phil Brutsche 
Sent: Friday, May 07, 2010 6:38 PM
To: NT System Admin Issues 
Subject: Re: cisco ap's

The "n" refers to the 802.11 radio it is equipped with. In this case,  
802.11n. A 802.11g access point would be a AIR-AP1231G-A-K9 or a  
AIR-AP1242G-A-K9.

The "A" in the model number refers to the regional EM compliance for  
S-band microwave transmissions. Not everyone uses the same 11 channels  
we do in NA.

"A" is for NA
"E" is for EU
"J" is for Japan

The K9 means strong encryption - in the case of an access point  
128-bit WEP, TKIP and AES. If it lacked strong encryption (generally  
encryption keys under 128-bit) it would be "K8".

If you have a simple "K" then you do not have a complete part number.  
I guarantee that there is a "9" missing there. After the AP340 there  
was no such thing as a "K8" access point, and most certainly *not* a  
modern 802.11n unit.

As you found out a AIR-LAP1142N-A-K9 is a lightweight access point,  
they expect you to use a wireless controller with it.

andy  previously uttered:

> Cisco aironet standalone ap-1142n-a-k9
>
> On the cisco access points
>
> ap - standalone access point.
> 1142 - model
> n - n series
> a- american?
>
> what does the K9 stand for?
>
>
> is there a difference between
> AIR-AP1142N-A-K
> and
> AIR-AP1142N-A-K9
>
> I already got burned by the L.

-- 

Phil Brutsche
p...@optimumdata.com


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: cisco ap's

[Phil Brutsche]

The "n" refers to the 802.11 radio it is equipped with. In this case,  
802.11n. A 802.11g access point would be a AIR-AP1231G-A-K9 or a  
AIR-AP1242G-A-K9.


The "A" in the model number refers to the regional EM compliance for  
S-band microwave transmissions. Not everyone uses the same 11 channels  
we do in NA.


"A" is for NA
"E" is for EU
"J" is for Japan

The K9 means strong encryption - in the case of an access point  
128-bit WEP, TKIP and AES. If it lacked strong encryption (generally  
encryption keys under 128-bit) it would be "K8".


If you have a simple "K" then you do not have a complete part number.  
I guarantee that there is a "9" missing there. After the AP340 there  
was no such thing as a "K8" access point, and most certainly *not* a  
modern 802.11n unit.


As you found out a AIR-LAP1142N-A-K9 is a lightweight access point,  
they expect you to use a wireless controller with it.


andy  previously uttered:


Cisco aironet standalone ap-1142n-a-k9

On the cisco access points

ap - standalone access point.
1142 - model
n - n series
a- american?

what does the K9 stand for?


is there a difference between
AIR-AP1142N-A-K
and
AIR-AP1142N-A-K9

I already got burned by the L.


--

Phil Brutsche
p...@optimumdata.com


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Sunbelt, McAfee, Symantec - now Clam

[Kurt Buff]

It's called "Appliation Whitelisting", methinks.

On Fri, May 7, 2010 at 11:59, Andrew S. Baker  wrote:
> First off, the ClamAV issue was somewhat mitigated by them telling everyone
> to be off of v96 for a few weeks.  :)
> But, the reality of this situation is that signature-based host-level
> protection is getting to the point where the human error factor is too high.
>  (I feel a blog entry coming up soon)
> In order to attack the threats that are out there, signatures need to be
> updated frequently, and increasing the frequency places greater burden on
> the QA process, and increases the risk of a self-inflicted DoS.
> What this signifies is that we need to start demanding a different approach
> to host-based protection *as the norm*, because there is now as great a
> chance that your system can be made ineffective from an AV update as from an
> actual piece of malware.
> AV in its current form really has to die, as there is no way for the good
> guys to keep up with the bad guys, leaving us vulnerable to even more
> foolishness from creative bad guys.
> -ASB: http://XeeSM.com/AndrewBaker
>
>
> On Fri, May 7, 2010 at 1:27 PM, Kurt Buff  wrote:
>>
>> -  Original Message 
>> Subject: [Clamav-announce] problem with daily.cvd 10938
>> Date: Fri, 7 May 2010 13:06:56 +0200
>> From: Luca Gibelli 
>> Reply-To: nore...@clamav.net
>> To: ClamAV Announce 
>>
>> Dear ClamAV users,
>>
>> about 15 mins ago we released daily.cvd 10938. This update apparently
>> caused a segmentation fault in all ClamAV versions older than 0.96
>> on 32 bit systems.
>>
>> We just released daily.cvd 10939 which removes the faulty signature and
>> we have taken measures to ensure that this problem won't happen again.
>>
>> We recommend using a monitor tool like clamdwatch or clamdmon to
>> automatically restart clamd whenever it dies.
>>
>> If you are already using a similar solution, your clamd will be
>> restarted automatically as soon as freshclam downloads the daily.cvd
>> 10939 update.
>>
>> We apologise for the inconvenience.
>>
>> Regards,
>>
>> - --
>> Luca Gibelli (luca _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit
>> [Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
>> PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
>> ___
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~   ~
>>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Tool to find wireless password

[Steven Peck]

For peoples home wireless acces keys.  I just use a label printer and tape
them to the bottom of the access point.  I'm certainly not going to remember
my dads key in a year when I visit and need to 'fix' something.  Then when
they call me asking about it for a guest, I tell them to look on the bottom
of the blue box with anteneas on the back of their
desk/shelf/closet/whatever.

Steven Peck





On Fri, May 7, 2010 at 1:59 PM, John Aldrich
wrote:

>  Ahh…Ok. Thanks. I’ll try that first. J
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
> *From:* Glen Johnson [mailto:gjohn...@vhcc.edu]
> *Sent:* Friday, May 07, 2010 4:16 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: Tool to find wireless password
>
>
>
> Does the client already have any vista or win 7 computers using the
> wireless?
>
> If so, there is an option to show the passcode.
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 3:53 PM
> *To:* NT System Admin Issues
> *Subject:* Tool to find wireless password
>
>
>
> I’ve got a client on the side who I’m adding wireless to his desktop for
> him. I don’t know if he knows the wireless passcode or not. On the off
> chance he doesn’t, I know there are some tools to “crack” the passcode on a
> machine that has it already. Can anyone point this out to me?
>
>
>
> Thanks!
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Tool to find wireless password

[John Aldrich]

Ahh.Ok. Thanks. I'll try that first. J

 

John-AldrichTile-Tools

 

From: Glen Johnson [mailto:gjohn...@vhcc.edu] 
Sent: Friday, May 07, 2010 4:16 PM
To: NT System Admin Issues
Subject: RE: Tool to find wireless password

 

Does the client already have any vista or win 7 computers using the
wireless?

If so, there is an option to show the passcode.

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 3:53 PM
To: NT System Admin Issues
Subject: Tool to find wireless password

 

I've got a client on the side who I'm adding wireless to his desktop for
him. I don't know if he knows the wireless passcode or not. On the off
chance he doesn't, I know there are some tools to "crack" the passcode on a
machine that has it already. Can anyone point this out to me?

 

Thanks!

 

John-AldrichTile-Tools

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: running out of disk space on WSUS drive

[Miller Bonnie L .]

Also, check to see if you're getting delta updates under "Options", update 
files and languages, "download express installation files".

-Original Message-
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] 
Sent: Thursday, May 06, 2010 3:10 PM
To: NT System Admin Issues
Subject: Re: running out of disk space on WSUS drive

Found it... thanks, that freed up 9GB.

>>> "Damien Solodow"  5/6/2010 2:59 PM >>>
Yes. In 3.0 there is a server cleanup wizard in the management console. 
--
Sent using BlackBerry


- Original Message -
From: Joseph Heaton 
To: NT System Admin Issues 
Sent: Thu May 06 17:55:12 2010
Subject: running out of disk space on WSUS drive

Is it possible to delete older updates, in order to conserve space?


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: 24 hour time format

[Rob Bonfiglio]

Just curious, what are you using for authentication and system management?
70 machines is a lot of machines to try to keep up with using local user
accounts and having to go around to each machine for updates/maintenance.

On Thu, May 6, 2010 at 6:16 PM, joseph palmieri  wrote:

>   it is there but it only applies to accounts create after this
> change...issue is that 70 wks were rolled out and requirements changed
>
>
> --- On *Thu, 5/6/10, Kurt Buff * wrote:
>
>
> From: Kurt Buff 
> Subject: Re: 24 hour time format
>
> To: "NT System Admin Issues" 
> Date: Thursday, May 6, 2010, 5:39 PM
>
>  I do this during installs on Win2k3, manually. There's a checkbox in
> the Regional settings to make it default for all users, but it doesn't
> appear to be available for XP.
>
> On Thu, May 6, 2010 at 13:34, Brian Desmond 
> http://mc/compose?to=br...@briandesmond.com>>
> wrote:
> >
> > You’d want to tweak the regional settings for the box…
> >
> >
> >
> > Thanks,
> >
> > Brian Desmond
> >
> > br...@briandesmond.com 
> >
> >
> >
> > c   – 312.731.3132
> >
> >
> >
> > From: joseph palmieri 
> > [mailto:jpalm...@yahoo.com
> ]
> > Sent: Thursday, May 06, 2010 3:26 PM
> > To: NT System Admin Issues
> > Subject: 24 hour time format
> >
> >
> >
> > Can anyone provide assistance in setting up Windows XP workstations so
> that all users who login receive the time in 24 hour format? We do not use
> AD
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: cisco ap's

[Michael B. Smith]

K9 means it includes "strong encryption" and is subject to export restrictions.

That is, it has 3DES and/or AES.

Simple DES "normal encryption" is normally K8.

"No encryption" is normally just K.

(This is from my CCDA that lapsed a couple years ago - but I think it's still 
valid today.)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: andy [mailto:afo...@psu.edu]
Sent: Friday, May 07, 2010 4:42 PM
To: NT System Admin Issues
Subject: cisco ap's

Cisco aironet standalone ap-1142n-a-k9

On the cisco access points

ap - standalone access point.
1142 - model
n - n series
a- american?

what does the K9 stand for?


is there a difference between
AIR-AP1142N-A-K
and
AIR-AP1142N-A-K9

I already got burned by the L.

Andy









Andy-Ofalt---863-3449--405-Ag-Admin-Bldg--for more information 
go  to 
http://ict.cas.psu.edu/Contacts.html 
-- My little blurb to eat up bandwidth and make your mail box even 
larger
+++
 The real problem is that IP, a connectionless protocol, was never developed to 
be the universal protocol. ATM was developed to serve that purpose and failed.
+++





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

cisco ap's

[andy]

Cisco aironet standalone ap-1142n-a-k9

On the cisco access points

ap - standalone access point.
1142 - model
n - n series
a- american?

what does the K9 stand for?


is there a difference between
AIR-AP1142N-A-K
and
AIR-AP1142N-A-K9

I already got burned by the L.

Andy








Andy-Ofalt---863-3449--405-Ag-Admin-Bldg--for more 
information go  to http://ict.cas.psu.edu/Contacts.html  -- 
My little blurb to eat up bandwidth and make your mail box even larger
+++
  The real problem is that IP, a connectionless protocol, was never 
developed to be the universal protocol. ATM was developed to serve 
that purpose and failed.
+++

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Alex Eckelberry]

All AV vendors have problems. Just Google "(vendor) false positive" or 
"(vendor) update problem".  It's just reality.  When you have to build up to 20 
new versions of your product daily, things go wrong.

The problems with AV updates industry-wide started with the massive increase in 
malware about 5 years ago.  Before that, FPs and update issues were a 
relatively rare event.  But now all AV vendors are in a constant battle to keep 
up with the fire-hose of malware, and stuff goes wrong.

The best that an AV vendor can do is to implement as many safety checks, 
redundancies, internal air-bags and testing that they can given the short 
amount of time to react to a new threat.  The tough part is balancing quality 
against the need to protect the customer from threats.

Our head of R&D, Mark Patton, confesses to having nightmares about this stuff 
and obsesses over what we can do. We have implemented kill switches in the 
definition process (which we actually used this morning after we figured out 
what the problem was); we've implemented airbags that won't let VIPRE delete a 
Windows system file; we've implemented more rigorous code reviews and 
regression tests on new detections, and so on.  We are also working on some 
interesting new technology, such as self-healing functionality inside of VIPRE 
that will self-heal a system in case a critical file is removed.

Personally, I think the next frontier in the AV industry, now that vendors have 
mostly started figuring out how to deal with the volume of threats, is to 
figure out how to "never do harm".   It's actually a lot harder than it might 
sound.

Alex



From: Jon Harris [mailto:jk.har...@gmail.com]
Sent: Friday, May 07, 2010 3:32 PM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

PLEASE no!!!  Not that the office is rolling out upgrades on Trend and I don't 
need another night of headaches.

Jon
On Fri, May 7, 2010 at 11:47 AM, David W. McSpadden 
mailto:dav...@imcu.com>> wrote:
Ok.  That is two bad defs in two weeks?

1 Vipre
1 McAfee?
Next is Trend?

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 11:45 AM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

Turned out to be a bad Deff. Bad def = 6274.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: 24 hour time format

[Raper, Jonathan - Eagle]

Cool - by the way, just realized there is a mitsake in my syntax. Should just 
be:

Reg query hku etc... (no slash)

Jonathan L. Raper, MCSE

Sent from my Windows Mobile ® enabled Smartphone, WHICH WILL LIKELY SOON BE 
REPLACED BY A DROID. Please excuse brevity & any misspellings.




From: joseph palmieri 
Sent: Friday, May 07, 2010 3:27 PM
To: NT System Admin Issues 
Subject: RE: 24 hour time format

thanks...I will test and post the results next week

--- On Fri, 5/7/10, Raper, Jonathan - Eagle  wrote:

From: Raper, Jonathan - Eagle 
Subject: RE: 24 hour time format
To: "NT System Admin Issues" 
Date: Friday, May 7, 2010, 3:16 PM

Admittedly, after thinking about it, there is indeed a faster, more elegant way 
to do this, which I've included further down. However, after doing some testing 
of my own, I don't see why my basic concept of what I described wouldn't work. 
In the process, I discovered a second key that would need to be changed in 
order for the time to display as desired in the system tray.

I was able to export the entire HKEY_USERS Hive into a reg file on one machine 
in a matter of seconds - maybe 2 minutes, tops, for a system that has more than 
40 unique local user accounts. (Admittedly, just as I imagined, the file is 
rather large - 150 Megs, roughly). I was able to do a very basic FIND/REPLACE 
ALL from within notepad for "iTime"="0" and change it to "iTime"="1", which is 
what is required to change the format from 12 hour to 24 hour format. Also, you 
would need to FIND/REPLACE "sTimeFormat"="h:mm:ss tt" with 
"sTimeFormat"="HH:mm:ss".

Now I would CERTAINLY NOT recommend re-importing the entire hive after doing 
what I just described. However, a more robust text editor and/or some scripting 
could modify the reg file in order to get the desired result.

Anyway, as I mentioned, there is a faster, more elegant solution, and here it 
is:


DISCLAIMER: I HIGHLY RECOMMEND FULLY TSETING THIS FIRST, as YMMV.
I AM NOT RESPONSIBLE IF YOU HOSE YOUR SYSTEM. USE AT YOUR OWN RISK.


Open a command prompt on the target machine. Type:

reg /query HKU >sidlist.txt

This will generate a text file containing a list of every sid in the registry:

! REG.EXE VERSION 3.0

HKEY_USERS
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-19_Classes
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-20_Classes
HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006
HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006_Classes
HKEY_USERS\S-1-5-18

Eliminate the sids that end in _Classes, and then format the file to look like 
this and save as .reg:

*FILE BEGIN*

Windows Registry Editor Version 5.00

[HKEY_USERS\.DEFAULT\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-19\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-20\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006\Control 
Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-18\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

*FILE END*

Once saved, import the registry file, and log off. Log back on, and see what 
the time looks like. I think you'll be pleased.

Hope this helps.

Cheers!

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians & Associates, PA
jra...@eaglemds.com
www.eaglemds.com


-Original Message-
From: Brian Desmond 
[mailto:br...@briandesmond.com]
Sent: Thursday, May 06, 2010 11:27 PM
To: NT System Admin Issues
Subject: RE: 24 hour time format

No that's not going to work well at all.

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132


-Original Message-
From: Raper, Jonathan - Eagle 
[mailto:jra...@eaglemds.com]
Sent: Thursday, May 06, 2010 8:19 PM
To: NT System Admin Issues
Subject: RE: 24 hour time format

Hjust a thought. Export the entire HK_USERS hive (can you export an 
entire hive?) to a reg file. (I know, I know, it will be big, but hear me out). 
Find/replace in the reg file with txt editor, then upload the file back...

Jonathan L. Raper, MCSE

Sent from my Windows Mobile ® enabled Smartphone, WHICH WILL LIKELY SOON BE 
REPLACED BY A DROID. Please excuse brevity & any misspellings.




From: joseph palmieri 
http://us.mc510.mail.yahoo.com/mc/compose?to=jpalm...@yahoo.com>>
Sent: Thursday, May 06, 2010 6:37 PM
To: NT System Admin Issues 
http://us.mc510.mail.yahoo.com/mc/compose?to=ntsysad...@lyris.sunbelt-software.com>>
Subject: Re

RE: Tool to find wireless password

[Glen Johnson]

Does the client already have any vista or win 7 computers using the
wireless?

If so, there is an option to show the passcode.

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 3:53 PM
To: NT System Admin Issues
Subject: Tool to find wireless password

 

I've got a client on the side who I'm adding wireless to his desktop for
him. I don't know if he knows the wireless passcode or not. On the off
chance he doesn't, I know there are some tools to "crack" the passcode
on a machine that has it already. Can anyone point this out to me?

 

Thanks!

 

  

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: [OT] RE: Sunbelt forums down?

[RichardMcClary]

Yeah - some folks deserver Def 6274 with no upgrade option!
--
RMc

Jon Harris  wrote on 05/07/2010 02:58:36 PM:

> Best to just stay away from that type of person.  You lose no matter 
what.
>  
> Jon

> On Fri, May 7, 2010 at 3:56 PM, Sherry Abercrombie  
wrote:
> Yeah, she's got issues, and this particular one was over an estate 
> worth less that 20K.  My husband signed off on any claim to it 
> because the hassle just wasn't worth the money 
> 

> On Fri, May 7, 2010 at 2:35 PM, Jon Harris  wrote:
> Her loss.
>  
> Jon

> On Fri, May 7, 2010 at 3:16 PM, Sherry Abercrombie  
wrote:
> Isn't that de-friend?  I dunno, I was de-friended/un-friended on FB 
> by my s-i-l.I wasn't very devastated ;) 
> 

> On Fri, May 7, 2010 at 1:30 PM, Andy Shook  
wrote:
> Naw, I?ll never bash the Clearwater crew. Alex would un-friend me on
> Facebook and I would be devastated. 
>  
> Shook
>  
> From: Michael B. Smith [mailto:mich...@smithcons.com] 
> Sent: Friday, May 07, 2010 2:26 PM 
> 
> To: NT System Admin Issues
> Subject: [OT] RE: Sunbelt forums down? 
>  
> You just wish you?d thought of it first. J
>  
> Regards,
>  
> Michael B. Smith
> Consultant and Exchange MVP
> http://TheEssentialExchange.com
>  
> From: Andy Shook [mailto:andy.sh...@peak10.com] 
> Sent: Friday, May 07, 2010 2:24 PM
> To: NT System Admin Issues
> Subject: RE: Sunbelt forums down?
>  
> That wasn?t nice, brother.  
>  
> Shook
>  
> From: Kim Longenbaugh [mailto:k...@colonialsavings.com] 
> Sent: Friday, May 07, 2010 2:22 PM
> To: NT System Admin Issues
> Subject: RE: Sunbelt forums down?
>  
> Nah, it was just running a scan with definition versions 6272, 6273 or 
6274   
> J
>  
> From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
> Sent: Friday, May 07, 2010 1:00 PM
> To: NT System Admin Issues
> Subject: RE: Sunbelt forums down?
>  
> Our server looks to be in need of an upgrade? that will happen this 
weekend. 
>  
> From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
> Sent: Friday, May 07, 2010 10:35 AM
> To: NT System Admin Issues
> Subject: Sunbelt forums down?
>  
> I?m trying to get into the forums to post a question, but it?s not 
> loading up. Anyone else having problems? I tried 
?downforeveryoneorjustme.com
> ? but I?m not sure I got the correct URL.
>  
> [image removed] [image removed] 
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
> 
> 

> -- 
> Sherry Abercrombie
> 
> "Any sufficiently advanced technology is indistinguishable from magic." 
> Arthur C. Clarke
>  
>  
> 
>  
>  
> 
> 
> 
> -- 
> Sherry Abercrombie
> 
> "Any sufficiently advanced technology is indistinguishable from magic." 
> Arthur C. Clarke
>  
>  
> 
> 
> 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: [OT] RE: Sunbelt forums down?

[Jon Harris]

Best to just stay away from that type of person.  You lose no matter what.

Jon

On Fri, May 7, 2010 at 3:56 PM, Sherry Abercrombie wrote:

> Yeah, she's got issues, and this particular one was over an estate worth
> less that 20K.  My husband signed off on any claim to it because the hassle
> just wasn't worth the money
>
>
> On Fri, May 7, 2010 at 2:35 PM, Jon Harris  wrote:
>
>> Her loss.
>>
>> Jon
>>
>>   On Fri, May 7, 2010 at 3:16 PM, Sherry Abercrombie 
>> wrote:
>>
>>> Isn't that de-friend?  I dunno, I was de-friended/un-friended on FB by my
>>> s-i-l.I wasn't very devastated ;)
>>>
>>>
>>> On Fri, May 7, 2010 at 1:30 PM, Andy Shook wrote:
>>>
  Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
 Facebook and I would be devastated.



 Shook



 *From:* Michael B. Smith [mailto:mich...@smithcons.com]
 *Sent:* Friday, May 07, 2010 2:26 PM

 *To:* NT System Admin Issues
 *Subject:* [OT] RE: Sunbelt forums down?



 You just wish you’d thought of it first. J



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com 



 *From:* Andy Shook [mailto:andy.sh...@peak10.com]
 *Sent:* Friday, May 07, 2010 2:24 PM
 *To:* NT System Admin Issues
 *Subject:* RE: Sunbelt forums down?



 That wasn’t nice, brother.



 Shook



 *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
 *Sent:* Friday, May 07, 2010 2:22 PM
 *To:* NT System Admin Issues
 *Subject:* RE: Sunbelt forums down?



 Nah, it was just running a scan with definition versions 6272, 6273 or
 6274   J



 *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
 *Sent:* Friday, May 07, 2010 1:00 PM
 *To:* NT System Admin Issues
 *Subject:* RE: Sunbelt forums down?



 Our server looks to be in need of an upgrade… that will happen this
 weekend.



 *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
 *Sent:* Friday, May 07, 2010 10:35 AM
 *To:* NT System Admin Issues
 *Subject:* Sunbelt forums down?



 I’m trying to get into the forums to post a question, but it’s not
 loading up. Anyone else having problems? I tried “
 downforeveryoneorjustme.com” but I’m not sure I got the correct URL.



 [image: John-Aldrich][image: Tile-Tools]




























>>>
>>>
>>> --
>>> Sherry Abercrombie
>>>
>>> "Any sufficiently advanced technology is indistinguishable from magic."
>>> Arthur C. Clarke
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>>
>>
>>
>
>
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: [OT] RE: Sunbelt forums down?

[Sherry Abercrombie]

Yeah, she's got issues, and this particular one was over an estate worth
less that 20K.  My husband signed off on any claim to it because the hassle
just wasn't worth the money

On Fri, May 7, 2010 at 2:35 PM, Jon Harris  wrote:

> Her loss.
>
> Jon
>
> On Fri, May 7, 2010 at 3:16 PM, Sherry Abercrombie wrote:
>
>> Isn't that de-friend?  I dunno, I was de-friended/un-friended on FB by my
>> s-i-l.I wasn't very devastated ;)
>>
>>
>> On Fri, May 7, 2010 at 1:30 PM, Andy Shook  wrote:
>>
>>>  Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
>>> Facebook and I would be devastated.
>>>
>>>
>>>
>>> Shook
>>>
>>>
>>>
>>> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
>>> *Sent:* Friday, May 07, 2010 2:26 PM
>>>
>>> *To:* NT System Admin Issues
>>> *Subject:* [OT] RE: Sunbelt forums down?
>>>
>>>
>>>
>>> You just wish you’d thought of it first. J
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Michael B. Smith
>>>
>>> Consultant and Exchange MVP
>>>
>>> http://TheEssentialExchange.com 
>>>
>>>
>>>
>>> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
>>> *Sent:* Friday, May 07, 2010 2:24 PM
>>> *To:* NT System Admin Issues
>>> *Subject:* RE: Sunbelt forums down?
>>>
>>>
>>>
>>> That wasn’t nice, brother.
>>>
>>>
>>>
>>> Shook
>>>
>>>
>>>
>>> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
>>> *Sent:* Friday, May 07, 2010 2:22 PM
>>> *To:* NT System Admin Issues
>>> *Subject:* RE: Sunbelt forums down?
>>>
>>>
>>>
>>> Nah, it was just running a scan with definition versions 6272, 6273 or
>>> 6274   J
>>>
>>>
>>>
>>> *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
>>> *Sent:* Friday, May 07, 2010 1:00 PM
>>> *To:* NT System Admin Issues
>>> *Subject:* RE: Sunbelt forums down?
>>>
>>>
>>>
>>> Our server looks to be in need of an upgrade… that will happen this
>>> weekend.
>>>
>>>
>>>
>>> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
>>> *Sent:* Friday, May 07, 2010 10:35 AM
>>> *To:* NT System Admin Issues
>>> *Subject:* Sunbelt forums down?
>>>
>>>
>>>
>>> I’m trying to get into the forums to post a question, but it’s not
>>> loading up. Anyone else having problems? I tried “
>>> downforeveryoneorjustme.com” but I’m not sure I got the correct URL.
>>>
>>>
>>>
>>> [image: John-Aldrich][image: Tile-Tools]
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> --
>> Sherry Abercrombie
>>
>> "Any sufficiently advanced technology is indistinguishable from magic."
>> Arthur C. Clarke
>>
>>
>>
>>
>>
>>
>
>
>
>
>


-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic."
Arthur C. Clarke

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Tool to find wireless password

[Steven M. Caesare]

http://tinyurl.com/2alwuyg

 

-sc

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 3:53 PM
To: NT System Admin Issues
Subject: Tool to find wireless password

 

I've got a client on the side who I'm adding wireless to his desktop for
him. I don't know if he knows the wireless passcode or not. On the off
chance he doesn't, I know there are some tools to "crack" the passcode
on a machine that has it already. Can anyone point this out to me?

 

Thanks!

 

  

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: Tool to find wireless password

[Richard Stovall]

Try this.
http://www.nirsoft.net/utils/wireless_key.html


On Fri, May 7, 2010 at 3:52 PM, John Aldrich
wrote:

>  I’ve got a client on the side who I’m adding wireless to his desktop for
> him. I don’t know if he knows the wireless passcode or not. On the off
> chance he doesn’t, I know there are some tools to “crack” the passcode on a
> machine that has it already. Can anyone point this out to me?
>
>
>
> Thanks!
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Tool to find wireless password

[David W. McSpadden]

Airshark?

Wireshark?

 

 

  _  

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 3:53 PM
To: NT System Admin Issues
Subject: Tool to find wireless password

 

I've got a client on the side who I'm adding wireless to his desktop for
him. I don't know if he knows the wireless passcode or not. On the off
chance he doesn't, I know there are some tools to "crack" the passcode on a
machine that has it already. Can anyone point this out to me?

 

Thanks!

 

  

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Tool to find wireless password

[John Aldrich]

I've got a client on the side who I'm adding wireless to his desktop for
him. I don't know if he knows the wireless passcode or not. On the off
chance he doesn't, I know there are some tools to "crack" the passcode on a
machine that has it already. Can anyone point this out to me?

 

Thanks!

 

John-AldrichTile-Tools

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: Virpe does NOT reboot client machines

[Sherry Abercrombie]

When I was deploying Vipre there were a few workstations that it did not
reboot automatically on.  I never determined a specific reason, some were XP
SP2 workstations and that was my primary suspect, but I never really looked
very had for an answer, just did a manual reboot, and went on my way.
Probably 5 or less workstations out of 350 or so deployed to, I didn't think
it was worth the time to find out why.

On Fri, May 7, 2010 at 2:35 PM, John Aldrich
wrote:

>  I am pretty sure I have the firewall disabled on our desktop machines. I
> just tried it with my laptop and Vipre **seems** to have successfully
> rebooted it. Very odd….
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
> *From:* Jeff Cain [mailto:je...@sunbelt-software.com]
> *Sent:* Friday, May 07, 2010 3:00 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> Something (like a firewall) may be blocking the remote call… I believe
> it(Windows) uses port 135/139 for the calls. You can try to telnet  IP> 135 (and then 139) and see if it opens a connection?
>
>
>
> Thanks,
> Jeff Cain
>
> Technical Support Analyst
> Sunbelt Software
> Email: supp...@sunbeltsoftware.com
> Voice: 1-877-673-1153
> Fax:   1-727-562-5199
> Web: 
> Physical Address:
> 33 N Garden Ave
> Suite 1200
> Clearwater, FL  33755
> United States
>
> 
> If you do not want further email from us, please forward
> this message to listmana...@sunbelt-software.com with
> the word 'unsubscribe' in the subject of your email.
> 
>
> *Helpful Sunbelt Software Links:*
>
>
>
> Knowledge Base 
>
> Open a New Support Ticket
>
> Sunbelt Software Product Support 
> Communities
>
>
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 2:57 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> Yes and yes.
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
> *From:* Jeff Cain [mailto:je...@sunbelt-software.com]
> *Sent:* Friday, May 07, 2010 2:55 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> John,
>
>
>
> The remote shutdown command just issues an SCM call to do the
> reboot. I assume that you’re logged in and using the console as a domain
> admin, and that domain admin has admin rights on the remote machine?
>
>
>
> Thanks,
> Jeff Cain
>
> Technical Support Analyst
> Sunbelt Software
> Email: supp...@sunbeltsoftware.com
> Voice: 1-877-673-1153
> Fax:   1-727-562-5199
> Web: 
> Physical Address:
> 33 N Garden Ave
> Suite 1200
> Clearwater, FL  33755
> United States
>
> 
> If you do not want further email from us, please forward
> this message to listmana...@sunbelt-software.com with
> the word 'unsubscribe' in the subject of your email.
> 
>
> *Helpful Sunbelt Software Links:*
>
>
>
> Knowledge Base 
>
> Open a New Support Ticket
>
> Sunbelt Software Product Support 
> Communities
>
>
>
>
>
> *From:* John Leto [mailto:jo...@colonialsavings.com]
> *Sent:* Friday, May 07, 2010 2:47 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> And good luck getting through on the support line. I’ve tried two different
> times, the hold times are out of control again.
>
>
>
> *From:* Jonathan Link [mailto:jonathan.l...@gmail.com]
> *Sent:* Friday, May 07, 2010 1:45 PM
> *To:* NT System Admin Issues
> *Subject:* Re: Virpe does NOT reboot client machines
>
>
>
> I would suggest waiting until you can get on that forum. :-)
>
> On Fri, May 7, 2010 at 2:43 PM, John Aldrich 
> wrote:
>
> Well, if I **could** get on the forum, I’d ask. J
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
> *Sent:* Friday, May 07, 2010 2:36 PM
>
>
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> HeckifIknow. Call or email support, or ask the question on THAT forum. :-P
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com 
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 2:34 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> Well, that may very well work, but why does Vipre offer the option to
> remotely restart a computer if it’s not really doing to do it? I’ll 

RE: Computers becoming unresponsive accross entire network.

[John Aldrich]

FWIW, I had a few computers that I was notified of having problems,
essentially becoming unresponsive and the best solution I was able to come
up with was to restart the computer as I was not able to get into the
management console on these machines to shut down/restart the SBAM service,
nor was I able to successfully shut down the service from the Enterprise
console. However, rebooting the computers (NOT computers which were
scanning, mind, just computers that had active protection enabled and who’s
users were going about their everyday business) allowed the machines to
update the definitions.

 

John-AldrichTile-Tools

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, May 07, 2010 3:01 PM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

 

Thanks for the update, Alex.


-ASB: http://XeeSM.com/AndrewBaker



On Fri, May 7, 2010 at 1:40 PM, Alex Eckelberry 
wrote:

Just to clarify for everyone, what happened was the following:

Customers running a scan with definition versions 6272, 6273 or 6274 would
often experience extremely high CPU usage when running a scan.

This became apparent when agents started running scans, in most cases at 1
AM EDT (the default time).  If an agent didn't run a scan, nothing happened.

The issue started with definition 6272, released yesterday evening. The
issue was caused by a virus detection (Virus.VBS.Redlof.f) that caused a
loop condition when hitting a file of a certain type and size. This problem
was fixed in definitions version 6275, which was released at 10:30 am EDT
this morning.

As the KB below explains, getting out of this loop state required killing
the service, or shutting down VIPRE.

http://support.sunbeltsoftware.com/Default.aspx?answerid=2015

Yes, it sucks.  The only positive thing I can look at is that a number of
systems kicked in internally that were not there in the past and we were
able to fix the problem in a few minutes and release defs once our engineers
diagnosed the problem.

And yes, we do test each definition that go out.  The problem with this one
was that the loop condition kicks in on a file of a certain size that is not
in our test bed.  We are expanding our test-bed and seeing what else we can
do to mitigate this type of thing from happening again.


Alex

Alex Eckelberry, CEO
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com
w: www.sunbeltsoftware.com b: www.sunbeltblog.com

 






-Original Message-
From: Greg Olson [mailto:gol...@markettools.com]
Sent: Friday, May 07, 2010 1:05 PM
To: NT System Admin Issues

Subject: RE: Computers becoming unresponsive accross entire network.

No Vipre.
:)

-Original Message-
From: HELP_PC [mailto:g...@enter.it]
Sent: Friday, May 07, 2010 10:04 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


With SEP ?


GuidoElia
HELPPC

-Messaggio originale-
Da: Greg Olson [mailto:gol...@markettools.com]
Inviato: venerdì 7 maggio 2010 18.57
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Lucky you are sir.
I've got entire offices down, servers offline, and all kinds of joy.
Updating them is becoming a goto each and try to run a manual update. Which
is only working sometimes. Machines are so horked up that we're rebooting
into safe mode, and updating from there.
-Greg


-Original Message-
From: HELP_PC [mailto:g...@enter.it]
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection !


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com]
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this
year alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since
about 7:00AM random machines on the Local Network have been slipping into
and out of a random state of unresponsiveness ("Freezing").

The symptoms are pretty serious - I have seen it take up to 5 minutes to
bring an already open window from the background to the foreground on client
machines - and there are servers that are so unresponsive that I am not even
able to log into them (enter Username and Password and nothing happens for
the next 30min.). We have had to cold boot one server 3 times in the past
hour!

This problem is not specific to any user, profile, machine, OS, network
switch, et

Re: [OT] RE: Sunbelt forums down?

[Jon Harris]

Her loss.

Jon

On Fri, May 7, 2010 at 3:16 PM, Sherry Abercrombie wrote:

> Isn't that de-friend?  I dunno, I was de-friended/un-friended on FB by my
> s-i-l.I wasn't very devastated ;)
>
>
> On Fri, May 7, 2010 at 1:30 PM, Andy Shook  wrote:
>
>>  Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
>> Facebook and I would be devastated.
>>
>>
>>
>> Shook
>>
>>
>>
>> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
>> *Sent:* Friday, May 07, 2010 2:26 PM
>>
>> *To:* NT System Admin Issues
>> *Subject:* [OT] RE: Sunbelt forums down?
>>
>>
>>
>> You just wish you’d thought of it first. J
>>
>>
>>
>> Regards,
>>
>>
>>
>> Michael B. Smith
>>
>> Consultant and Exchange MVP
>>
>> http://TheEssentialExchange.com 
>>
>>
>>
>> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
>> *Sent:* Friday, May 07, 2010 2:24 PM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Sunbelt forums down?
>>
>>
>>
>> That wasn’t nice, brother.
>>
>>
>>
>> Shook
>>
>>
>>
>> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
>> *Sent:* Friday, May 07, 2010 2:22 PM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Sunbelt forums down?
>>
>>
>>
>> Nah, it was just running a scan with definition versions 6272, 6273 or
>> 6274   J
>>
>>
>>
>> *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
>> *Sent:* Friday, May 07, 2010 1:00 PM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Sunbelt forums down?
>>
>>
>>
>> Our server looks to be in need of an upgrade… that will happen this
>> weekend.
>>
>>
>>
>> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
>> *Sent:* Friday, May 07, 2010 10:35 AM
>> *To:* NT System Admin Issues
>> *Subject:* Sunbelt forums down?
>>
>>
>>
>> I’m trying to get into the forums to post a question, but it’s not loading
>> up. Anyone else having problems? I tried “downforeveryoneorjustme.com”
>> but I’m not sure I got the correct URL.
>>
>>
>>
>> [image: John-Aldrich][image: Tile-Tools]
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[John Aldrich]

I am pretty sure I have the firewall disabled on our desktop machines. I
just tried it with my laptop and Vipre *seems* to have successfully rebooted
it. Very odd..

 

John-AldrichTile-Tools

 

From: Jeff Cain [mailto:je...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 3:00 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Something (like a firewall) may be blocking the remote call. I believe
it(Windows) uses port 135/139 for the calls. You can try to telnet  135 (and then 139) and see if it opens a connection?

 

Thanks,
Jeff Cain

Technical Support Analyst
Sunbelt Software
Email:   supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: <  http://www.sunbeltsoftware.com>
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States


If you do not want further email from us, please forward
this message to  
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.


Helpful Sunbelt Software Links:

 

  Knowledge Base

  Open a New Support Ticket

  Sunbelt Software Product
Support Communities

 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:57 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Yes and yes.

 

John-AldrichTile-Tools

 

From: Jeff Cain [mailto:je...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 2:55 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

John,

 

The remote shutdown command just issues an SCM call to do the
reboot. I assume that you're logged in and using the console as a domain
admin, and that domain admin has admin rights on the remote machine?

 

Thanks,
Jeff Cain

Technical Support Analyst
Sunbelt Software
Email:   supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: <  http://www.sunbeltsoftware.com>
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States


If you do not want further email from us, please forward
this message to  
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.


Helpful Sunbelt Software Links:

 

  Knowledge Base

  Open a New Support Ticket

  Sunbelt Software Product
Support Communities

 

 

From: John Leto [mailto:jo...@colonialsavings.com] 
Sent: Friday, May 07, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

And good luck getting through on the support line. I've tried two different
times, the hold times are out of control again.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, May 07, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: Virpe does NOT reboot client machines

 

I would suggest waiting until you can get on that forum. :-)

On Fri, May 7, 2010 at 2:43 PM, John Aldrich 
wrote:

Well, if I *could* get on the forum, I'd ask. J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:36 PM 


To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

HeckifIknow. Call or email support, or ask the question on THAT forum. :-P

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com  

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Well, that may very well work, but why does Vipre offer the option to
remotely restart a computer if it's not really doing to do it? I'll give
that a shot next time, fwiw, but I'd like to know the answer to my question.
J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Shutdown -r -f -t 0 -m \\computername  

 

Seems to work pretty well, IME.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com  

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Ad

Re: Computers becoming unresponsive accross entire network.

[Jon Harris]

PLEASE no!!!  Not that the office is rolling out upgrades on Trend and I
don't need another night of headaches.

Jon

On Fri, May 7, 2010 at 11:47 AM, David W. McSpadden  wrote:

> Ok.  That is two bad defs in two weeks?
>
> 1 Vipre
> 1 McAfee?
> Next is Trend?
>
> -Original Message-
> From: Luke [mailto:tesla...@gmail.com]
> Sent: Friday, May 07, 2010 11:45 AM
> To: NT System Admin Issues
> Subject: RE: Computers becoming unresponsive accross entire network.
>
> Turned out to be a bad Deff. Bad def = 6274.
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: 24 hour time format

[joseph palmieri]

thanks...I will test and post the results next week

--- On Fri, 5/7/10, Raper, Jonathan - Eagle  wrote:


From: Raper, Jonathan - Eagle 
Subject: RE: 24 hour time format
To: "NT System Admin Issues" 
Date: Friday, May 7, 2010, 3:16 PM


Admittedly, after thinking about it, there is indeed a faster, more elegant way 
to do this, which I've included further down. However, after doing some testing 
of my own, I don't see why my basic concept of what I described wouldn't work. 
In the process, I discovered a second key that would need to be changed in 
order for the time to display as desired in the system tray.

I was able to export the entire HKEY_USERS Hive into a reg file on one machine 
in a matter of seconds - maybe 2 minutes, tops, for a system that has more than 
40 unique local user accounts. (Admittedly, just as I imagined, the file is 
rather large - 150 Megs, roughly). I was able to do a very basic FIND/REPLACE 
ALL from within notepad for "iTime"="0" and change it to "iTime"="1", which is 
what is required to change the format from 12 hour to 24 hour format. Also, you 
would need to FIND/REPLACE "sTimeFormat"="h:mm:ss tt" with 
"sTimeFormat"="HH:mm:ss".

Now I would CERTAINLY NOT recommend re-importing the entire hive after doing 
what I just described. However, a more robust text editor and/or some scripting 
could modify the reg file in order to get the desired result.

Anyway, as I mentioned, there is a faster, more elegant solution, and here it 
is:


DISCLAIMER: I HIGHLY RECOMMEND FULLY TSETING THIS FIRST, as YMMV.
I AM NOT RESPONSIBLE IF YOU HOSE YOUR SYSTEM. USE AT YOUR OWN RISK.


Open a command prompt on the target machine. Type:

reg /query HKU >sidlist.txt

This will generate a text file containing a list of every sid in the registry:

! REG.EXE VERSION 3.0

HKEY_USERS
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-19_Classes
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-20_Classes
HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006
HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006_Classes
HKEY_USERS\S-1-5-18

Eliminate the sids that end in _Classes, and then format the file to look like 
this and save as .reg:

*FILE BEGIN*

Windows Registry Editor Version 5.00 

[HKEY_USERS\.DEFAULT\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-19\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-20\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006\Control 
Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-18\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

*FILE END*

Once saved, import the registry file, and log off. Log back on, and see what 
the time looks like. I think you'll be pleased.

Hope this helps.

Cheers!

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians & Associates, PA
jra...@eaglemds.com
www.eaglemds.com 


-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com] 
Sent: Thursday, May 06, 2010 11:27 PM
To: NT System Admin Issues
Subject: RE: 24 hour time format

No that's not going to work well at all. 

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132


-Original Message-
From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] 
Sent: Thursday, May 06, 2010 8:19 PM
To: NT System Admin Issues
Subject: RE: 24 hour time format

Hjust a thought. Export the entire HK_USERS hive (can you export an 
entire hive?) to a reg file. (I know, I know, it will be big, but hear me out). 
Find/replace in the reg file with txt editor, then upload the file back...

Jonathan L. Raper, MCSE

Sent from my Windows Mobile ® enabled Smartphone, WHICH WILL LIKELY SOON BE 
REPLACED BY A DROID. Please excuse brevity & any misspellings.




From: joseph palmieri 
Sent: Thursday, May 06, 2010 6:37 PM
To: NT System Admin Issues 
Subject: Re: 24 hour time format

not looking forward to that

--- On Thu, 5/6/10, Kurt Buff  wrote:

From: Kurt Buff 
Subject: Re: 24 hour time format
To: "NT System Admin Issues" 
Date: Thursday, May 6, 2010, 5:49 PM

Looks like you have to do that for each user - I tried it for the default user, 
logged in with an account that hadn't logged in before, and got the normal 
defaults, not the ones I set up.

Kurt

On Thu, May 6, 2010 at 14:04, Raper, Jonathan - Eagle 
> wrote:
>
> You could edit the registry.
>
>
>
> http://www.windowsitpro.com/article/registry2/jsi-tip-0311-regional-se
> ttings-in-the-registry-.aspx
>
>
>
> I presume HKEY_USERS would have a user preference for the way time is 
> displayed, so you would likely have to go into each user's SID under 
> HKEY_USERS.
>
> Jonathan L. Raper, A+, MCSA, MCSE
> Technology Coordinator
> Eagle Physi

Re: [OT] RE: Sunbelt forums down?

[Sherry Abercrombie]

Isn't that de-friend?  I dunno, I was de-friended/un-friended on FB by my
s-i-l.I wasn't very devastated ;)

On Fri, May 7, 2010 at 1:30 PM, Andy Shook  wrote:

>  Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
> Facebook and I would be devastated.
>
>
>
> Shook
>
>
>
> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
> *Sent:* Friday, May 07, 2010 2:26 PM
>
> *To:* NT System Admin Issues
> *Subject:* [OT] RE: Sunbelt forums down?
>
>
>
> You just wish you’d thought of it first. J
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com
>
>
>
> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
> *Sent:* Friday, May 07, 2010 2:24 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> That wasn’t nice, brother.
>
>
>
> Shook
>
>
>
> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
> *Sent:* Friday, May 07, 2010 2:22 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> Nah, it was just running a scan with definition versions 6272, 6273 or
> 6274   J
>
>
>
> *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
> *Sent:* Friday, May 07, 2010 1:00 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> Our server looks to be in need of an upgrade… that will happen this
> weekend.
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 10:35 AM
> *To:* NT System Admin Issues
> *Subject:* Sunbelt forums down?
>
>
>
> I’m trying to get into the forums to post a question, but it’s not loading
> up. Anyone else having problems? I tried “downforeveryoneorjustme.com” but
> I’m not sure I got the correct URL.
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>


-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic."
Arthur C. Clarke

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: 24 hour time format

[Raper, Jonathan - Eagle]

Admittedly, after thinking about it, there is indeed a faster, more elegant way 
to do this, which I've included further down. However, after doing some testing 
of my own, I don't see why my basic concept of what I described wouldn't work. 
In the process, I discovered a second key that would need to be changed in 
order for the time to display as desired in the system tray.

I was able to export the entire HKEY_USERS Hive into a reg file on one machine 
in a matter of seconds - maybe 2 minutes, tops, for a system that has more than 
40 unique local user accounts. (Admittedly, just as I imagined, the file is 
rather large - 150 Megs, roughly). I was able to do a very basic FIND/REPLACE 
ALL from within notepad for "iTime"="0" and change it to "iTime"="1", which is 
what is required to change the format from 12 hour to 24 hour format. Also, you 
would need to FIND/REPLACE "sTimeFormat"="h:mm:ss tt" with 
"sTimeFormat"="HH:mm:ss".

Now I would CERTAINLY NOT recommend re-importing the entire hive after doing 
what I just described. However, a more robust text editor and/or some scripting 
could modify the reg file in order to get the desired result.

Anyway, as I mentioned, there is a faster, more elegant solution, and here it 
is:


DISCLAIMER: I HIGHLY RECOMMEND FULLY TSETING THIS FIRST, as YMMV.
I AM NOT RESPONSIBLE IF YOU HOSE YOUR SYSTEM. USE AT YOUR OWN RISK.


Open a command prompt on the target machine. Type:

reg /query HKU >sidlist.txt

This will generate a text file containing a list of every sid in the registry:

! REG.EXE VERSION 3.0

HKEY_USERS
HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-19_Classes
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-20_Classes
HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006
HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006_Classes
HKEY_USERS\S-1-5-18

Eliminate the sids that end in _Classes, and then format the file to look like 
this and save as .reg:

*FILE BEGIN*

Windows Registry Editor Version 5.00 

[HKEY_USERS\.DEFAULT\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-19\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-20\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-21-839522115-688789844-1708537768-1006\Control 
Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

[HKEY_USERS\S-1-5-18\Control Panel\International]
"iTime"="1"
"sTimeFormat"="HH:mm:ss"

*FILE END*

Once saved, import the registry file, and log off. Log back on, and see what 
the time looks like. I think you'll be pleased.

Hope this helps.

Cheers!

Jonathan L. Raper, A+, MCSA, MCSE
Technology Coordinator
Eagle Physicians & Associates, PA
jra...@eaglemds.com
www.eaglemds.com 


-Original Message-
From: Brian Desmond [mailto:br...@briandesmond.com] 
Sent: Thursday, May 06, 2010 11:27 PM
To: NT System Admin Issues
Subject: RE: 24 hour time format

No that's not going to work well at all. 

Thanks,
Brian Desmond
br...@briandesmond.com

c   - 312.731.3132


-Original Message-
From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] 
Sent: Thursday, May 06, 2010 8:19 PM
To: NT System Admin Issues
Subject: RE: 24 hour time format

Hjust a thought. Export the entire HK_USERS hive (can you export an 
entire hive?) to a reg file. (I know, I know, it will be big, but hear me out). 
Find/replace in the reg file with txt editor, then upload the file back...

Jonathan L. Raper, MCSE

Sent from my Windows Mobile ® enabled Smartphone, WHICH WILL LIKELY SOON BE 
REPLACED BY A DROID. Please excuse brevity & any misspellings.




From: joseph palmieri 
Sent: Thursday, May 06, 2010 6:37 PM
To: NT System Admin Issues 
Subject: Re: 24 hour time format

not looking forward to that

--- On Thu, 5/6/10, Kurt Buff  wrote:

From: Kurt Buff 
Subject: Re: 24 hour time format
To: "NT System Admin Issues" 
Date: Thursday, May 6, 2010, 5:49 PM

Looks like you have to do that for each user - I tried it for the default user, 
logged in with an account that hadn't logged in before, and got the normal 
defaults, not the ones I set up.

Kurt

On Thu, May 6, 2010 at 14:04, Raper, Jonathan - Eagle 
> wrote:
>
> You could edit the registry.
>
>
>
> http://www.windowsitpro.com/article/registry2/jsi-tip-0311-regional-se
> ttings-in-the-registry-.aspx
>
>
>
> I presume HKEY_USERS would have a user preference for the way time is 
> displayed, so you would likely have to go into each user's SID under 
> HKEY_USERS.
>
> Jonathan L. Raper, A+, MCSA, MCSE
> Technology Coordinator
> Eagle Physicians & Associates, PA
> jra...@eaglemds.com
> www.eaglemds.com
>
> 
>
> From: joseph palmieri 
> [mailto:jpalm...@yahoo.com]
> Sent: Thursday, May 06, 2010 4:56 PM
> To: NT System Admin Issues
> Subject: R

RE: Sunbelt, McAfee, Symantec - now Clam

[Crawford, Scott]

I agree and I for one would like to hear your suggestions. It seems to
me that some form of white-listing is the most obvious alternative.
However, I really don't see how that is guaranteed to be effective.
Assume that it's possible to actually keep up with all of the software
that you DO want to run. What happens when there's a PDF exploit, or a
quicktime exploit, or an IE exploit.  All of these apps are likely to be
on a list of allowed applications, but if the data that they're
processing contains the "malness", the point of detection needs to
change.  Instead of white-listing applications, we now find ourselves
needing to white-list the actual data that they process.

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, May 07, 2010 1:59 PM
To: NT System Admin Issues
Subject: Re: Sunbelt, McAfee, Symantec - now Clam

 

First off, the ClamAV issue was somewhat mitigated by them telling
everyone to be off of v96 for a few weeks.  :)

 

But, the reality of this situation is that signature-based host-level
protection is getting to the point where the human error factor is too
high.  (I feel a blog entry coming up soon)

 

In order to attack the threats that are out there, signatures need to be
updated frequently, and increasing the frequency places greater burden
on the QA process, and increases the risk of a self-inflicted DoS.

 

What this signifies is that we need to start demanding a different
approach to host-based protection *as the norm*, because there is now as
great a chance that your system can be made ineffective from an AV
update as from an actual piece of malware.

 

AV in its current form really has to die, as there is no way for the
good guys to keep up with the bad guys, leaving us vulnerable to even
more foolishness from creative bad guys.


-ASB: http://XeeSM.com/AndrewBaker



On Fri, May 7, 2010 at 1:27 PM, Kurt Buff  wrote:

-  Original Message 
Subject: [Clamav-announce] problem with daily.cvd 10938
Date: Fri, 7 May 2010 13:06:56 +0200
From: Luca Gibelli 
Reply-To: nore...@clamav.net
To: ClamAV Announce 

Dear ClamAV users,

about 15 mins ago we released daily.cvd 10938. This update apparently
caused a segmentation fault in all ClamAV versions older than 0.96
on 32 bit systems.

We just released daily.cvd 10939 which removes the faulty signature and
we have taken measures to ensure that this problem won't happen again.

We recommend using a monitor tool like clamdwatch or clamdmon to
automatically restart clamd whenever it dies.

If you are already using a similar solution, your clamd will be
restarted automatically as soon as freshclam downloads the daily.cvd
10939 update.

We apologise for the inconvenience.

Regards,

- --
Luca Gibelli (luca _at_ clamav.net)   ClamAV, a GPL anti-virus
toolkit
[Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM]
nervous/jabber.linux.it
PGP key id 5EFC5582 @ any key-server ||
http://www.clamav.net/gpg/luca.gpg
___

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: NOD32 Antivirus

[Andrew S. Baker]

I just love me some good techie humor... :)

-ASB: http://XeeSM.com/AndrewBaker


On Thu, May 6, 2010 at 5:23 PM, Richard Stovall  wrote:

> Indeed.  http://www.faqs.org/rfcs/rfc2549.html
>
> On Thu, May 6, 2010 at 4:56 PM, Micheal Espinola Jr <
> michealespin...@gmail.com> wrote:
>
>> LOL
>>
>> --
>> ME2
>>
>>
>> On Thu, May 6, 2010 at 12:53 PM, Phillip Partipilo  wrote:
>>
>>> RFC2549
>>
>>
>>
>>
>>
>>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: [OT] RE: Sunbelt forums down?

[Richard Stovall]

I just KNEW that we wouldn't get through the day without someone calling him
on that.

On Fri, May 7, 2010 at 3:03 PM, Micheal Espinola Jr <
michealespin...@gmail.com> wrote:

> That on-top of not being offered to try Michael's tool (from another
> thread)...
>
> --
> ME2
>
>
>
> On Fri, May 7, 2010 at 11:46 AM, Kim Longenbaugh  > wrote:
>
>>  I wasn’t bashing them, I was just trying to inject some humor into an
>> unpleasant situation.  I think Michael is right, you’re just jealous ‘cause
>> you didn’t think of it first.  J
>>
>>
>>
>> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
>> *Sent:* Friday, May 07, 2010 1:30 PM
>>
>> *To:* NT System Admin Issues
>> *Subject:* RE: [OT] RE: Sunbelt forums down?
>>
>>
>>
>> Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
>> Facebook and I would be devastated.
>>
>>
>>
>> Shook
>>
>>
>>
>> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
>> *Sent:* Friday, May 07, 2010 2:26 PM
>> *To:* NT System Admin Issues
>> *Subject:* [OT] RE: Sunbelt forums down?
>>
>>
>>
>> You just wish you’d thought of it first. J
>>
>>
>>
>> Regards,
>>
>>
>>
>> Michael B. Smith
>>
>> Consultant and Exchange MVP
>>
>> http://TheEssentialExchange.com
>>
>>
>>
>> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
>> *Sent:* Friday, May 07, 2010 2:24 PM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Sunbelt forums down?
>>
>>
>>
>> That wasn’t nice, brother.
>>
>>
>>
>> Shook
>>
>>
>>
>> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
>> *Sent:* Friday, May 07, 2010 2:22 PM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Sunbelt forums down?
>>
>>
>>
>> Nah, it was just running a scan with definition versions 6272, 6273 or
>> 6274   J
>>
>>
>>
>> *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
>> *Sent:* Friday, May 07, 2010 1:00 PM
>> *To:* NT System Admin Issues
>> *Subject:* RE: Sunbelt forums down?
>>
>>
>>
>> Our server looks to be in need of an upgrade… that will happen this
>> weekend.
>>
>>
>>
>> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
>> *Sent:* Friday, May 07, 2010 10:35 AM
>> *To:* NT System Admin Issues
>> *Subject:* Sunbelt forums down?
>>
>>
>>
>> I’m trying to get into the forums to post a question, but it’s not loading
>> up. Anyone else having problems? I tried “downforeveryoneorjustme.com”
>> but I’m not sure I got the correct URL.
>>
>>
>>
>> [image: John-Aldrich][image: Tile-Tools]
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: [OT] RE: Sunbelt forums down?

[Michael B. Smith]

O.
M.
G.

I'll never use that phrase again in my life.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Friday, May 07, 2010 3:03 PM
To: NT System Admin Issues
Subject: Re: [OT] RE: Sunbelt forums down?

That on-top of not being offered to try Michael's tool (from another thread)...

--
ME2

On Fri, May 7, 2010 at 11:46 AM, Kim Longenbaugh 
mailto:k...@colonialsavings.com>> wrote:
I wasn't bashing them, I was just trying to inject some humor into an 
unpleasant situation.  I think Michael is right, you're just jealous 'cause you 
didn't think of it first.  :)

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, May 07, 2010 1:30 PM

To: NT System Admin Issues
Subject: RE: [OT] RE: Sunbelt forums down?

Naw, I'll never bash the Clearwater crew. Alex would un-friend me on Facebook 
and I would be devastated.

Shook

From: Michael B. Smith 
[mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:26 PM
To: NT System Admin Issues
Subject: [OT] RE: Sunbelt forums down?

You just wish you'd thought of it first. :)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, May 07, 2010 2:24 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

That wasn't nice, brother.

Shook

From: Kim Longenbaugh 
[mailto:k...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:22 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Nah, it was just running a scan with definition versions 6272, 6273 or 6274   :)

From: Alex Eckelberry 
[mailto:al...@sunbelt-software.com]
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Our server looks to be in need of an upgrade... that will happen this weekend.

From: John Aldrich 
[mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

I'm trying to get into the forums to post a question, but it's not loading up. 
Anyone else having problems? I tried 
"downforeveryoneorjustme.com" but I'm not 
sure I got the correct URL.

[John-Aldrich][Tile-Tools]



































~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: [OT] RE: Sunbelt forums down?

[Micheal Espinola Jr]

Hear, hear...

--
ME2


On Fri, May 7, 2010 at 12:02 PM, Andrew S. Baker  wrote:

>
> You guys need to lead the charge away from AV as we know it.  Soon.
>
> -ASB: http://XeeSM.com/AndrewBaker
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: [OT] RE: Sunbelt forums down?

[Micheal Espinola Jr]

That on-top of not being offered to try Michael's tool (from another
thread)...

--
ME2


On Fri, May 7, 2010 at 11:46 AM, Kim Longenbaugh
wrote:

>  I wasn’t bashing them, I was just trying to inject some humor into an
> unpleasant situation.  I think Michael is right, you’re just jealous ‘cause
> you didn’t think of it first.  J
>
>
>
> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
> *Sent:* Friday, May 07, 2010 1:30 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: [OT] RE: Sunbelt forums down?
>
>
>
> Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
> Facebook and I would be devastated.
>
>
>
> Shook
>
>
>
> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
> *Sent:* Friday, May 07, 2010 2:26 PM
> *To:* NT System Admin Issues
> *Subject:* [OT] RE: Sunbelt forums down?
>
>
>
> You just wish you’d thought of it first. J
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com
>
>
>
> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
> *Sent:* Friday, May 07, 2010 2:24 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> That wasn’t nice, brother.
>
>
>
> Shook
>
>
>
> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
> *Sent:* Friday, May 07, 2010 2:22 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> Nah, it was just running a scan with definition versions 6272, 6273 or
> 6274   J
>
>
>
> *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
> *Sent:* Friday, May 07, 2010 1:00 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> Our server looks to be in need of an upgrade… that will happen this
> weekend.
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 10:35 AM
> *To:* NT System Admin Issues
> *Subject:* Sunbelt forums down?
>
>
>
> I’m trying to get into the forums to post a question, but it’s not loading
> up. Anyone else having problems? I tried “downforeveryoneorjustme.com” but
> I’m not sure I got the correct URL.
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: [OT] RE: Sunbelt forums down?

[Andrew S. Baker]

Especially on a day like today, you mean. :)

You guys need to lead the charge away from AV as we know it.  Soon.

-ASB: http://XeeSM.com/AndrewBaker


On Fri, May 7, 2010 at 2:52 PM, Alex Eckelberry
wrote:

>  Hey, I put my head up, I expect some bullets.  And if they’re funny
> bullets, all the better.  I do appreciate humor, even on a day like today
> ;-)
>
>
>
>
>
>
>
> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
> *Sent:* Friday, May 07, 2010 2:47 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: [OT] RE: Sunbelt forums down?
>
>
>
> I wasn’t bashing them, I was just trying to inject some humor into an
> unpleasant situation.  I think Michael is right, you’re just jealous ‘cause
> you didn’t think of it first.  J
>
>
>
> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
> *Sent:* Friday, May 07, 2010 1:30 PM
> *To:* NT System Admin Issues
> *Subject:* RE: [OT] RE: Sunbelt forums down?
>
>
>
> Naw, I’ll never bash the Clearwater crew. Alex would un-friend me on
> Facebook and I would be devastated.
>
>
>
> Shook
>
>
>
> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
> *Sent:* Friday, May 07, 2010 2:26 PM
> *To:* NT System Admin Issues
> *Subject:* [OT] RE: Sunbelt forums down?
>
>
>
> You just wish you’d thought of it first. J
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com
>
>
>
> *From:* Andy Shook [mailto:andy.sh...@peak10.com]
> *Sent:* Friday, May 07, 2010 2:24 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> That wasn’t nice, brother.
>
>
>
> Shook
>
>
>
> *From:* Kim Longenbaugh [mailto:k...@colonialsavings.com]
> *Sent:* Friday, May 07, 2010 2:22 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> Nah, it was just running a scan with definition versions 6272, 6273 or
> 6274   J
>
>
>
> *From:* Alex Eckelberry [mailto:al...@sunbelt-software.com]
> *Sent:* Friday, May 07, 2010 1:00 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Sunbelt forums down?
>
>
>
> Our server looks to be in need of an upgrade… that will happen this
> weekend.
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 10:35 AM
> *To:* NT System Admin Issues
> *Subject:* Sunbelt forums down?
>
>
>
> I’m trying to get into the forums to post a question, but it’s not loading
> up. Anyone else having problems? I tried “downforeveryoneorjustme.com” but
> I’m not sure I got the correct URL.
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: Computers becoming unresponsive accross entire network.

[Andrew S. Baker]

Thanks for the update, Alex.

-ASB: http://XeeSM.com/AndrewBaker


On Fri, May 7, 2010 at 1:40 PM, Alex Eckelberry
wrote:

> Just to clarify for everyone, what happened was the following:
>
> Customers running a scan with definition versions 6272, 6273 or 6274 would
> often experience extremely high CPU usage when running a scan.
>
> This became apparent when agents started running scans, in most cases at 1
> AM EDT (the default time).  If an agent didn't run a scan, nothing happened.
>
> The issue started with definition 6272, released yesterday evening. The
> issue was caused by a virus detection (Virus.VBS.Redlof.f) that caused a
> loop condition when hitting a file of a certain type and size. This problem
> was fixed in definitions version 6275, which was released at 10:30 am EDT
> this morning.
>
> As the KB below explains, getting out of this loop state required killing
> the service, or shutting down VIPRE.
>
> http://support.sunbeltsoftware.com/Default.aspx?answerid=2015
>
> Yes, it sucks.  The only positive thing I can look at is that a number of
> systems kicked in internally that were not there in the past and we were
> able to fix the problem in a few minutes and release defs once our engineers
> diagnosed the problem.
>
> And yes, we do test each definition that go out.  The problem with this one
> was that the loop condition kicks in on a file of a certain size that is not
> in our test bed.  We are expanding our test-bed and seeing what else we can
> do to mitigate this type of thing from happening again.
>
>
> Alex
>
> Alex Eckelberry, CEO
> Sunbelt Software
> 33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220
> e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com
> w: www.sunbeltsoftware.com b: www.sunbeltblog.com
>
>
>
>
>
>
>
> -Original Message-
> From: Greg Olson [mailto:gol...@markettools.com]
> Sent: Friday, May 07, 2010 1:05 PM
> To: NT System Admin Issues
> Subject: RE: Computers becoming unresponsive accross entire network.
>
> No Vipre.
> :)
>
> -Original Message-
> From: HELP_PC [mailto:g...@enter.it]
> Sent: Friday, May 07, 2010 10:04 AM
> To: NT System Admin Issues
> Subject: R: Computers becoming unresponsive accross entire network.
>
>
> With SEP ?
>
>
> GuidoElia
> HELPPC
>
> -Messaggio originale-
> Da: Greg Olson [mailto:gol...@markettools.com]
> Inviato: venerdì 7 maggio 2010 18.57
> A: NT System Admin Issues
> Oggetto: RE: Computers becoming unresponsive accross entire network.
>
> Lucky you are sir.
> I've got entire offices down, servers offline, and all kinds of joy.
> Updating them is becoming a goto each and try to run a manual update. Which
> is only working sometimes. Machines are so horked up that we're rebooting
> into safe mode, and updating from there.
> -Greg
>
>
> -Original Message-
> From: HELP_PC [mailto:g...@enter.it]
> Sent: Friday, May 07, 2010 9:33 AM
> To: NT System Admin Issues
> Subject: R: Computers becoming unresponsive accross entire network.
>
>
> I feel good with my "poor" Symantec Endpoint Protection !
>
>
> GuidoElia
> HELPPC
>
> -Messaggio originale-
> Da: Carl Houseman [mailto:c.house...@gmail.com]
> Inviato: venerdì 7 maggio 2010 17.31
> A: NT System Admin Issues
> Oggetto: RE: Computers becoming unresponsive accross entire network.
>
> Already discussed in another thread, update your Vipre defs.
>
> Is anyone keeping track of the number of bad defs out of Sunbelt for this
> year alone?
>
> Carl
>
> -Original Message-
> From: Luke [mailto:tesla...@gmail.com]
> Sent: Friday, May 07, 2010 10:57 AM
> To: NT System Admin Issues
> Subject: Computers becoming unresponsive accross entire network.
>
> The Network Administrator and I have been working on this all morning.
> Since about 7:00AM random machines on the Local Network have been slipping
> into and out of a random state of unresponsiveness ("Freezing").
>
> The symptoms are pretty serious - I have seen it take up to 5 minutes to
>  bring an already open window from the background to the foreground on
> client machines - and there are servers that are so unresponsive that I am
> not even able to log into them (enter Username and Password and nothing
> happens for the next 30min.). We have had to cold boot one server 3 times in
> the past hour!
>
> This problem is not specific to any user, profile, machine, OS, network
> switch, etc. - at least from what we have been able to Identify. So far it
> has affected Windows 7, XP and Server 2003. However, this issue is not
> affecting everyone on the network. My Colleague sitting right next to me has
> been having all kinds of trouble with his PC and I have not.
>
> We have found that cold booting the affected machines does help a little or
> at least for a while, but more often than not the machine will just return
> to its unresponsive state after a few minutes. On the machines that I have
> that are accessible I am attempting scan with Vipre.
>
> We are seriously starting to suspect th

RE: Virpe does NOT reboot client machines

[Jeff Cain]

Something (like a firewall) may be blocking the remote call... I believe 
it(Windows) uses port 135/139 for the calls. You can try to telnet  
135 (and then 139) and see if it opens a connection?

Thanks,
Jeff Cain
Technical Support Analyst
Sunbelt Software
Email: supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: >
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States

If you do not want further email from us, please forward
this message to 
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.

Helpful Sunbelt Software Links:

Knowledge Base
Open a New Support Ticket
Sunbelt Software Product Support 
Communities


From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:57 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Yes and yes.

[cid:image001.jpg@01CAEDF5.F8BC7070][cid:image002@01caedf5.f8bc7070]

From: Jeff Cain [mailto:je...@sunbelt-software.com]
Sent: Friday, May 07, 2010 2:55 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

John,

The remote shutdown command just issues an SCM call to do the 
reboot. I assume that you're logged in and using the console as a domain admin, 
and that domain admin has admin rights on the remote machine?

Thanks,
Jeff Cain
Technical Support Analyst
Sunbelt Software
Email: supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: >
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States

If you do not want further email from us, please forward
this message to 
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.

Helpful Sunbelt Software Links:

Knowledge Base
Open a New Support Ticket
Sunbelt Software Product Support 
Communities


From: John Leto [mailto:jo...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

And good luck getting through on the support line. I've tried two different 
times, the hold times are out of control again.

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Friday, May 07, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: Virpe does NOT reboot client machines

I would suggest waiting until you can get on that forum. :-)
On Fri, May 7, 2010 at 2:43 PM, John Aldrich 
mailto:jaldr...@blueridgecarpet.com>> wrote:
Well, if I *could* get on the forum, I'd ask. :)

[cid:image001.jpg@01CAEDF5.F8BC7070][cid:image002@01caedf5.f8bc7070]

From: Michael B. Smith 
[mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:36 PM

To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

HeckifIknow. Call or email support, or ask the question on THAT forum. :-P

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich 
[mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Well, that may very well work, but why does Vipre offer the option to remotely 
restart a computer if it's not really doing to do it? I'll give that a shot 
next time, fwiw, but I'd like to know the answer to my question. :)

[cid:image001.jpg@01CAEDF5.F8BC7070][cid:image002@01caedf5.f8bc7070]

From: Michael B. Smith 
[mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Shutdown -r -f -t 0 -m \\computername

Seems to work pretty well, IME.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich 
[mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

Why does Vipre offer to let you reboot client machines if it's not really doing 
to do it? I've told several m

Re: Sunbelt, McAfee, Symantec - now Clam

[Andrew S. Baker]

First off, the ClamAV issue was somewhat mitigated by them telling everyone
to be off of v96 for a few weeks.  :)

But, the reality of this situation is that signature-based host-level
protection is getting to the point where the human error factor is too high.
 (I feel a blog entry coming up soon)

In order to attack the threats that are out there, signatures need to be
updated frequently, and increasing the frequency places greater burden on
the QA process, and increases the risk of a self-inflicted DoS.

What this signifies is that we need to start demanding a different approach
to host-based protection *as the norm*, because there is now as great a
chance that your system can be made ineffective from an AV update as from an
actual piece of malware.

AV in its current form really has to die, as there is no way for the good
guys to keep up with the bad guys, leaving us vulnerable to even more
foolishness from creative bad guys.

-ASB: http://XeeSM.com/AndrewBaker


On Fri, May 7, 2010 at 1:27 PM, Kurt Buff  wrote:

> -  Original Message 
> Subject: [Clamav-announce] problem with daily.cvd 10938
> Date: Fri, 7 May 2010 13:06:56 +0200
> From: Luca Gibelli 
> Reply-To: nore...@clamav.net
> To: ClamAV Announce 
>
> Dear ClamAV users,
>
> about 15 mins ago we released daily.cvd 10938. This update apparently
> caused a segmentation fault in all ClamAV versions older than 0.96
> on 32 bit systems.
>
> We just released daily.cvd 10939 which removes the faulty signature and
> we have taken measures to ensure that this problem won't happen again.
>
> We recommend using a monitor tool like clamdwatch or clamdmon to
> automatically restart clamd whenever it dies.
>
> If you are already using a similar solution, your clamd will be
> restarted automatically as soon as freshclam downloads the daily.cvd
> 10939 update.
>
> We apologise for the inconvenience.
>
> Regards,
>
> - --
> Luca Gibelli (luca _at_ clamav.net)   ClamAV, a GPL anti-virus toolkit
> [Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
> PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
> ___
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Virpe does NOT reboot client machines

[John Aldrich]

Well, as I said in response to Jeff Cain's question, I was logged onto the
Enterprise console machine as a domain admin and my domain admin user has
full rights on the client PCs. Not sure why there would be "credentialing
issues" in that case. J I'll try the shutdown command on my laptop to see if
it works when Vipre doesn't.

 

John-AldrichTile-Tools

 

From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 2:55 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

That option is designed for remotely restarting a system post an
upgrade/update to the product. 

 

That's an explanation.  As to why it's not doing it, I'm curious, can you
try a remote shutdown command and see if that does it?  It is perhaps a
credentialing issue. 

 

 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Well, that may very well work, but why does Vipre offer the option to
remotely restart a computer if it's not really doing to do it? I'll give
that a shot next time, fwiw, but I'd like to know the answer to my question.
J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Shutdown -r -f -t 0 -m \\computername  

 

Seems to work pretty well, IME.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

 

Why does Vipre offer to let you reboot client machines if it's not really
doing to do it? I've told several machines to automatically reboot and they
have not done so. I have ended up either going to the machine in question
and manually rebooting it or logging into the machine from remote and
telling it to reboot that way. 

 

John-AldrichTile-Tools

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[John Aldrich]

Yes and yes.

 

John-AldrichTile-Tools

 

From: Jeff Cain [mailto:je...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 2:55 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

John,

 

The remote shutdown command just issues an SCM call to do the
reboot. I assume that you're logged in and using the console as a domain
admin, and that domain admin has admin rights on the remote machine?

 

Thanks,
Jeff Cain

Technical Support Analyst
Sunbelt Software
Email:   supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: <  http://www.sunbeltsoftware.com>
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States


If you do not want further email from us, please forward
this message to  
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.


Helpful Sunbelt Software Links:

 

  Knowledge Base

  Open a New Support Ticket

  Sunbelt Software Product
Support Communities

 

 

From: John Leto [mailto:jo...@colonialsavings.com] 
Sent: Friday, May 07, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

And good luck getting through on the support line. I've tried two different
times, the hold times are out of control again.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, May 07, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: Virpe does NOT reboot client machines

 

I would suggest waiting until you can get on that forum. :-)

On Fri, May 7, 2010 at 2:43 PM, John Aldrich 
wrote:

Well, if I *could* get on the forum, I'd ask. J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:36 PM 


To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

HeckifIknow. Call or email support, or ask the question on THAT forum. :-P

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com  

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Well, that may very well work, but why does Vipre offer the option to
remotely restart a computer if it's not really doing to do it? I'll give
that a shot next time, fwiw, but I'd like to know the answer to my question.
J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Shutdown -r -f -t 0 -m \\computername  

 

Seems to work pretty well, IME.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com  

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

 

Why does Vipre offer to let you reboot client machines if it's not really
doing to do it? I've told several machines to automatically reboot and they
have not done so. I have ended up either going to the machine in question
and manually rebooting it or logging into the machine from remote and
telling it to reboot that way. 

 

John-AldrichTile-Tools

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

... 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[Jeff Cain]

John,

The remote shutdown command just issues an SCM call to do the 
reboot. I assume that you're logged in and using the console as a domain admin, 
and that domain admin has admin rights on the remote machine?

Thanks,
Jeff Cain
Technical Support Analyst
Sunbelt Software
Email: supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: >
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States

If you do not want further email from us, please forward
this message to 
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.

Helpful Sunbelt Software Links:

Knowledge Base
Open a New Support Ticket
Sunbelt Software Product Support 
Communities


From: John Leto [mailto:jo...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

And good luck getting through on the support line. I've tried two different 
times, the hold times are out of control again.

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Friday, May 07, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: Virpe does NOT reboot client machines

I would suggest waiting until you can get on that forum. :-)
On Fri, May 7, 2010 at 2:43 PM, John Aldrich 
mailto:jaldr...@blueridgecarpet.com>> wrote:
Well, if I *could* get on the forum, I'd ask. :)

[cid:image001.jpg@01CAEDF5.387E6B60][cid:image002@01caedf5.387e6b60]

From: Michael B. Smith 
[mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:36 PM

To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

HeckifIknow. Call or email support, or ask the question on THAT forum. :-P

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich 
[mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Well, that may very well work, but why does Vipre offer the option to remotely 
restart a computer if it's not really doing to do it? I'll give that a shot 
next time, fwiw, but I'd like to know the answer to my question. :)

[cid:image001.jpg@01CAEDF5.387E6B60][cid:image002@01caedf5.387e6b60]

From: Michael B. Smith 
[mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Shutdown -r -f -t 0 -m \\computername

Seems to work pretty well, IME.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich 
[mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

Why does Vipre offer to let you reboot client machines if it's not really doing 
to do it? I've told several machines to automatically reboot and they have not 
done so. I have ended up either going to the machine in question and manually 
rebooting it or logging into the machine from remote and telling it to reboot 
that way.

[cid:image001.jpg@01CAEDF5.387E6B60][cid:image002@01caedf5.387e6b60]































...

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[Alex Eckelberry]

That option is designed for remotely restarting a system post an upgrade/update 
to the product.

That's an explanation.  As to why it's not doing it, I'm curious, can you try a 
remote shutdown command and see if that does it?  It is perhaps a credentialing 
issue.



From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Well, that may very well work, but why does Vipre offer the option to remotely 
restart a computer if it's not really doing to do it? I'll give that a shot 
next time, fwiw, but I'd like to know the answer to my question. :)

[cid:image001.jpg@01CAEDF5.347F5150][cid:image002@01caedf5.347f5150]

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Shutdown -r -f -t 0 -m \\computername

Seems to work pretty well, IME.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

Why does Vipre offer to let you reboot client machines if it's not really doing 
to do it? I've told several machines to automatically reboot and they have not 
done so. I have ended up either going to the machine in question and manually 
rebooting it or logging into the machine from remote and telling it to reboot 
that way.

[cid:image001.jpg@01CAEDF5.347F5150][cid:image002@01caedf5.347f5150]














~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: [OT] RE: Sunbelt forums down?

[Alex Eckelberry]

Hey, I put my head up, I expect some bullets.  And if they're funny bullets, 
all the better.  I do appreciate humor, even on a day like today ;-)



From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:47 PM
To: NT System Admin Issues
Subject: RE: [OT] RE: Sunbelt forums down?

I wasn't bashing them, I was just trying to inject some humor into an 
unpleasant situation.  I think Michael is right, you're just jealous 'cause you 
didn't think of it first.  :)

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, May 07, 2010 1:30 PM
To: NT System Admin Issues
Subject: RE: [OT] RE: Sunbelt forums down?

Naw, I'll never bash the Clearwater crew. Alex would un-friend me on Facebook 
and I would be devastated.

Shook

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:26 PM
To: NT System Admin Issues
Subject: [OT] RE: Sunbelt forums down?

You just wish you'd thought of it first. :)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, May 07, 2010 2:24 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

That wasn't nice, brother.

Shook

From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:22 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Nah, it was just running a scan with definition versions 6272, 6273 or 6274   :)

From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Our server looks to be in need of an upgrade... that will happen this weekend.

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

I'm trying to get into the forums to post a question, but it's not loading up. 
Anyone else having problems? I tried "downforeveryoneorjustme.com" but I'm not 
sure I got the correct URL.

[cid:image001.jpg@01CAEDF4.DCB25BC0][cid:image002@01caedf4.dcb25bc0]






























~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[John Leto]

And good luck getting through on the support line. I've tried two
different times, the hold times are out of control again.

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, May 07, 2010 1:45 PM
To: NT System Admin Issues
Subject: Re: Virpe does NOT reboot client machines

 

I would suggest waiting until you can get on that forum. :-)

On Fri, May 7, 2010 at 2:43 PM, John Aldrich <
jaldr...@blueridgecarpet.com> wrote:

Well, if I *could* get on the forum, I'd ask. J

 

  

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:36 PM 


To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

HeckifIknow. Call or email support, or ask the question on THAT forum.
:-P

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com  

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Well, that may very well work, but why does Vipre offer the option to
remotely restart a computer if it's not really doing to do it? I'll give
that a shot next time, fwiw, but I'd like to know the answer to my
question. J

 



 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Shutdown -r -f -t 0 -m \\computername

 

Seems to work pretty well, IME.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com  

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

 

Why does Vipre offer to let you reboot client machines if it's not
really doing to do it? I've told several machines to automatically
reboot and they have not done so. I have ended up either going to the
machine in question and manually rebooting it or logging into the
machine from remote and telling it to reboot that way. 

 



 

 

 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: [OT] RE: Sunbelt forums down?

[Kim Longenbaugh]

I wasn't bashing them, I was just trying to inject some humor into an
unpleasant situation.  I think Michael is right, you're just jealous
'cause you didn't think of it first.  J

 

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, May 07, 2010 1:30 PM
To: NT System Admin Issues
Subject: RE: [OT] RE: Sunbelt forums down?

 

Naw, I'll never bash the Clearwater crew. Alex would un-friend me on
Facebook and I would be devastated. 

 

Shook

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:26 PM
To: NT System Admin Issues
Subject: [OT] RE: Sunbelt forums down?

 

You just wish you'd thought of it first. J

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Friday, May 07, 2010 2:24 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

 

That wasn't nice, brother.  

 

Shook

 

From: Kim Longenbaugh [mailto:k...@colonialsavings.com] 
Sent: Friday, May 07, 2010 2:22 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

 

Nah, it was just running a scan with definition versions 6272, 6273 or
6274   J

 

From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

 

Our server looks to be in need of an upgrade... that will happen this
weekend. 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

 

I'm trying to get into the forums to post a question, but it's not
loading up. Anyone else having problems? I tried
"downforeveryoneorjustme.com" but I'm not sure I got the correct URL.

 

  

 

 

 

 

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

Re: Virpe does NOT reboot client machines

[Jonathan Link]

I would suggest waiting until you can get on that forum. :-)

On Fri, May 7, 2010 at 2:43 PM, John Aldrich
wrote:

>  Well, if I **could** get on the forum, I’d ask. J
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
> *Sent:* Friday, May 07, 2010 2:36 PM
>
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> HeckifIknow. Call or email support, or ask the question on THAT forum. :-P
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com 
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 2:34 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> Well, that may very well work, but why does Vipre offer the option to
> remotely restart a computer if it’s not really doing to do it? I’ll give
> that a shot next time, fwiw, but I’d like to know the answer to my question.
> J
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
> *From:* Michael B. Smith [mailto:mich...@smithcons.com]
> *Sent:* Friday, May 07, 2010 2:19 PM
> *To:* NT System Admin Issues
> *Subject:* RE: Virpe does NOT reboot client machines
>
>
>
> Shutdown –r –f –t 0 –m \\computername
>
>
>
> Seems to work pretty well, IME.
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> Consultant and Exchange MVP
>
> http://TheEssentialExchange.com 
>
>
>
> *From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
> *Sent:* Friday, May 07, 2010 2:10 PM
> *To:* NT System Admin Issues
> *Subject:* Virpe does NOT reboot client machines
>
>
>
> Why does Vipre offer to let you reboot client machines if it’s not really
> doing to do it? I’ve told several machines to automatically reboot and they
> have not done so. I have ended up either going to the machine in question
> and manually rebooting it or logging into the machine from remote and
> telling it to reboot that way.
>
>
>
> [image: John-Aldrich][image: Tile-Tools]
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[John Aldrich]

Well, if I *could* get on the forum, I'd ask. J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:36 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

HeckifIknow. Call or email support, or ask the question on THAT forum. :-P

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Well, that may very well work, but why does Vipre offer the option to
remotely restart a computer if it's not really doing to do it? I'll give
that a shot next time, fwiw, but I'd like to know the answer to my question.
J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Shutdown -r -f -t 0 -m \\computername  

 

Seems to work pretty well, IME.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

 

Why does Vipre offer to let you reboot client machines if it's not really
doing to do it? I've told several machines to automatically reboot and they
have not done so. I have ended up either going to the machine in question
and manually rebooting it or logging into the machine from remote and
telling it to reboot that way. 

 

John-AldrichTile-Tools

 

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[Michael B. Smith]

HeckifIknow. Call or email support, or ask the question on THAT forum. :-P

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:34 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Well, that may very well work, but why does Vipre offer the option to remotely 
restart a computer if it's not really doing to do it? I'll give that a shot 
next time, fwiw, but I'd like to know the answer to my question. :)

[John-Aldrich][Tile-Tools]

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

Shutdown -r -f -t 0 -m \\computername

Seems to work pretty well, IME.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

Why does Vipre offer to let you reboot client machines if it's not really doing 
to do it? I've told several machines to automatically reboot and they have not 
done so. I have ended up either going to the machine in question and manually 
rebooting it or logging into the machine from remote and telling it to reboot 
that way.

[John-Aldrich][Tile-Tools]














~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Virpe does NOT reboot client machines

[John Aldrich]

Well, that may very well work, but why does Vipre offer the option to
remotely restart a computer if it's not really doing to do it? I'll give
that a shot next time, fwiw, but I'd like to know the answer to my question.
J

 

John-AldrichTile-Tools

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, May 07, 2010 2:19 PM
To: NT System Admin Issues
Subject: RE: Virpe does NOT reboot client machines

 

Shutdown -r -f -t 0 -m \\computername  

 

Seems to work pretty well, IME.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

 

Why does Vipre offer to let you reboot client machines if it's not really
doing to do it? I've told several machines to automatically reboot and they
have not done so. I have ended up either going to the machine in question
and manually rebooting it or logging into the machine from remote and
telling it to reboot that way. 

 

John-AldrichTile-Tools

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: [OT] RE: Sunbelt forums down?

[Andy Shook]

Naw, I'll never bash the Clearwater crew. Alex would un-friend me on Facebook 
and I would be devastated.

Shook

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, May 07, 2010 2:26 PM
To: NT System Admin Issues
Subject: [OT] RE: Sunbelt forums down?

You just wish you'd thought of it first. :)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, May 07, 2010 2:24 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

That wasn't nice, brother.

Shook

From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:22 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Nah, it was just running a scan with definition versions 6272, 6273 or 6274   :)

From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Our server looks to be in need of an upgrade... that will happen this weekend.

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

I'm trying to get into the forums to post a question, but it's not loading up. 
Anyone else having problems? I tried "downforeveryoneorjustme.com" but I'm not 
sure I got the correct URL.

[cid:image001.jpg@01CAEDF1.CCB4E970][cid:image002@01caedf1.ccb4e970]






















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

[OT] RE: Sunbelt forums down?

[Michael B. Smith]

You just wish you'd thought of it first. :)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Andy Shook [mailto:andy.sh...@peak10.com]
Sent: Friday, May 07, 2010 2:24 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

That wasn't nice, brother.

Shook

From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:22 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Nah, it was just running a scan with definition versions 6272, 6273 or 6274   :)

From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Our server looks to be in need of an upgrade... that will happen this weekend.

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

I'm trying to get into the forums to post a question, but it's not loading up. 
Anyone else having problems? I tried "downforeveryoneorjustme.com" but I'm not 
sure I got the correct URL.

[John-Aldrich][Tile-Tools]


















~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Sunbelt forums down?

[Andy Shook]

That wasn't nice, brother.

Shook

From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Friday, May 07, 2010 2:22 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Nah, it was just running a scan with definition versions 6272, 6273 or 6274   :)

From: Alex Eckelberry [mailto:al...@sunbelt-software.com]
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

Our server looks to be in need of an upgrade... that will happen this weekend.

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

I'm trying to get into the forums to post a question, but it's not loading up. 
Anyone else having problems? I tried "downforeveryoneorjustme.com" but I'm not 
sure I got the correct URL.

[cid:image001.jpg@01CAEDF0.FAB859C0][cid:image002@01caedf0.fab859c0]














~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Sunbelt forums down?

[Kim Longenbaugh]

Nah, it was just running a scan with definition versions 6272, 6273 or
6274   J

 

From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 1:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

 

Our server looks to be in need of an upgrade... that will happen this
weekend. 

 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

 

I'm trying to get into the forums to post a question, but it's not
loading up. Anyone else having problems? I tried
"downforeveryoneorjustme.com" but I'm not sure I got the correct URL.

 

  

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Computers becoming unresponsive accross entire network.

[RichardMcClary]

Lucky you!  We had 4 mission-critical Win2003 servers hung.  Three were 
VMWare.  (Someone told me where to find the closest a VM has to a physical 
power switch, so they're all up and running now.)
--
RMc

"Tom Miller"  wrote on 05/07/2010 01:14:51 PM:

> Thank you for the update.  What's interesting is my 2003 servers 
> were not impacted, just my 2008 servers (only the first CPU) and 
> some XP machines. 
> 
> >>> Alex Eckelberry  5/7/2010 1:40 PM >>>
> Just to clarify for everyone, what happened was the following:
> 
> Customers running a scan with definition versions 6272, 6273 or 6274
> would often experience extremely high CPU usage when running a scan. 
> 
> This became apparent when agents started running scans, in most 
> cases at 1 AM EDT (the default time).  If an agent didn't run a 
> scan, nothing happened. 
> 
> The issue started with definition 6272, released yesterday evening. 
> The issue was caused by a virus detection (Virus.VBS.Redlof.f) that 
> caused a loop condition when hitting a file of a certain type and 
> size. This problem was fixed in definitions version 6275, which was 
> released at 10:30 am EDT this morning. 
> 
> As the KB below explains, getting out of this loop state required 
> killing the service, or shutting down VIPRE. 
> 
> http://support.sunbeltsoftware.com/Default.aspx?answerid=2015
> 
> Yes, it sucks.  The only positive thing I can look at is that a 
> number of systems kicked in internally that were not there in the 
> past and we were able to fix the problem in a few minutes and 
> release defs once our engineers diagnosed the problem. 
> 
> And yes, we do test each definition that go out.  The problem with 
> this one was that the loop condition kicks in on a file of a certain
> size that is not in our test bed.  We are expanding our test-bed and
> seeing what else we can do to mitigate this type of thing from 
> happening again.
> 
> 
> Alex
> 
> Alex Eckelberry, CEO 
> Sunbelt Software
> 33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
> e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
> w: www.sunbeltsoftware.com b: www.sunbeltblog.com
> 
> 
> 
> 
> 
> 
> 
> -Original Message-
> From: Greg Olson [mailto:gol...@markettools.com] 
> Sent: Friday, May 07, 2010 1:05 PM
> To: NT System Admin Issues
> Subject: RE: Computers becoming unresponsive accross entire network.
> 
> No Vipre. 
> :)
> 
> -Original Message-
> From: HELP_PC [mailto:g...@enter.it] 
> Sent: Friday, May 07, 2010 10:04 AM
> To: NT System Admin Issues
> Subject: R: Computers becoming unresponsive accross entire network.
> 
> 
> With SEP ? 
> 
> 
> GuidoElia
> HELPPC
> 
> -Messaggio originale-
> Da: Greg Olson [mailto:gol...@markettools.com]
> Inviato: venerdì 7 maggio 2010 18.57
> A: NT System Admin Issues
> Oggetto: RE: Computers becoming unresponsive accross entire network.
> 
> Lucky you are sir. 
> I've got entire offices down, servers offline, and all kinds of joy. 
> Updating them is becoming a goto each and try to run a manual 
> update. Which is only working sometimes. Machines are so horked up 
> that we're rebooting into safe mode, and updating from there. 
> -Greg 
> 
> 
> -Original Message-
> From: HELP_PC [mailto:g...@enter.it]
> Sent: Friday, May 07, 2010 9:33 AM
> To: NT System Admin Issues
> Subject: R: Computers becoming unresponsive accross entire network.
> 
> 
> I feel good with my "poor" Symantec Endpoint Protection ! 
> 
> 
> GuidoElia
> HELPPC
> 
> -Messaggio originale-
> Da: Carl Houseman [mailto:c.house...@gmail.com]
> Inviato: venerdì 7 maggio 2010 17.31
> A: NT System Admin Issues
> Oggetto: RE: Computers becoming unresponsive accross entire network.
> 
> Already discussed in another thread, update your Vipre defs.
> 
> Is anyone keeping track of the number of bad defs out of Sunbelt for
> this year alone?
> 
> Carl
> 
> -Original Message-
> From: Luke [mailto:tesla...@gmail.com]
> Sent: Friday, May 07, 2010 10:57 AM
> To: NT System Admin Issues
> Subject: Computers becoming unresponsive accross entire network.
> 
> The Network Administrator and I have been working on this all 
> morning. Since about 7:00AM random machines on the Local Network 
> have been slipping into and out of a random state of 
> unresponsiveness ("Freezing"). 
> 
> The symptoms are pretty serious - I have seen it take up to 5 
> minutes to  bring an already open window from the background to the 
> foreground on client machines - and there are servers that are so 
> unresponsive that I am not even able to log into them (enter 
> Username and Password and nothing happens for the next 30min.). We 
> have had to cold boot one server 3 times in the past hour!
> 
> This problem is not specific to any user, profile, machine, OS, 
> network switch, etc. - at least from what we have been able to 
> Identify. So far it has affected Windows 7, XP and Server 2003. 
> However, this issue is not affecting everyone on the network. My 
> Colleag

RE: Computers becoming unresponsive accross entire network.

[Glen Johnson]

Same here.

Checked our 2003 SBS server.  Vipre said dats version 6272 and was running a 
scan.  Server was as responsive as usual.

Updated dats to 6275 and still ok.

 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Friday, May 07, 2010 2:15 PM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

 

Thank you for the update.  What's interesting is my 2003 servers were not 
impacted, just my 2008 servers (only the first CPU) and some XP machines.  

>>> Alex Eckelberry  5/7/2010 1:40 PM >>>
Just to clarify for everyone, what happened was the following:

Customers running a scan with definition versions 6272, 6273 or 6274 would 
often experience extremely high CPU usage when running a scan.

This became apparent when agents started running scans, in most cases at 1 AM 
EDT (the default time).  If an agent didn't run a scan, nothing happened. 

The issue started with definition 6272, released yesterday evening. The issue 
was caused by a virus detection (Virus.VBS.Redlof.f) that caused a loop 
condition when hitting a file of a certain type and size. This problem was 
fixed in definitions version 6275, which was released at 10:30 am EDT this 
morning.   

As the KB below explains, getting out of this loop state required killing the 
service, or shutting down VIPRE. 

http://support.sunbeltsoftware.com/Default.aspx?answerid=2015

Yes, it sucks.  The only positive thing I can look at is that a number of 
systems kicked in internally that were not there in the past and we were able 
to fix the problem in a few minutes and release defs once our engineers 
diagnosed the problem.  

And yes, we do test each definition that go out.  The problem with this one was 
that the loop condition kicks in on a file of a certain size that is not in our 
test bed.  We are expanding our test-bed and seeing what else we can do to 
mitigate this type of thing from happening again.


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com







-Original Message-
From: Greg Olson [mailto:gol...@markettools.com] 
Sent: Friday, May 07, 2010 1:05 PM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

No Vipre. 
:)

-Original Message-
From: HELP_PC [mailto:g...@enter.it] 
Sent: Friday, May 07, 2010 10:04 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


With SEP ? 


GuidoElia
HELPPC

-Messaggio originale-
Da: Greg Olson [mailto:gol...@markettools.com]
Inviato: venerdì 7 maggio 2010 18.57
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Lucky you are sir. 
I've got entire offices down, servers offline, and all kinds of joy. 
Updating them is becoming a goto each and try to run a manual update. Which is 
only working sometimes. Machines are so horked up that we're rebooting into 
safe mode, and updating from there. 
-Greg 


-Original Message-
From: HELP_PC [mailto:g...@enter.it]
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com]
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this year 
alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since 
about 7:00AM random machines on the Local Network have been slipping into and 
out of a random state of unresponsiveness ("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to  bring 
an already open window from the background to the foreground on client machines 
- and there are servers that are so unresponsive that I am not even able to log 
into them (enter Username and Password and nothing happens for the next 
30min.). We have had to cold boot one server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network switch, 
etc. - at least from what we have been able to Identify. So far it has affected 
Windows 7, XP and Server 2003. However, this issue is not affecting everyone on 
the network. My Colleague sitting right next to me has been having all kinds of 
trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little 

RE: Virpe does NOT reboot client machines

[Michael B. Smith]

Shutdown -r -f -t 0 -m \\computername

Seems to work pretty well, IME.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 2:10 PM
To: NT System Admin Issues
Subject: Virpe does NOT reboot client machines

Why does Vipre offer to let you reboot client machines if it's not really doing 
to do it? I've told several machines to automatically reboot and they have not 
done so. I have ended up either going to the machine in question and manually 
rebooting it or logging into the machine from remote and telling it to reboot 
that way.

[John-Aldrich][Tile-Tools]






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Computers becoming unresponsive accross entire network.

[Tom Miller]

Thank you for the update.  What's interesting is my 2003 servers were
not impacted, just my 2008 servers (only the first CPU) and some XP
machines.  

>>> Alex Eckelberry  5/7/2010 1:40 PM >>>
Just to clarify for everyone, what happened was the following:

Customers running a scan with definition versions 6272, 6273 or 6274
would often experience extremely high CPU usage when running a scan.   


This became apparent when agents started running scans, in most cases
at 1 AM EDT (the default time).  If an agent didn't run a scan, nothing
happened. 

The issue started with definition 6272, released yesterday evening. The
issue was caused by a virus detection (Virus.VBS.Redlof.f) that caused a
loop condition when hitting a file of a certain type and size. This
problem was fixed in definitions version 6275, which was released at
10:30 am EDT this morning.   

As the KB below explains, getting out of this loop state required
killing the service, or shutting down VIPRE. 

http://support.sunbeltsoftware.com/Default.aspx?answerid=2015 

Yes, it sucks.  The only positive thing I can look at is that a number
of systems kicked in internally that were not there in the past and we
were able to fix the problem in a few minutes and release defs once our
engineers diagnosed the problem.  

And yes, we do test each definition that go out.  The problem with this
one was that the loop condition kicks in on a file of a certain size
that is not in our test bed.  We are expanding our test-bed and seeing
what else we can do to mitigate this type of thing from happening
again.


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com 







-Original Message-
From: Greg Olson [mailto:gol...@markettools.com] 
Sent: Friday, May 07, 2010 1:05 PM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

No Vipre. 
:)

-Original Message-
From: HELP_PC [mailto:g...@enter.it] 
Sent: Friday, May 07, 2010 10:04 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


With SEP ? 


GuidoElia
HELPPC

-Messaggio originale-
Da: Greg Olson [mailto:gol...@markettools.com] 
Inviato: venerdì 7 maggio 2010 18.57
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Lucky you are sir. 
I've got entire offices down, servers offline, and all kinds of joy. 
Updating them is becoming a goto each and try to run a manual update.
Which is only working sometimes. Machines are so horked up that we're
rebooting into safe mode, and updating from there. 
-Greg 


-Original Message-
From: HELP_PC [mailto:g...@enter.it] 
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com] 
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for
this year alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com] 
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning.
Since about 7:00AM random machines on the Local Network have been
slipping into and out of a random state of unresponsiveness
("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes
to  bring an already open window from the background to the foreground
on client machines - and there are servers that are so unresponsive that
I am not even able to log into them (enter Username and Password and
nothing happens for the next 30min.). We have had to cold boot one
server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network
switch, etc. - at least from what we have been able to Identify. So far
it has affected Windows 7, XP and Server 2003. However, this issue is
not affecting everyone on the network. My Colleague sitting right next
to me has been having all kinds of trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a
little or at least for a while, but more often than not the machine will
just return to its unresponsive state after a few minutes. On the
machines that I have that are accessible I am attempting scan with
Vipre. 

We are seriously starting to suspect that Vipre is doing something (in
the background that we cant see) that is actually causing all this. We
completely removed Vipre

Virpe does NOT reboot client machines

[John Aldrich]

Why does Vipre offer to let you reboot client machines if it's not really
doing to do it? I've told several machines to automatically reboot and they
have not done so. I have ended up either going to the machine in question
and manually rebooting it or logging into the machine from remote and
telling it to reboot that way. 

 

John-AldrichTile-Tools

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Sunbelt forums down?

[John Aldrich]

Thanks, Alex! J Guess if you're that busy, you need an upgrade all right! J

 

John-AldrichTile-Tools

 

From: Alex Eckelberry [mailto:al...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 2:00 PM
To: NT System Admin Issues
Subject: RE: Sunbelt forums down?

 

Our server looks to be in need of an upgrade. that will happen this weekend.


 

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

 

I'm trying to get into the forums to post a question, but it's not loading
up. Anyone else having problems? I tried "downforeveryoneorjustme.com" but
I'm not sure I got the correct URL.

 

John-AldrichTile-Tools

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Sunbelt forums down?

[Alex Eckelberry]

Our server looks to be in need of an upgrade... that will happen this weekend.

From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Friday, May 07, 2010 10:35 AM
To: NT System Admin Issues
Subject: Sunbelt forums down?

I'm trying to get into the forums to post a question, but it's not loading up. 
Anyone else having problems? I tried "downforeveryoneorjustme.com" but I'm not 
sure I got the correct URL.

[cid:image001.jpg@01CAEDED.8BE23410][cid:image002@01caeded.8be23410]






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Computers becoming unresponsive accross entire network.

[Alex Eckelberry]

Just to clarify for everyone, what happened was the following:

Customers running a scan with definition versions 6272, 6273 or 6274 would 
often experience extremely high CPU usage when running a scan.

This became apparent when agents started running scans, in most cases at 1 AM 
EDT (the default time).  If an agent didn't run a scan, nothing happened. 

The issue started with definition 6272, released yesterday evening. The issue 
was caused by a virus detection (Virus.VBS.Redlof.f) that caused a loop 
condition when hitting a file of a certain type and size. This problem was 
fixed in definitions version 6275, which was released at 10:30 am EDT this 
morning.   

As the KB below explains, getting out of this loop state required killing the 
service, or shutting down VIPRE. 

http://support.sunbeltsoftware.com/Default.aspx?answerid=2015

Yes, it sucks.  The only positive thing I can look at is that a number of 
systems kicked in internally that were not there in the past and we were able 
to fix the problem in a few minutes and release defs once our engineers 
diagnosed the problem.  

And yes, we do test each definition that go out.  The problem with this one was 
that the loop condition kicks in on a file of a certain size that is not in our 
test bed.  We are expanding our test-bed and seeing what else we can do to 
mitigate this type of thing from happening again.


Alex

Alex Eckelberry, CEO 
Sunbelt Software
33 N. Garden Avenue, Clearwater, FL 33755 p: 727-562-0101 x220 
e: a...@sunbeltsoftware.com MSN: alex...@hotmail.com 
w: www.sunbeltsoftware.com b: www.sunbeltblog.com
 






-Original Message-
From: Greg Olson [mailto:gol...@markettools.com] 
Sent: Friday, May 07, 2010 1:05 PM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

No Vipre. 
:)

-Original Message-
From: HELP_PC [mailto:g...@enter.it] 
Sent: Friday, May 07, 2010 10:04 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


With SEP ? 


GuidoElia
HELPPC

-Messaggio originale-
Da: Greg Olson [mailto:gol...@markettools.com]
Inviato: venerdì 7 maggio 2010 18.57
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Lucky you are sir. 
I've got entire offices down, servers offline, and all kinds of joy. 
Updating them is becoming a goto each and try to run a manual update. Which is 
only working sometimes. Machines are so horked up that we're rebooting into 
safe mode, and updating from there. 
-Greg 


-Original Message-
From: HELP_PC [mailto:g...@enter.it]
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com]
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this year 
alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since 
about 7:00AM random machines on the Local Network have been slipping into and 
out of a random state of unresponsiveness ("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to  bring 
an already open window from the background to the foreground on client machines 
- and there are servers that are so unresponsive that I am not even able to log 
into them (enter Username and Password and nothing happens for the next 
30min.). We have had to cold boot one server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network switch, 
etc. - at least from what we have been able to Identify. So far it has affected 
Windows 7, XP and Server 2003. However, this issue is not affecting everyone on 
the network. My Colleague sitting right next to me has been having all kinds of 
trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little or at 
least for a while, but more often than not the machine will just return to its 
unresponsive state after a few minutes. On the machines that I have that are 
accessible I am attempting scan with Vipre. 

We are seriously starting to suspect that Vipre is doing something (in the 
background that we cant see) that is actually causing all this. We completely 
removed Vipre from one PC that was having trouble and it seemed to fix the 
problem. The PC has been running fine since.

Any thoughts?

~ Finally, powerful endpoint security that 

RE: Sharp stock market drop likely human, computer error - Computerworld

[andy]

yea, it would of been nice to get PG at $0.11  and ACN accenture at $0.01.




At 01:26 PM 5/7/2010, you wrote:
>But too bad they cancelled all transactions even if you reacted in time. J
>
>From: Jonathan Link [mailto:jonathan.l...@gmail.com]
>Sent: Friday, May 07, 2010 11:20 AM
>To: NT System Admin Issues
>Subject: Re: Sharp stock market drop likely human, computer error - 
>Computerworld
>
>If it were me, and my thesis for the investment hadn't changed, and 
>I couldn't see any market information relating to the company, then 
>I would look upon it as a buying opportunity.
>
>
>
>On Fri, May 7, 2010 at 8:14 AM, Eldridge, Dave 
><d...@parkviewmc.com> wrote:
>Unbelievable to see so called "experts" on the financial shows 
>trying to explain this one.
>Can you imagine being a day trader and seeing a stock your following 
>at 40.00 drop to a penny in 10 minutes. Wow
>
>Oh well, my 301K is now back to a 201K. L
>
>From: Andrew S. Baker [mailto:asbz...@gmail.com]
>Sent: Friday, May 07, 2010 6:12 AM
>To: NT System Admin Issues
>Subject: Sharp stock market drop likely human, computer error - Computerworld
>
>http://www.computerworld.com/s/article/9176409/Sharp_stock_market_drop_likely_human_computer_error?source=rss_news
>
>Technology can accelerate problems just as well as it can speed up solutions.
>
>-ASB: http://xeesm.com/AndrewBaker
>
>
>
>
>
>This e-mail contains the thoughts and opinions of the sender and 
>does not represent official Parkview Medical Center policy.
>
>This communication is intended only for the recipient(s) named 
>above, may be confidential and/or legally privileged: and, must be 
>treated as such in accordance with state and federal laws. If you 
>are not the intended recipient, you are hereby notified that any use 
>of this communication, or any of its contents, is prohibited. If you 
>have received this communication in error, please return to sender 
>and delete the message from your computer system.
>
>
>
>
>
>
>
>
>
>
>
>



Andy-Ofalt---863-3449--405-Ag-Admin-Bldg--for more 
information go  to http://ict.cas.psu.edu/Contacts.html  -- 
My little blurb to eat up bandwidth and make your mail box even larger
+++
  The real problem is that IP, a connectionless protocol, was never 
developed to be the universal protocol. ATM was developed to serve 
that purpose and failed.
+++

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Sunbelt, McAfee, Symantec - now Clam

[Kurt Buff]

-  Original Message 
Subject: [Clamav-announce] problem with daily.cvd 10938
Date: Fri, 7 May 2010 13:06:56 +0200
From: Luca Gibelli 
Reply-To: nore...@clamav.net
To: ClamAV Announce 

Dear ClamAV users,

about 15 mins ago we released daily.cvd 10938. This update apparently
caused a segmentation fault in all ClamAV versions older than 0.96
on 32 bit systems.

We just released daily.cvd 10939 which removes the faulty signature and
we have taken measures to ensure that this problem won't happen again.

We recommend using a monitor tool like clamdwatch or clamdmon to
automatically restart clamd whenever it dies.

If you are already using a similar solution, your clamd will be
restarted automatically as soon as freshclam downloads the daily.cvd
10939 update.

We apologise for the inconvenience.

Regards,

- --
Luca Gibelli (luca _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit
[Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
___

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Sharp stock market drop likely human, computer error - Computerworld

[Eldridge, Dave]

But too bad they cancelled all transactions even if you reacted in time.
J

 

From: Jonathan Link [mailto:jonathan.l...@gmail.com] 
Sent: Friday, May 07, 2010 11:20 AM
To: NT System Admin Issues
Subject: Re: Sharp stock market drop likely human, computer error -
Computerworld

 

If it were me, and my thesis for the investment hadn't changed, and I
couldn't see any market information relating to the company, then I
would look upon it as a buying opportunity.



 

On Fri, May 7, 2010 at 8:14 AM, Eldridge, Dave 
wrote:

Unbelievable to see so called "experts" on the financial shows trying to
explain this one. 

Can you imagine being a day trader and seeing a stock your following at
40.00 drop to a penny in 10 minutes. Wow

 

Oh well, my 301K is now back to a 201K. L

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Friday, May 07, 2010 6:12 AM
To: NT System Admin Issues
Subject: Sharp stock market drop likely human, computer error -
Computerworld

 

http://www.computerworld.com/s/article/9176409/Sharp_stock_market_drop_l
ikely_human_computer_error?source=rss_news

 

Technology can accelerate problems just as well as it can speed up
solutions.

 

-ASB: http://xeesm.com/AndrewBaker

 

 

 

This e-mail contains the thoughts and opinions of the sender and does
not represent official Parkview Medical Center policy.

This communication is intended only for the recipient(s) named above,
may be confidential and/or legally privileged: and, must be treated as
such in accordance with state and federal laws. If you are not the
intended recipient, you are hereby notified that any use of this
communication, or any of its contents, is prohibited. If you have
received this communication in error, please return to sender and delete
the message from your computer system.

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Sharp stock market drop likely human, computer error - Computerworld

[Andrew S. Baker]

Indeed. :)

-ASB: http://XeeSM.com/AndrewBaker


On Fri, May 7, 2010 at 1:13 PM, Kurt Buff  wrote:

> That's the old joke:
>
> To err is human - to really screw up you need a computer
>
> On Fri, May 7, 2010 at 05:11, Andrew S. Baker  wrote:
> >
> http://www.computerworld.com/s/article/9176409/Sharp_stock_market_drop_likely_human_computer_error?source=rss_news
> > Technology can accelerate problems just as well as it can speed up
> > solutions.
> > -ASB: http://xeesm.com/AndrewBaker
> >
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Sharp stock market drop likely human, computer error - Computerworld

[Jonathan Link]

If it were me, and my thesis for the investment hadn't changed, and I
couldn't see any market information relating to the company, then I would
look upon it as a buying opportunity.



On Fri, May 7, 2010 at 8:14 AM, Eldridge, Dave  wrote:

>  Unbelievable to see so called “experts” on the financial shows trying to
> explain this one.
>
> Can you imagine being a day trader and seeing a stock your following at
> 40.00 drop to a penny in 10 minutes. Wow
>
>
>
> Oh well, my 301K is now back to a 201K. L
>
>
>
> *From:* Andrew S. Baker [mailto:asbz...@gmail.com]
> *Sent:* Friday, May 07, 2010 6:12 AM
> *To:* NT System Admin Issues
> *Subject:* Sharp stock market drop likely human, computer error -
> Computerworld
>
>
>
>
> http://www.computerworld.com/s/article/9176409/Sharp_stock_market_drop_likely_human_computer_error?source=rss_news
>
>
>
> Technology can accelerate problems just as well as it can speed up
> solutions.
>
>
>
> -ASB: http://xeesm.com/AndrewBaker
>
>
>
>
>
>
>
> This e-mail contains the thoughts and opinions of the sender and does not
> represent official Parkview Medical Center policy.
>
> This communication is intended only for the recipient(s) named above, may
> be confidential and/or legally privileged: and, must be treated as such in
> accordance with state and federal laws. If you are not the intended
> recipient, you are hereby notified that any use of this communication, or
> any of its contents, is prohibited. If you have received this communication
> in error, please return to sender and delete the message from your computer
> system.{token}
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Sharp stock market drop likely human, computer error - Computerworld

[Kurt Buff]

That's the old joke:

To err is human - to really screw up you need a computer

On Fri, May 7, 2010 at 05:11, Andrew S. Baker  wrote:
> http://www.computerworld.com/s/article/9176409/Sharp_stock_market_drop_likely_human_computer_error?source=rss_news
> Technology can accelerate problems just as well as it can speed up
> solutions.
> -ASB: http://xeesm.com/AndrewBaker
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Greg Olson]

No Vipre. 
:)

-Original Message-
From: HELP_PC [mailto:g...@enter.it] 
Sent: Friday, May 07, 2010 10:04 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


With SEP ? 


GuidoElia
HELPPC

-Messaggio originale-
Da: Greg Olson [mailto:gol...@markettools.com]
Inviato: venerdì 7 maggio 2010 18.57
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Lucky you are sir. 
I've got entire offices down, servers offline, and all kinds of joy. 
Updating them is becoming a goto each and try to run a manual update. Which is 
only working sometimes. Machines are so horked up that we're rebooting into 
safe mode, and updating from there. 
-Greg 


-Original Message-
From: HELP_PC [mailto:g...@enter.it]
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com]
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this year 
alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since 
about 7:00AM random machines on the Local Network have been slipping into and 
out of a random state of unresponsiveness ("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to  bring 
an already open window from the background to the foreground on client machines 
- and there are servers that are so unresponsive that I am not even able to log 
into them (enter Username and Password and nothing happens for the next 
30min.). We have had to cold boot one server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network switch, 
etc. - at least from what we have been able to Identify. So far it has affected 
Windows 7, XP and Server 2003. However, this issue is not affecting everyone on 
the network. My Colleague sitting right next to me has been having all kinds of 
trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little or at 
least for a while, but more often than not the machine will just return to its 
unresponsive state after a few minutes. On the machines that I have that are 
accessible I am attempting scan with Vipre. 

We are seriously starting to suspect that Vipre is doing something (in the 
background that we cant see) that is actually causing all this. We completely 
removed Vipre from one PC that was having trouble and it seemed to fix the 
problem. The PC has been running fine since.

Any thoughts?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

R: Computers becoming unresponsive accross entire network.

[HELP_PC]

With SEP ? 


GuidoElia
HELPPC

-Messaggio originale-
Da: Greg Olson [mailto:gol...@markettools.com] 
Inviato: venerdì 7 maggio 2010 18.57
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Lucky you are sir. 
I've got entire offices down, servers offline, and all kinds of joy. 
Updating them is becoming a goto each and try to run a manual update. Which is 
only working sometimes. Machines are so horked up that we're rebooting into 
safe mode, and updating from there. 
-Greg 


-Original Message-
From: HELP_PC [mailto:g...@enter.it]
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com]
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this year 
alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since 
about 7:00AM random machines on the Local Network have been slipping into and 
out of a random state of unresponsiveness ("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to  bring 
an already open window from the background to the foreground on client machines 
- and there are servers that are so unresponsive that I am not even able to log 
into them (enter Username and Password and nothing happens for the next 
30min.). We have had to cold boot one server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network switch, 
etc. - at least from what we have been able to Identify. So far it has affected 
Windows 7, XP and Server 2003. However, this issue is not affecting everyone on 
the network. My Colleague sitting right next to me has been having all kinds of 
trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little or at 
least for a while, but more often than not the machine will just return to its 
unresponsive state after a few minutes. On the machines that I have that are 
accessible I am attempting scan with Vipre. 

We are seriously starting to suspect that Vipre is doing something (in the 
background that we cant see) that is actually causing all this. We completely 
removed Vipre from one PC that was having trouble and it seemed to fix the 
problem. The PC has been running fine since.

Any thoughts?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Greg Olson]

Lucky you are sir. 
I've got entire offices down, servers offline, and all kinds of joy. 
Updating them is becoming a goto each and try to run a manual update. Which is 
only working sometimes. Machines are so horked up that we're rebooting into 
safe mode, and updating from there. 
-Greg 


-Original Message-
From: HELP_PC [mailto:g...@enter.it] 
Sent: Friday, May 07, 2010 9:33 AM
To: NT System Admin Issues
Subject: R: Computers becoming unresponsive accross entire network.


I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com]
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this year 
alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since 
about 7:00AM random machines on the Local Network have been slipping into and 
out of a random state of unresponsiveness ("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to  bring 
an already open window from the background to the foreground on client machines 
- and there are servers that are so unresponsive that I am not even able to log 
into them (enter Username and Password and nothing happens for the next 
30min.). We have had to cold boot one server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network switch, 
etc. - at least from what we have been able to Identify. So far it has affected 
Windows 7, XP and Server 2003. However, this issue is not affecting everyone on 
the network. My Colleague sitting right next to me has been having all kinds of 
trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little or at 
least for a while, but more often than not the machine will just return to its 
unresponsive state after a few minutes. On the machines that I have that are 
accessible I am attempting scan with Vipre. 

We are seriously starting to suspect that Vipre is doing something (in the 
background that we cant see) that is actually causing all this. We completely 
removed Vipre from one PC that was having trouble and it seemed to fix the 
problem. The PC has been running fine since.

Any thoughts?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

R: Computers becoming unresponsive accross entire network.

[HELP_PC]

I feel good with my "poor" Symantec Endpoint Protection ! 


GuidoElia
HELPPC

-Messaggio originale-
Da: Carl Houseman [mailto:c.house...@gmail.com] 
Inviato: venerdì 7 maggio 2010 17.31
A: NT System Admin Issues
Oggetto: RE: Computers becoming unresponsive accross entire network.

Already discussed in another thread, update your Vipre defs.

Is anyone keeping track of the number of bad defs out of Sunbelt for this year 
alone?

Carl

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 10:57 AM
To: NT System Admin Issues
Subject: Computers becoming unresponsive accross entire network.

The Network Administrator and I have been working on this all morning. Since 
about 7:00AM random machines on the Local Network have been slipping into and 
out of a random state of unresponsiveness ("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to  bring 
an already open window from the background to the foreground on client machines 
- and there are servers that are so unresponsive that I am not even able to log 
into them (enter Username and Password and nothing happens for the next 
30min.). We have had to cold boot one server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network switch, 
etc. - at least from what we have been able to Identify. So far it has affected 
Windows 7, XP and Server 2003. However, this issue is not affecting everyone on 
the network. My Colleague sitting right next to me has been having all kinds of 
trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little or at 
least for a while, but more often than not the machine will just return to its 
unresponsive state after a few minutes. On the machines that I have that are 
accessible I am attempting scan with Vipre. 

We are seriously starting to suspect that Vipre is doing something (in the 
background that we cant see) that is actually causing all this. We completely 
removed Vipre from one PC that was having trouble and it seemed to fix the 
problem. The PC has been running fine since.

Any thoughts?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Unitrends

[Craig Gauss]

We were told that as well.  Not sure if I would go that far.  I don
think the performance is there.
 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association
Phone: 715-423-6060 ext. 8572


 



From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Thursday, May 06, 2010 1:33 PM
To: NT System Admin Issues
Subject: RE: Unitrends



Thanks. The sales rep said that you could use their appliance in place
of a SAN. What do you think of that option? If it's true, it would be
nice.

 

  

 

From: Craig Gauss [mailto:gau...@rhahealthcare.org] 
Sent: Thursday, May 06, 2010 2:28 PM
To: NT System Admin Issues
Subject: RE: Unitrends

 

We are currently using it and it seems pretty decent.  The GUI is a
little cumbersome at times but there are supposed to be improvements
with the next version coming out

 

Craig Gauss,  Technical Supervisor/Security Officer
Riverview Hospital Association

 

 



From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] 
Sent: Thursday, May 06, 2010 11:02 AM
To: NT System Admin Issues
Subject: Unitrends

Anyone know anything about a Backup company called Unitrends? They
cold-called me to talk about backup and D/R. Just wondering if they are
any good. J

 



 

 

 

 

 

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~<><>

RE: Computers becoming unresponsive across entire network.

[N Parr]

So I guess if you haven't been bitten yet then you haven't run a scan.
Guess I better get all the clients updated before they scan at noon.



From: Jeff Cain [mailto:je...@sunbelt-software.com] 
Sent: Friday, May 07, 2010 11:05 AM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive across entire network.



This was just sent out - I figured I'd share with the list.

Product Notification:  VIPRE Enterprise, VIPRE Enterprise Premium,
CounterSpy Enterprise

Date: May 7th, 2010

Notification Type: Support Issue

Product: VIPRE Enterprise, VIPRE Enterprise Premium, CounterSpy
Enterprise

Version: All 

Operating System:  All product-supported Operating Systems

Dear VIPRE/CounterSpy Enterprise customer, 

Customers running a scan with definition versions 6272, 6273, or 6274
may experience extremely high CPU usage when running a scan.

The issue started with definition 6272, released 5/6/2010 at 5:53:19 PM
EDT.  The issue is caused by a virus detection (Virus.VBS.Redlof.f) that
causes a loop condition on the system, resulting in high CPU usage.   

This problem has been fixed in definition version 6275. 

If you are unable to abort a currently running scan on your agent
machines, the solution to the 100% CPU usage is to do as follows:

1.  Ensure the Enterprise Server has received definition version
6275. 
2.  Stop the following processes on any unresponsive agent machines:


a.  SBAMsvc.exe 
b.  SBAMTray.exe (if tray icon is set to be visible) 
c.  sbamui.exe (if agent interface is open) 
d.  SBPIMSvc.exe (4.0 Agents only)

3.  Restart your enterprise agents. 
4.  Update any outdated agents within your console to the latest
definitions. 

We are aggressively researching why this detection was able to release
to the public and are putting in place additional quality assurance
processes, so that we can ensure that this type of detection doesn't
occur again. 

Thanks for choosing Sunbelt Software, 

 

 

 

Thanks,
Jeff Cain

Technical Support Analyst
Sunbelt Software
Email: supp...@sunbeltsoftware.com  
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web:  >
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States


If you do not want further email from us, please forward
this message to listmana...@sunbelt-software.com
  with
the word 'unsubscribe' in the subject of your email.


Helpful Sunbelt Software Links:

 

Knowledge Base  

Open a New Support Ticket
 

Sunbelt Software Product Support Communities
 

 

 

From: Weatherford, Chad [mailto:cweatherf...@scvl.com] 
Sent: Friday, May 07, 2010 12:01 PM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive across entire network.

 

That sounds a lot McAfee's response with the "5958" disaster! 

>From McAfee:

 

"If you have not rolled out DAT 5958 DON'T If so roll out the
included extra dat"

 

How do I roll anything to PC's that no longer have network connectivity
or are in a constant reboot cycle?

 

Here's you sign!

 

 

 

 

 

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] 
Sent: Friday, May 07, 2010 10:54 AM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

 


How the @#*& do you force an update to 6275 on a machine that is pretty
much unresponsive? 

VIPRE console says "Inactive", which seems in this case to apply to the
whole machine... 
-- 
RMc 

"Tom Miller"  wrote on 05/07/2010 10:29:22 AM:

>   It is/was a Vipre issue.  Force a defs update and you'll be good. 
> Must have been a bad def.
> 
> >>> "Luke"  5/7/2010 10:56 AM >>>
> The Network Administrator and I have been working on this all 
> morning. Since about 7:00AM random machines on the Local Network 
> have been slipping into and out of a random state of 
> unresponsiveness ("Freezing"). 
> 
> The symptoms are pretty serious - I have seen it take up to 5 
> minutes to  bring an already open window from the background to the 
> foreground on client machines - and there are servers that are so 
> unresponsive that I am not even able to log into them (enter 
> Username and Password and nothing happens for the next 30min.). We 
> have had to cold boot one server 3 times in the past hour!
> 
> This problem is not specific to any user, profile, machine, OS, 
> network switch, etc. - at least from what we have been able to 
> Identify. So far it has affected Windows 7, XP and Server 2003. 
> However, this issue is not affecting everyone on the network. My 
> Colleague sitting right nex

RE: Computers becoming unresponsive across entire network.

[Jeff Cain]

This was just sent out - I figured I'd share with the list.

Product Notification:  VIPRE Enterprise, VIPRE Enterprise Premium, CounterSpy 
Enterprise

Date: May 7th, 2010

Notification Type: Support Issue

Product: VIPRE Enterprise, VIPRE Enterprise Premium, CounterSpy Enterprise

Version: All

Operating System:  All product-supported Operating Systems

Dear VIPRE/CounterSpy Enterprise customer,

Customers running a scan with definition versions 6272, 6273, or 6274 may 
experience extremely high CPU usage when running a scan.

The issue started with definition 6272, released 5/6/2010 at 5:53:19 PM EDT.  
The issue is caused by a virus detection (Virus.VBS.Redlof.f) that causes a 
loop condition on the system, resulting in high CPU usage.

This problem has been fixed in definition version 6275.

If you are unable to abort a currently running scan on your agent machines, the 
solution to the 100% CPU usage is to do as follows:

 1.  Ensure the Enterprise Server has received definition version 6275.
 2.  Stop the following processes on any unresponsive agent machines:

*   SBAMsvc.exe
*   SBAMTray.exe (if tray icon is set to be visible)
*   sbamui.exe (if agent interface is open)
*   SBPIMSvc.exe (4.0 Agents only)

 1.  Restart your enterprise agents.
 2.  Update any outdated agents within your console to the latest definitions.

We are aggressively researching why this detection was able to release to the 
public and are putting in place additional quality assurance processes, so that 
we can ensure that this type of detection doesn't occur again.

Thanks for choosing Sunbelt Software,



Thanks,
Jeff Cain
Technical Support Analyst
Sunbelt Software
Email: supp...@sunbeltsoftware.com
Voice: 1-877-673-1153
Fax:   1-727-562-5199
Web: >
Physical Address:
33 N Garden Ave
Suite 1200
Clearwater, FL  33755
United States

If you do not want further email from us, please forward
this message to 
listmana...@sunbelt-software.com with
the word 'unsubscribe' in the subject of your email.

Helpful Sunbelt Software Links:

Knowledge Base
Open a New Support Ticket
Sunbelt Software Product Support 
Communities


From: Weatherford, Chad [mailto:cweatherf...@scvl.com]
Sent: Friday, May 07, 2010 12:01 PM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive across entire network.

That sounds a lot McAfee's response with the "5958" disaster!
>From McAfee:

"If you have not rolled out DAT 5958 DON'T If so roll out the included 
extra dat"

How do I roll anything to PC's that no longer have network connectivity or are 
in a constant reboot cycle?

Here's you sign!





From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]
Sent: Friday, May 07, 2010 10:54 AM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.


How the @#*& do you force an update to 6275 on a machine that is pretty much 
unresponsive?

VIPRE console says "Inactive", which seems in this case to apply to the whole 
machine...
--
RMc

"Tom Miller" mailto:tmil...@hnncsb.org>> wrote on 
05/07/2010 10:29:22 AM:

>   It is/was a Vipre issue.  Force a defs update and you'll be good.
> Must have been a bad def.
>
> >>> "Luke" mailto:tesla...@gmail.com>> 5/7/2010 10:56 AM 
> >>> >>>
> The Network Administrator and I have been working on this all
> morning. Since about 7:00AM random machines on the Local Network
> have been slipping into and out of a random state of
> unresponsiveness ("Freezing").
>
> The symptoms are pretty serious - I have seen it take up to 5
> minutes to  bring an already open window from the background to the
> foreground on client machines - and there are servers that are so
> unresponsive that I am not even able to log into them (enter
> Username and Password and nothing happens for the next 30min.). We
> have had to cold boot one server 3 times in the past hour!
>
> This problem is not specific to any user, profile, machine, OS,
> network switch, etc. - at least from what we have been able to
> Identify. So far it has affected Windows 7, XP and Server 2003.
> However, this issue is not affecting everyone on the network. My
> Colleague sitting right next to me has been having all kinds of
> trouble with his PC and I have not.
>
> We have found that cold booting the affected machines does help a
> little or at least for a while, but more often than not the machine
> will just return to its unresponsive state after a few minutes. On
> the machines that I have that are accessible I am attempting scan with Vipre.
>
> We are seriously starting to suspect that Vipre is doing somethin

RE: Computers becoming unresponsive across entire network.

[Weatherford, Chad]

That sounds a lot McAfee's response with the "5958" disaster! 

>From McAfee:

 

"If you have not rolled out DAT 5958 DON'T If so roll out the
included extra dat"

 

How do I roll anything to PC's that no longer have network connectivity
or are in a constant reboot cycle?

 

Here's you sign!

 

 

 

 

 

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] 
Sent: Friday, May 07, 2010 10:54 AM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

 


How the @#*& do you force an update to 6275 on a machine that is pretty
much unresponsive? 

VIPRE console says "Inactive", which seems in this case to apply to the
whole machine... 
-- 
RMc 

"Tom Miller"  wrote on 05/07/2010 10:29:22 AM:

>   It is/was a Vipre issue.  Force a defs update and you'll be good. 
> Must have been a bad def.
> 
> >>> "Luke"  5/7/2010 10:56 AM >>>
> The Network Administrator and I have been working on this all 
> morning. Since about 7:00AM random machines on the Local Network 
> have been slipping into and out of a random state of 
> unresponsiveness ("Freezing"). 
> 
> The symptoms are pretty serious - I have seen it take up to 5 
> minutes to  bring an already open window from the background to the 
> foreground on client machines - and there are servers that are so 
> unresponsive that I am not even able to log into them (enter 
> Username and Password and nothing happens for the next 30min.). We 
> have had to cold boot one server 3 times in the past hour!
> 
> This problem is not specific to any user, profile, machine, OS, 
> network switch, etc. - at least from what we have been able to 
> Identify. So far it has affected Windows 7, XP and Server 2003. 
> However, this issue is not affecting everyone on the network. My 
> Colleague sitting right next to me has been having all kinds of 
> trouble with his PC and I have not. 
> 
> We have found that cold booting the affected machines does help a 
> little or at least for a while, but more often than not the machine 
> will just return to its unresponsive state after a few minutes. On 
> the machines that I have that are accessible I am attempting scan with
Vipre. 
> 
> We are seriously starting to suspect that Vipre is doing something 
> (in the background that we cant see) that is actually causing all 
> this. We completely removed Vipre from one PC that was having 
> trouble and it seemed to fix the problem. The PC has been running fine
since.
> 
> Any thoughts?
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~

> Confidentiality Notice: This e-mail message, including attachments, 
> is for the sole use of the intended recipient(s) and may contain 
> confidential and privileged information. Any unauthorized review, 
> use, disclosure, or distribution is prohibited. If you are not the 
> intended recipient, please contact the sender by reply e-mail and 
> destroy all copies of the original message. 
>   
>   

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Computers becoming unresponsive accross entire network.

[Luke]

You've got to kill it and start over man That deff really grabs the machine 
by the


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Computers becoming unresponsive accross entire network.

[Steve Ens]

I had one office that took the update fine and deployed to all machines, but
another office doesn't seem to want to go either...stuck on the 6274.

On Fri, May 7, 2010 at 10:54 AM,  wrote:

>
> How the @#*& do you force an update to 6275 on a machine that is pretty
> much unresponsive?
>
> VIPRE console says "Inactive", which seems in this case to apply to the
> whole machine...
> --
> RMc
>
> "Tom Miller"  wrote on 05/07/2010 10:29:22 AM:
>
>
> >   It is/was a Vipre issue.  Force a defs update and you'll be good.
> > Must have been a bad def.
> >
> > >>> "Luke"  5/7/2010 10:56 AM >>>
> > The Network Administrator and I have been working on this all
> > morning. Since about 7:00AM random machines on the Local Network
> > have been slipping into and out of a random state of
> > unresponsiveness ("Freezing").
> >
> > The symptoms are pretty serious - I have seen it take up to 5
> > minutes to  bring an already open window from the background to the
> > foreground on client machines - and there are servers that are so
> > unresponsive that I am not even able to log into them (enter
> > Username and Password and nothing happens for the next 30min.). We
> > have had to cold boot one server 3 times in the past hour!
> >
> > This problem is not specific to any user, profile, machine, OS,
> > network switch, etc. - at least from what we have been able to
> > Identify. So far it has affected Windows 7, XP and Server 2003.
> > However, this issue is not affecting everyone on the network. My
> > Colleague sitting right next to me has been having all kinds of
> > trouble with his PC and I have not.
> >
> > We have found that cold booting the affected machines does help a
> > little or at least for a while, but more often than not the machine
> > will just return to its unresponsive state after a few minutes. On
> > the machines that I have that are accessible I am attempting scan with
> Vipre.
> >
> > We are seriously starting to suspect that Vipre is doing something
> > (in the background that we cant see) that is actually causing all
> > this. We completely removed Vipre from one PC that was having
> > trouble and it seemed to fix the problem. The PC has been running fine
> since.
> >
> > Any thoughts?
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~   ~
>
> > Confidentiality Notice: This e-mail message, including attachments,
> > is for the sole use of the intended recipient(s) and may contain
> > confidential and privileged information. Any unauthorized review,
> > use, disclosure, or distribution is prohibited. If you are not the
> > intended recipient, please contact the sender by reply e-mail and
> > destroy all copies of the original message.
> >
> >
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Computers becoming unresponsive accross entire network.

[RichardMcClary]

How the @#*& do you force an update to 6275 on a machine that is pretty 
much unresponsive?

VIPRE console says "Inactive", which seems in this case to apply to the 
whole machine...
--
RMc

"Tom Miller"  wrote on 05/07/2010 10:29:22 AM:

>   It is/was a Vipre issue.  Force a defs update and you'll be good. 
> Must have been a bad def.
> 
> >>> "Luke"  5/7/2010 10:56 AM >>>
> The Network Administrator and I have been working on this all 
> morning. Since about 7:00AM random machines on the Local Network 
> have been slipping into and out of a random state of 
> unresponsiveness ("Freezing"). 
> 
> The symptoms are pretty serious - I have seen it take up to 5 
> minutes to  bring an already open window from the background to the 
> foreground on client machines - and there are servers that are so 
> unresponsive that I am not even able to log into them (enter 
> Username and Password and nothing happens for the next 30min.). We 
> have had to cold boot one server 3 times in the past hour!
> 
> This problem is not specific to any user, profile, machine, OS, 
> network switch, etc. - at least from what we have been able to 
> Identify. So far it has affected Windows 7, XP and Server 2003. 
> However, this issue is not affecting everyone on the network. My 
> Colleague sitting right next to me has been having all kinds of 
> trouble with his PC and I have not. 
> 
> We have found that cold booting the affected machines does help a 
> little or at least for a while, but more often than not the machine 
> will just return to its unresponsive state after a few minutes. On 
> the machines that I have that are accessible I am attempting scan with 
Vipre. 
> 
> We are seriously starting to suspect that Vipre is doing something 
> (in the background that we cant see) that is actually causing all 
> this. We completely removed Vipre from one PC that was having 
> trouble and it seemed to fix the problem. The PC has been running fine 
since.
> 
> Any thoughts?
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~

> Confidentiality Notice: This e-mail message, including attachments, 
> is for the sole use of the intended recipient(s) and may contain 
> confidential and privileged information. Any unauthorized review, 
> use, disclosure, or distribution is prohibited. If you are not the 
> intended recipient, please contact the sender by reply e-mail and 
> destroy all copies of the original message. 
> 
> 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Phillip Partipilo]

You better knock, knock, knock on wood, baby
Whooo



Phillip Partipilo
Parametric Solutions Inc.
Jupiter, Florida
(561) 747-6107


From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Friday, May 07, 2010 11:49 AM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

knock on wood.
On Fri, May 7, 2010 at 10:47 AM, David W. McSpadden 
mailto:dav...@imcu.com>> wrote:
Ok.  That is two bad defs in two weeks?

1 Vipre
1 McAfee?
Next is Trend?

-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 11:45 AM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

Turned out to be a bad Deff. Bad def = 6274.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~






~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Maglinger, Paul]

I bet this one doesn't make national news though...

 

From: Tom Miller [mailto:tmil...@hnncsb.org] 
Sent: Friday, May 07, 2010 10:29 AM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

 

  It is/was a Vipre issue.  Force a defs update and you'll be good.
Must have been a bad def.

>>> "Luke"  5/7/2010 10:56 AM >>>
The Network Administrator and I have been working on this all morning.
Since about 7:00AM random machines on the Local Network have been
slipping into and out of a random state of unresponsiveness
("Freezing"). 

The symptoms are pretty serious - I have seen it take up to 5 minutes to
bring an already open window from the background to the foreground on
client machines - and there are servers that are so unresponsive that I
am not even able to log into them (enter Username and Password and
nothing happens for the next 30min.). We have had to cold boot one
server 3 times in the past hour!

This problem is not specific to any user, profile, machine, OS, network
switch, etc. - at least from what we have been able to Identify. So far
it has affected Windows 7, XP and Server 2003. However, this issue is
not affecting everyone on the network. My Colleague sitting right next
to me has been having all kinds of trouble with his PC and I have not. 

We have found that cold booting the affected machines does help a little
or at least for a while, but more often than not the machine will just
return to its unresponsive state after a few minutes. On the machines
that I have that are accessible I am attempting scan with Vipre. 

We are seriously starting to suspect that Vipre is doing something (in
the background that we cant see) that is actually causing all this. We
completely removed Vipre from one PC that was having trouble and it
seemed to fix the problem. The PC has been running fine since.

Any thoughts?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Computers becoming unresponsive accross entire network.

[Steve Ens]

knock on wood.

On Fri, May 7, 2010 at 10:47 AM, David W. McSpadden  wrote:

> Ok.  That is two bad defs in two weeks?
>
> 1 Vipre
> 1 McAfee?
> Next is Trend?
>
> -Original Message-
> From: Luke [mailto:tesla...@gmail.com]
> Sent: Friday, May 07, 2010 11:45 AM
> To: NT System Admin Issues
> Subject: RE: Computers becoming unresponsive accross entire network.
>
> Turned out to be a bad Deff. Bad def = 6274.
>  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive across entire network.

[Weatherford, Chad]

LOL! I was thinking the same thing!

 

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org] 
Sent: Friday, May 07, 2010 10:46 AM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

 


Wait a minute - 

You whole-heartedly agree with "> ~ Finally, powerful endpoint security
that ISN'T a resource hog! ~
> ~   ~

? 

"Luke"  wrote on 05/07/2010 10:46:31 AM:

> Agreed!!
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[David W. McSpadden]

Ok.  That is two bad defs in two weeks?

1 Vipre
1 McAfee?
Next is Trend?

-Original Message-
From: Luke [mailto:tesla...@gmail.com] 
Sent: Friday, May 07, 2010 11:45 AM
To: NT System Admin Issues
Subject: RE: Computers becoming unresponsive accross entire network.

Turned out to be a bad Deff. Bad def = 6274.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Phillip Partipilo]

I have a box with 6273 that's just sitting here spinning at full throttle.  
Nobody really uses it, I figured I would let it keep spinning in case it was an 
isolated thing that support could look at.


Phillip Partipilo
Parametric Solutions Inc.
Jupiter, Florida
(561) 747-6107



-Original Message-
From: Luke [mailto:tesla...@gmail.com]
Sent: Friday, May 07, 2010 11:43 AM
To: NT System Admin Issues
Subject: Re: Computers becoming unresponsive accross entire network.

You are right...

Def 6274. seems to be the bad deff.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[RichardMcClary]

Wait a minute - 

You whole-heartedly agree with "> ~ Finally, powerful endpoint security 
that ISN'T a resource hog! ~
> ~   ~

?

"Luke"  wrote on 05/07/2010 10:46:31 AM:

> Agreed!!
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Computers becoming unresponsive accross entire network.

[Luke]

Agreed!!
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~