I recently noticed that some of my client machines where not up to date when walking around the office. On trying to log into the office scan web console to check what was happening I got an error saying that the Office Scan master service was not running.
This had occured at all 3 of my sites with office scan 8 installed. To rectify the problem you can open the services mmc console. Start > run > services.msc
Find the Office Scan master service and click start.
To prevent the error in future I changed the recovery options for the service to restart the service should it ever fail.
30 October 2007
PDF Vulnerability
We recently got hit with a new threat in the form of a vulnerability in Adobe Acrobat Reader that allows a PDF file with malicious code to download a trojan off the internet.
When you open the pdf file a command line window may appear, and internet explorer or firefox may attempt to open. I have also heard of a case where outlook/outlook express is opened as well.
In order to combat this threat you need to download a patch from the Adobe site here.
You can find out more information on the vulnerability and its exploits below:
When you open the pdf file a command line window may appear, and internet explorer or firefox may attempt to open. I have also heard of a case where outlook/outlook express is opened as well.
In order to combat this threat you need to download a patch from the Adobe site here.
You can find out more information on the vulnerability and its exploits below:
27 July 2007
Trend UltraVNC Problem
My Trend Micro Office Scan server has recently started poping up with tons of TROJ_Generic.MRS viruses. I managed to narrow it down and determine that Trend is picking up my UltraVNC Server on some of my computers as this TROJ_Generic.MRS virus.
To stop multiple errors from poping up on the client machine you can temporarily stop the UltraVNC service.
NOTE:
Once you stop the service the UltraVNC exe file will be deleted from the machine so you may need to re-install the application.
To prevent the anti-virus from picking up the UltraVNC server as a trojan again you can add an exclusion to the OfficeScan server via the webconsole.
Click on Clients -> Scan Options -> Real Time Scan Settings.
In the Real Time scan settings page check the Enable Exclusion list.
Click on the Exclusion list link and in the folder section add the UltraVNC directory.
C:\Program Files\UltraVNC and then click add.
To stop multiple errors from poping up on the client machine you can temporarily stop the UltraVNC service.
NOTE:
Once you stop the service the UltraVNC exe file will be deleted from the machine so you may need to re-install the application.
To prevent the anti-virus from picking up the UltraVNC server as a trojan again you can add an exclusion to the OfficeScan server via the webconsole.
Click on Clients -> Scan Options -> Real Time Scan Settings.
In the Real Time scan settings page check the Enable Exclusion list.
Click on the Exclusion list link and in the folder section add the UltraVNC directory.
C:\Program Files\UltraVNC and then click add.
04 July 2007
PDF Spam
It looks like the spam community is starting to use PDF files to fool spam filters.
This is going to be difficult to combat as PDF files can not be blocked seeing as they are a commonly used document type.
Subscribe to:
Posts (Atom)