RE: Twitter

This is a group of people exploiting a now patched vulnerability in cross-site scripting. Not specifically a virus. It could easily have been used to spread a click-less batch of malware or a site redirect, but for now it seems the issue has been resolved by Twitter. Thanks, Jeff - je...@sunbe

RE: Vipre issue this morning

ecarpet.com] Sent: Thursday, September 02, 2010 10:38 AM To: NT System Admin Issues Cc: Jeff Cain Subject: RE: Vipre issue this morning Ooops... I didn't realize it until the tech was analyzing the logs and asked about the IP address... awhile back I moved the Vipre Enterprise console

RE: Vipre issue this morning

John, This is the first I've heard of it. If you want to off-list email me your ticket number I'll keep an eye on it for you. ;) Thanks, Jeff - je...@sunbeltsoftware.com Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.com From:

RE: Blackberry

No problems here on Verizon (non-BES) - I've been getting gmail all day. Thanks, Jeff - je...@sunbeltsoftware.com Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.com From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Tuesday, Aug

RE: msi installer and event id 1042

be a bit difficult to go through because there's so much information to weed out. You'll want to run this from a command prompt within the same folder as the .exe file - your MSI log will be C:\setup.log (you can name this what you want). Thanks, Jeff Cain Technical Support Analyst

RE: Guilty, will change after reading this.

When the UPS switches to battery power, it _can_ cause a dip or a spike which the surge protector may react to. I believe each time they do this it degrades the unit until it fails completely. I'm guilty of this too, but I've never had an issue with it. :) Thanks, Jeff C

RE: Physical to Virtual backup

I love VMWare Converter, but I have not tried to go from virtual to physical. :) Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.com<http://www.sunbeltsof

RE: Possible Rogue device on the network

I found this post on VMWare's community site which seems to imply that their Dell NIC was sending out a false MAC to the network. Possibly a similar issue? http://communities.vmware.com/thread/36187 Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com>

RE: Vipre false positives?

Everyone, AV Lab is aware of the FPs and they should be resolved late this morning. Thanks, Jeff Cain – supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.co

RE: Vipre false positives?

These should have been addressed in def version 6636. If not please let us know right away. Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.co

RE: XP SP3 machine not getting logon window

people had run into it, but had no working suggestions. I ended up having to remove the hard drive and back up the data to another machine, then reinstalling Windows XP sp3. Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst S

RE: ID-10-T users and large attachments

Which MTA are you using? You stated you do not have Exchange, but all MTAs (email servers) that I am aware of have this type of feature. Thanks, Jeff Cain - supp...@sunbeltsoftware.com Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.com Tel: 1

RE: Dell PowerEdge R410 replacement motherboard firmware contains malware

Wow, that's rough. Thanks, Jeff Cain - supp...@sunbeltsoftware.com Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.com Tel: 1-877-757-4094 Fax: +1 727-562-3402 -Original Message- From: Angus Scott-Fleming [mailto:angu...@geoapp

RE: Do you all like fewer or more servers?

I don't think it's worth it, especially if you've had little to no issues in the past. Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sun

RE: Anyone mitigating against this yet?

argets-Shortcut-Flaw-In-Windows-SCADA http://threatpost.com/en_us/blogs/verisign-revokes-certificate-used-sign-stuxnet-malware-071710 Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst Sunbelt Software, part of th

RE: Whoa! GFI Software acquires Sunbelt Software

Yes, the list is not going anywhere. :) Thanks, Jeff Cain - supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Technical Support Analyst Sunbelt Software, part of the GFI Software family www.sunbeltsoftware.com<http://www.sunbeltsoftware.com/> Tel: 1-877-757-4094 Fax

RE: Multi-head video card recommendations?

hanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware.com<http://www.sunbeltsoftware.com/>> Physical Address: 33 N Garden Ave Su

RE: Back as CTO of eEye

I hear pythons can help with the gator problem. :) http://www.sptimes.com/2005/10/06/State/Gator_vs_python_ends_.shtml Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-727-56

RE: Back as CTO of eEye

David, Have you gotten in touch with support or opened a ticket with us for these problems? I'm sure we can help you get this resolved quickly. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.co

RE: Letter from Sunbelt CEO: GFI Acquires Sunbelt Software

Nothing. We are staying partnered with Malwarebytes. :) Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware

RE: Letter from Sunbelt CEO: GFI Acquires Sunbelt Software

I do not believe there are any changes in store for the list. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware

RE: Letter from Sunbelt CEO: GFI Acquires Sunbelt Software

Our roadmap for VIPRE is not changing so no worries there. We still have the same stellar support and development team! No one should worry at all regarding our product line. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:s

RE: Letter from Sunbelt CEO: GFI Acquires Sunbelt Software

=) Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware.com<http://www.sunbeltsoftware.com/>> Physical Address: 33 N Gar

RE: Vipre: issues running a deployed agent via msi

Justin, I'd recommend getting in touch with someone at support. It sounds like a communication issue, but we can't be sure without a look at the logs. Please give us a call at the number in my signature so we can get you up and running. :) Thanks, Jeff Cain Technic

RE: VMWare View, How are you handling AV? (Viper to be specific)

g that you don't need to delete the agent if the machine is cloned and only one is active at a time. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-72

RE: VMWare View, How are you handling AV? (Viper to be specific)

reinstall the VIPRE agent after you clone the machine to prevent the Enterprise Console from confusing the machines as they'll have the same agent GUID in the console. As far as licensing goes, I don't believe we hold VM installs against you. Thanks, Jeff Cain Technical Support Analy

RE: Vipre keeps blocking my scripts

this not going to work for you? Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-757-4094 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware.com<http://www.sunbeltsoftware.com/>>

RE: Vipre keeps blocking my scripts

oIT scripts are getting flagged is that a core component of them is used widely in the malware world. We ran into similar issues internally since we used to use AutoIT with our AV Removal tools. We ended up signing all of the .exe's we made with it. Thanks, Jeff Cain Technical Support Anal

RE: Patch Management - again

Jason, For what it's worth, I would not ever automate a kernel upgrade. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com Voice: 1-877-757-4094 Fax:   1-727-562-5199 Web: <http://www.sunbeltsoftware.com> Physical Address: 33 N

RE: Email Antivirus "Cleaned" Alerts

d be several in a single email. I am checking if we have this in as a feature request yet, and if it's on the roadmap for a future build. If not, I'll make sure it's added. Sorry for the confusion from my first post. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Ema

RE: Email Antivirus "Cleaned" Alerts

Sent: Monday, June 07, 2010 11:03 AM To: NT System Admin Issues Subject: RE: Email Antivirus "Cleaned" Alerts We don't have Premium, only Enterprise, so no firewall. :( [cid:image001.jpg@01CB0634.FAE07070][cid:image002@01cb0634.fae07070] From: Jeff Cain [mailto:je...@sunbelt-

RE: Email Antivirus "Cleaned" Alerts

John, You can see this in the Agent UI under Firewall -> "View firewall history" -> Webfilter. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-7

RE: Email Antivirus "Cleaned" Alerts

of getting your answer from development now. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware.com<http://www.sunbeltsoftware.c

RE: Web server problems, browser?

Richard, If you'd like, I'd be happy to take a look at your VIPRE logs from the server to ensure we're not causing you undue headaches. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware

RE: AD account - weird problem

Are you able to test her access? IE: Log in as her and verify that the problem is not user related? Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-727-562-5199 Web:

RE: VIPRE and Shadowprotect

Jay, The issues with ShadowProtect were resolved in VIPRE 3.1 Hotfix 5. All should be well with the two products now. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fa

RE: SBS 2008 + Redhat Desktop client

I believe you can use Evolution to connect via MAPI to an Exchange server. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware

RE: Dell PowerEdge 840 SATA?

I would get in touch with someone in Dell's sales & upgrades dept. Get the exact model number they would be sending you and see if you can source it elsewhere. PS> I love newegg. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com

RE: "A known bad URL was replaced"

uot;My Computer" faked to look like yours) - Even more amusing; I've run into one of those browsing from my Blackberry. Imagine my surprise when a window came up that had a C:\ drive, telling me I'm infected! Thanks, Jeff Cain Technical Support Analyst Sunbelt Software E

RE: "A known bad URL was replaced"

Your ISP may not use the same bad-URL lists that Threat Track does. The bad scripts could certainly be a hijacked website. I've seen many more of these lately. Those iFrame droppers can be nasty. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftwar

RE: "A known bad URL was replaced"

If VIPRE removed a URL from an email that means it was in our "bad" list from Threat Track. VIPRE was most likely not over-reacting. Which spam filter do you use? Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbel

RE: Virpe does NOT reboot client machines

Something (like a firewall) may be blocking the remote call... I believe it(Windows) uses port 135/139 for the calls. You can try to telnet 135 (and then 139) and see if it opens a connection? Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com

RE: Virpe does NOT reboot client machines

John, The remote shutdown command just issues an SCM call to do the reboot. I assume that you're logged in and using the console as a domain admin, and that domain admin has admin rights on the remote machine? Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email:

RE: Computers becoming unresponsive across entire network.

ality assurance processes, so that we can ensure that this type of detection doesn't occur again. Thanks for choosing Sunbelt Software, Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1

RE: Sunbelt forums down?

Everyone, IT is working on getting the support forums back online. Regarding the 100% CPU usage issue, the next set of defs will alleviate this issue. The new defs version should be 6275 and should be available shortly. Sorry for any inconvenience! Thanks, Jeff Cain Technical Support Analyst

RE: www.Sunbelt-software.com down?

I figure I didn't take into account the other two trips. =P My only excuse is that it's Friday. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com Voice: 1-877-673-1153 Fax:   1-727-562-5199 Web: <http://www.sunbeltsoftware.com> Physic

RE: www.Sunbelt-software.com down?

Haha, I knew someone was going to wiki that and point it out. I just didn't want to be "That guy". =) Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com Voice: 1-877-673-1153 Fax:   1-727-562-5199 Web: <http://www.sunbeltsoftware.com

RE: Vipre upgrade

Yes it is. :) Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-727-562-5199 Web: <http://www.sunbeltsoftware.com<http://www.sunbeltsoftware.com/>> Physical Addres

RE: www.Sunbelt-software.com down?

which included our backup internet connection. They all ran through this particular trunk that was taken out. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-727-562-5199 Web:

RE: Current AD domain naming best practices

Personally I like to keep the internal and external domain names the same, it makes things easier for certificates. This should be a pretty good all-in-one source for you. http://technet.microsoft.com/en-us/library/bb727085.aspx Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email

RE: Malwarebytes enterprise + Viper enterprise same pc / network

P (as it handles older threats as well as the newest) and Malwarebytes for routine scanning to compliment your VIPRE scans. Thanks, Jeff Cain Technical Support Analyst Sunbelt Software Email: supp...@sunbeltsoftware.com<mailto:supp...@sunbeltsoftware.com> Voice: 1-877-673-1153 Fax: 1-727-5