- Blind-sysadmins - lists.hodgsonfamily.org

RSA SecurID
by Andrew Hodgson 29 May '12

29 May '12

Hi, We currently have an old SecurID with the old token setup. I don't use this atm because I am unable to see the numbers on the token. We are looking at upgrading or replacing this, does anyone use the iPhone app and find it usable? I am unable to test this as when I go into the app it needs a security license which we don't have. Any alternative products that may be more workable? Thanks. Andrew.

1 0

urgent problem with Security Essentials update
by David Mehler 23 May '12

23 May '12

Hello, I've got an xpsp3 pro box that is having a problem updating Security Essentials. Apparently about a week back the box began an automatic download and install of definition updates, something happened and it was not successful. I've rebooted, tried it myself from the Essentials interface and not had any luck, It's looking for a file that's in a nonexistent path. I've cleared out the windows update cache in %windir%\SoftwareDistribution, rebooted, and again reran the update no good. I then manually downloaded Security Essentials from Microsoft and atempted to uninstall the existing copy intending to install the download. That also failed while looking for a file in a nonexistent path. I tried to install the file over the existing copy, an update, that didn't work. Finally, I have downloaded the latest definition updates two files one a definition the other a net file of some kind, ran those, seemed to work alright, but didn't do anything I wasn't prompted at all. I rebooted again and thinking the files were now in place for an update tried again from security essentials, this did not work. Urgently need help! Thanks. Dave.

8 17

urgent problem with Security Essentials update
by David Mehler 22 May '12

22 May '12

Hello, I've got an xpsp3 pro box that is having a problem updating Security Essentials. Apparently about a week back the box began an automatic download and install of definition updates, something happened and it was not successful. I've rebooted, tried it myself from the Essentials interface and not had any luck, It's looking for a file that's in a nonexistent path. I've cleared out the windows update cache in %windir%\SoftwareDistribution, rebooted, and again reran the update no good. I then manually downloaded Security Essentials from Microsoft and atempted to uninstall the existing copy intending to install the download. That also failed while looking for a file in a nonexistent path. I tried to install the file over the existing copy, an update, that didn't work. Finally, I have downloaded the latest definition updates two files one a definition the other a net file of some kind, ran those, seemed to work alright, but didn't do anything I wasn't prompted at all. I rebooted again and thinking the files were now in place for an update tried again from security essentials, this did not work. Urgently need help! Thanks. Dave.

1 0

Malware and File Permissions and attributes
by David Mehler 21 Apr '12

21 Apr '12

Hello, Has anyone dealt specifically with any of the following malware: 1. Exploit:Java/CVE-2012-0507.R 2. backdoor:Win32/Kelihos.F 3. Exploit:Java/CVE-2010-0840.QI 4. exploit:Java/CVE-2012-0507.R!ldr 5. TrojanDownloader:Win32/Waledac.C 6. trojan:Win32/Tibs.IT 7. Trojan:Win64/Alureon.gen!F 8. Trojan:Win64/Alureon.gen!J 9. trojan:Win32/Alureon.gen!AD 10. Trojan:Win32/Orsam!rts 11. trojan:Win32/Alureon.FK 12. Trojan:DOS/Alureon.I 13. trojan:Win32/Dynamer!dtc 14. Trojan:Win32/Dynamer!dtc on a win7 64 bit machine? This one is going to be convoluted. An individual who gives me more computer headaches than anyone else but he also happens to be extended family, called me about two weeks back claiming his box had a worm. I think he was running Norton 360. I do not know the name of the worm or if it was a worm. He didn't give me the box until four days ago when problems had eskelated to a backdoor/rootkit, trojan, and a virus his words. His cleaning efforts did not take the box off the internet so I wouldn't be surprised. The thing that got the box finally to me was a black screen, my guess is a very corrupted windows given some of the above malware I've googled as well as a report that his user profile, documents, background, pictures, etc was gone. The drive in question is very full only having 20 GB left of space. Here's the problem, I put that drive in an external enclosure hooked it up to a test box and cleaned it, took two passes of Security Essentials and Malware bites to do it, found the above listing of stuff this is after his "cleaning efforts" I can only have nightmares about what this looked like before. Two problems, the black screen (corrupted windows or registry my guess), and file permission changes. He reported to me that certain files were "hidden" I have since discovered that they are operating system protected, but his profile is not accessible, it's showing up as a folder with no files or folders in it. These reports are still from this drive being in the external enclosure, I have not rehooked it up to it's motherboard, I believe my next step is to blow it away, it sounds like it is really bad, but I've got to get the profiles, documents, pictures, etc. Suggestions welcome, none of my googling on the above indicated they did anything with regards changing file attributes to hidden or setting files "protected" by the operating system. Thanks. Dave.

5 22

help with network monitoring tools
by Iaen Cordell 21 Apr '12

21 Apr '12

good morning list, I am a new member of this list & would like to say hello & to thank you for this list. now down to business: has anyone on the list had experience with network [alarm monitoring] tools like HP openview or TMIPS? & if yes how is it with speech? HP claim that text can be displayed next to each network element but, as yet I am unable to find this text, the same is with JFW or window-eyes. maybe a Linux client would be better? thanking you in advance. IC -- Iaen Cordell Home: +61294197457 Mobile: +61412600466

2 1

Accessibility of VMWare desktops
by Darragh OHeiligh 19 Apr '12

19 Apr '12

Hello, I've written a blog post about my attempts at using a thin client to access a virtual desktop. The hope in this company is that we will move over to this type of set up sooner rather than later and as usual, people such as my self in IT are expected to be the testers. Please read the post at http://www.digitaldarragh.com/2012/04/19/the-accessibility-of-virtual-deskt… and feel free to leave a comment. Regards Darragh Ó Héiligh Fujitsu Offices of the Houses of the Oireachtas, Fredrick Building, South Fredrick Street, Dublin2 Telephone: +353 (1) 618 3559 Email: darragh.oheiligh(a)oireachtas.ie Internet: http://www.oireachtas.ie

2 2

Malware and File Permissions and attributes
by David Mehler 19 Apr '12

19 Apr '12

Hello, Has anyone dealt specifically with any of the following malware: 1. Exploit:Java/CVE-2012-0507.R 2. backdoor:Win32/Kelihos.F 3. Exploit:Java/CVE-2010-0840.QI 4. exploit:Java/CVE-2012-0507.R!ldr 5. TrojanDownloader:Win32/Waledac.C 6. trojan:Win32/Tibs.IT 7. Trojan:Win64/Alureon.gen!F 8. Trojan:Win64/Alureon.gen!J 9. trojan:Win32/Alureon.gen!AD 10. Trojan:Win32/Orsam!rts 11. trojan:Win32/Alureon.FK 12. Trojan:DOS/Alureon.I 13. trojan:Win32/Dynamer!dtc 14. Trojan:Win32/Dynamer!dtc on a win7 64 bit machine? This one is going to be convoluted. An individual who gives me more computer headaches than anyone else but he also happens to be extended family, called me about two weeks back claiming his box had a worm. I think he was running Norton 360. I do not know the name of the worm or if it was a worm. He didn't give me the box until four days ago when problems had eskelated to a backdoor/rootkit, trojan, and a virus his words. His cleaning efforts did not take the box off the internet so I wouldn't be surprised. The thing that got the box finally to me was a black screen, my guess is a very corrupted windows given some of the above malware I've googled as well as a report that his user profile, documents, background, pictures, etc was gone. The drive in question is very full only having 20 GB left of space. Here's the problem, I put that drive in an external enclosure hooked it up to a test box and cleaned it, took two passes of Security Essentials and Malware bites to do it, found the above listing of stuff this is after his "cleaning efforts" I can only have nightmares about what this looked like before. Two problems, the black screen (corrupted windows or registry my guess), and file permission changes. He reported to me that certain files were "hidden" I have since discovered that they are operating system protected, but his profile is not accessible, it's showing up as a folder with no files or folders in it. These reports are still from this drive being in the external enclosure, I have not rehooked it up to it's motherboard, I believe my next step is to blow it away, it sounds like it is really bad, but I've got to get the profiles, documents, pictures, etc. Suggestions welcome, none of my googling on the above indicated they did anything with regards changing file attributes to hidden or setting files "protected" by the operating system. Thanks. Dave.

1 0

Latest version of HP command view is very very accessible.
by Darragh OHeiligh 19 Apr '12

19 Apr '12

A good new story for a change. I have never seen web accessibility work this well before. The tree views in the latest HP command view software for SAN management are completely accessible. Hat off to HP. They've definitly got this right. Regards Darragh Ó Héiligh Fujitsu Offices of the Houses of the Oireachtas, Fredrick Building, South Fredrick Street, Dublin2 Telephone: +353 (1) 618 3559 Email: darragh.oheiligh(a)oireachtas.ie Internet: http://www.oireachtas.ie

3 3

Latest version of HP command view is very very accessible.
by Darragh OHeiligh 19 Apr '12

19 Apr '12

A good new story for a change. I have never seen web accessibility work this well before. The tree views in the latest HP command view software for SAN management are completely accessible. Hat off to HP. They've definitly got this right. Regards Darragh Ó Héiligh Fujitsu Offices of the Houses of the Oireachtas, Fredrick Building, South Fredrick Street, Dublin2 Telephone: +353 (1) 618 3559 Email: darragh.oheiligh(a)oireachtas.ie Internet: http://www.oireachtas.ie

1 0

Accessibility of VMWare desktops
by Darragh OHeiligh 19 Apr '12

19 Apr '12

Hello, I've written a blog post about my attempts at using a thin client to access a virtual desktop. The hope in this company is that we will move over to this type of set up sooner rather than later and as usual, people such as my self in IT are expected to be the testers. Please read the post at http://www.digitaldarragh.com/2012/04/19/the-accessibility-of-virtual-deskt… and feel free to leave a comment. Regards Darragh Ó Héiligh Fujitsu Offices of the Houses of the Oireachtas, Fredrick Building, South Fredrick Street, Dublin2 Telephone: +353 (1) 618 3559 Email: darragh.oheiligh(a)oireachtas.ie Internet: http://www.oireachtas.ie

1 0