Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 05:24 PM 25/05/2010, Anthony Q. Martin wrote: No, I don't know a better way...but I have tried myself for basically the same reasons. I got the notion that if they were easily disabled, then that would represent an attack option by viruses trying to get by...don't know if that is true or not

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 06:15 PM 25/05/2010, Robert Martin Jr. wrote: Can't you boot in safe-mode with network support? Also most of the BootCD utilities (hirens, etc) have network support and a bootable mini-XP to run other windows utilities off USB key or similar. Safe mode works, but file access is slower, and

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 06:30 PM 25/05/2010, DSinc wrote: Thane, I mean no disrespect here, but perhaps you were not as agressive w/NOD32 as back 4yrs ago when you scared me into the ESET Oblivion! I walked away from all things Norton in 1998; I've lived well without since. :) Duncan, I hate Norton to

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 06:45 PM 25/05/2010, Mesdaq, Ali wrote: It's probably because there is a TDI or NDIS driver installed as a shim between the network driver and the OS being used to filter traffic. Turning the service off probably just stops the driver from forwarding traffic. It's been a while since I worked

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 07:25 PM 25/05/2010, Christopher Fisk wrote: Yank drive: Plug in USB HDD converter (I have one that does SATA, IDE and Laptop IDE size plug in one) and scan in a known clean machine. That way you can have a known clean system doing the scan and won't have to worry that a rootkit is hiding

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 11:54 PM 25/05/2010, maccrawj wrote: Any reason not to just scan with the customer drive attached to a bench machine as a data volume & bypass the OS completely? I've come to the conclusion that scanning with a host OS of unknown state is just not reliable anyway. Yes, and I do that as wel

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 11:57 PM 25/05/2010, maccrawj wrote: Yeah, now that I think about it didn't we all discuss this AV scanner machine w/ USB-IDE/SATA converter idea a few years ago? I've always found the performance hit with USB to be a pain. Possibly with eSATA that would be resolved. T

Re: [H] AV disabling question

2010-05-26 Thread Joe User
Hello Thane, Wednesday, May 26, 2010, 6:36:20 AM, you wrote: > BTW, on a seperate topic, what do the guys on the list who charge for > disinfecting computers charge these days to disinfect a machine, and > about how long is taking you? I'm charging $47 and it takes about 24 hours. I use a cl

Re: [H] AV disabling question

2010-05-26 Thread Christopher Fisk
On Wed, 26 May 2010, Thane Sherrington wrote: Have you tried using an MD5 hash on the files in the Windows folder and subfolders and compared it to a known good hash to try to find infections? I've been playing with that. Nope, so far I've been pretty lucky by sorting by date changed and seei

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 09:39 AM 26/05/2010, Christopher Fisk wrote: On Wed, 26 May 2010, Thane Sherrington wrote: Have you tried using an MD5 hash on the files in the Windows folder and subfolders and compared it to a known good hash to try to find infections? I've been playing with that. Nope, so far I've been

Re: [H] AV disabling question

2010-05-26 Thread Christopher Fisk
On Wed, 26 May 2010, Thane Sherrington wrote: At 11:54 PM 25/05/2010, maccrawj wrote: Any reason not to just scan with the customer drive attached to a bench machine as a data volume & bypass the OS completely? I've come to the conclusion that scanning with a host OS of unknown state is just n

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 09:36 AM 26/05/2010, Joe User wrote: Takes me about 3 days to a week in real time. Actual time in front of the system is around 3 hours. Depends on HDD speed, amount of data and type of data (lots of archives suck). Charge no less then 100. Check out others around you. Geek Squad charges aro

Re: [H] AV disabling question

2010-05-26 Thread Thane Sherrington
At 09:58 AM 26/05/2010, Christopher Fisk wrote: Imaging is a very good policy. I don't do it for all my customers, but I have been seriously considering starting. I had a "duh!" moment earlier when I read your message about USB being slow and eSATA being an option. Part of the reason we don't

[H] Most annoying Office bug ever (track changes)

2010-05-26 Thread Brian Weeden
This is driving me nuts. At some point in the last few weeks, my copy of Word 2007 has decided that every time I open a Word document, it will turn on track changes and set the view to "final". This is incredibly annoying, since it means I have to go in and change those settings so I can actually

Re: [H] AV disabling question

2010-05-26 Thread Christopher Fisk
On Wed, 26 May 2010, Thane Sherrington wrote: Yeah, with eSATA, I should be able to do imaging as well (at least as an upcharge option.) I do imaging as a CYA for myself, not for the customer. I can then go back to the image and retrieve data if something gets deleted that they needed (Some

Re: [H] Most annoying Office bug ever (track changes)

2010-05-26 Thread Christopher Fisk
On Wed, 26 May 2010, Brian Weeden wrote: This is driving me nuts. At some point in the last few weeks, my copy of Word 2007 has decided that every time I open a Word document, it will turn on track changes and set the view to "final". This is incredibly annoying, since it means I have to go in

Re: [H] Most annoying Office bug ever (track changes)

2010-05-26 Thread Brian Weeden
Not that I know of. When I open a document and it does this, if I go into the Word Options, Trust Center, and Privacy Settings, the box for "make hidden markup visible when opening or saving" is checked. So somehow Word is ignoring its own options. --- Brian Weeden Techni

[H] SSE Firefox?

2010-05-26 Thread Thane Sherrington
Ok, this version of Firefox is optimized for SSE? http://www.binaryturf.com/free-software/blazing-fast-firefox-optimized-distributions/ Has anyone tried this? Is it actually faster? T

Re: [H] AV disabling question

2010-05-26 Thread Joe User
Hello Thane, Wednesday, May 26, 2010, 9:00:01 AM, you wrote: > Yeah, I think I'm way under priced. I actually had a machine in two > weeks ago that had been to another small shop, then Staples (both of > whom had "cleaned" the computer of infections.) IE still didn't > work. I removed anothe

Re: [H] AV disabling question

2010-05-26 Thread Joe User
Hello Thane, Wednesday, May 26, 2010, 9:01:39 AM, you wrote: >>Might want to try to value add to that. bump the price to $75 and >>you install a free antivirus and zonealarm free, Foxit, 7zip, vlc >>media player, etc. I would advise against installing any security solutions. I try not to ev

Re: [H] SSE Firefox?

2010-05-26 Thread Scoobydo
I'm pretty sure that AMD and Intel both support SSE and SSE2 extensions so what optimization is dude referring to? I'm skeptical there is any speed difference that Mozilla hasn't already taken advantage of. Have you downloaded and tried for yourself? On Wed, 26 May 2010 14:41:49 -0500, Tha

Re: [H] SSE Firefox?

2010-05-26 Thread Thane Sherrington
At 05:10 PM 26/05/2010, Scoobydo wrote: I'm pretty sure that AMD and Intel both support SSE and SSE2 extensions so what optimization is dude referring to? I'm skeptical there is any speed difference that Mozilla hasn't already taken advantage of. Have you downloaded and tried for yourself? I'll

Re: [H] Most annoying Office bug ever (track changes)

2010-05-26 Thread FORC5
is issue. >>> >>> Any suggestions on how I can fix this before I tear my hair out? >>> >> >> Do you have a roaming profile that could be overwriting the changes you're >> making to the normal.dot? >> >> >> Christopher Fisk >> > &

Re: [H] AV disabling question

2010-05-26 Thread maccrawj
The Rosewill bridge I have came with it's own PSU & can be attached w/o removing the drive, very nice. I'm writing a powershell script to get file details, launch md5deep to calc the md5, and then store the results in CSV file to have a DB for this type of testing. There are some degree of che

Re: [H] AV disabling question

2010-05-26 Thread maccrawj
Imaging is not so long that I fret it if I can take the box offsite & backup without needing compression. Good ass-protector anyways against "repairs" that break more than they fix, LOL! Likely I'd charge $50 to do a backup/restore of (all) My Documents folder(s) and a full OS reinstall+update

Re: [H] AV disabling question

2010-05-26 Thread maccrawj
This I can relate to, eSATA would def. be better as would USB 3.0 I think. On 5/26/2010 4:37 AM, Thane Sherrington wrote: At 11:57 PM 25/05/2010, maccrawj wrote: Yeah, now that I think about it didn't we all discuss this AV scanner machine w/ USB-IDE/SATA converter idea a few years ago? I've

Re: [H] AV disabling question

2010-05-26 Thread maccrawj
This is my understanding also. GS has a flat rate for onsite plus they charge to backup, never mind restore, your data. Haven't looked recently but GS had their rates spelled out on their site last time I checked. On 5/26/2010 5:36 AM, Joe User wrote: Check out others around you. Geek Squad c

Re: [H] AV disabling question

2010-05-26 Thread maccrawj
Those plug 'n go's do the job if you're gonna pull, still I rather own something I can use myself when not working: http://www.newegg.com/Product/Product.aspx?Item=N82E16817198003 Mine came with second tray for free so if forced to, I use it for repairs. Still amazes me how ATX cheap cases are

[H] Catalyst 10.5 released today..

2010-05-26 Thread Scoobydo
Grab em while their hot.. -- Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

Re: [H] AV disabling question

2010-05-26 Thread maccrawj
All great services & suggestions, should create customer loyalty. Ha! Meanwhile it seems generally customer's will shell out $100's to GS to not even fix a problem but tend to hesitate when given the honest offer of "truly needed options & upgrades" to prevent problems from returning or keeping

Re: [H] SSE Firefox?

2010-05-26 Thread maccrawj
Bigger question is will it help with the crushing load of Flash? hehe...

Re: [H] Most annoying Office bug ever (track changes)

2010-05-26 Thread maccrawj
Fisk __ Information from ESET Smart Security, version of virus signature database 5148 (20100526) __ The message was checked by ESET Smart Security. http://www.eset.com

Re: [H] Catalyst 10.5 released today..

2010-05-26 Thread maccrawj
Wish they would either restore the "disable VPU recover" option or at least allow some configuration over how it's watchdog senses issues. STALKER:CoP is so flaky and never survives a VPU recover. Thanks for the heads up, downloading to review... 5/26/2010 7:49 PM, Scoobydo wrote: Grab em wh

Re: [H] Catalyst 10.5 released today..

2010-05-26 Thread Scoobydo
Hope it solves your problem. Stable for me so far.. On Wed, 26 May 2010 22:15:14 -0500, maccrawj wrote: Wish they would either restore the "disable VPU recover" option or at least allow some configuration over how it's watchdog senses issues. STALKER:CoP is so flaky and never survives a VP