Old School Malware Attack

This little gem came in via email today. This is the kind of stuff that trips up users all of the time.

Fake UPS email with link to malware

Note: Just because an email looks like Plain Text doesn’t mean that it is.

VN:F [1.9.20_1166]
Rating: 0.0/10 (0 votes cast)

KYSBSUG #91 – 3CX with Allen Miller

KYSBSUG - Kentucky Small Business Server User GroupKYSBSUG September 2011 – Meeting #91 – 3CX
Presenter: Allen Miller from AMCC
Date: Thursday September 8, 2011
Time: 6:30 – 8:30 PM Eastern
Venue: Money Concepts
Address: 323 Townepark Circle, Louisville, KY 40243
Registration URL: Due to limited seating, registration *IS* required.
Click here to register today!

VN:F [1.9.20_1166]
Rating: 0.0/10 (0 votes cast)

Recent SBS and WHS KB Articles – August 2011

More info and updates for your network admin pleasure.

SBS 2003

SBS 2008

SBS 2011 Standard / Essentials

WHS 2011 / Windows Storage Server Essentials 2008 R2

  • KB #2554637 – SBS 2011 Essentials, WHS 2011, WSSE 2008 R2 –

    The client-side package of Update Rollup 1 for Windows Small Business Server 2011 Essentials, for Windows Home Server 2011, and for Windows Storage Server 2008 R2 Essentials is available
    http://support.microsoft.com/kb/2554637/

  • KB #2554634 – WHS 2011 – Update Rollup 1 for Windows Home Server 2011 is available
    http://support.microsoft.com/kb/2554634/

Other

VN:F [1.9.20_1166]
Rating: 0.0/10 (0 votes cast)

Download – 10 Free eBooks

eBook - The Windows 7 Power Users GuideTitle: The Windows 7 Power Users Guide
Author: Mike Halsey
Publisher: Microsoft Press
Date Published: © 2009 Mike Halsey 
Pages: 174
File size: PDF 23.3 MB
Price: FREE
Download URL: Click here for PDF

Description:
The Windows 7 Power Users Guide, by Microsoft MVP Mike Halsey, shows you to how to get the very best out of Windows 7. It’s suitable for users of every ability, from complete novices to tech pros, and includes step-by-step guides, illustrations and diagrams on every page and quick tips throughout.

eBook - Microsoft Office 365: Connect and Collaborate Virtually Anywhere, AnytimeTitle: Microsoft Office 365: Connect and Collaborate Virtually Anywhere, Anytime
Authors: Katherine Murray
Publisher: Microsoft Press
Date Published: © 2011 Katherine Murray 
ISBN: 978-0-7356-56949 
Pages: 337
File size: PDF 21.0 MB
Price: FREE
Download URL: Click here for PDF

Description:
This book shows you how you can use cloud computing—and ­specifically, ­Office 365—to get more done, collaborate more easily, and work more ­flexibly than you ever have before. From the necessary how-tos about ­creating and administering your Office 365 account and working with the various Office 365 programs to sharing files with your team, creating a team site, using Office Web Apps, and holding online meetings, you’ll discover how easy it is to work online and off, accessing and sharing your files whenever you need to.

.EPUB and .MOBI ebooksEight More eBooks on Microsoft Office 2010

eBook Titles:

  • Best Practices for Outlook 2010
  • Creating Everyday Documents That Stand Out From The Crowd
  • Basic Tasks in Word 2010
  • Basic Tasks in Excel 2010
  • Basic Tasks in Outlook 2010
  • Basic Tasks in OneNote 2010
  • Basic Tasks in Visio 2010

These Office 2010 eBooks are available in both .EPUB (Nook, Sony Reader, etc.) and .MOBI (Kindle) formats.

Download URL: Click here for .EPUB or .MOBI

VN:F [1.9.20_1166]
Rating: 0.0/10 (0 votes cast)

GFI MAX Doesn’t Detect ShadowProtect MSP

I ran into an interesting issue where our monitoring software (GFI MAX) wasn’t detecting the installation / existence of our backup software (ShadowProtect MSP Edition).

THE SOFTWARE

  • Windows Server 2008 R2 installation (brand new install)
  • Current GFI MAX monitoring agent (v 8.8.2)
  • ShadowProtect MSP Edition (v 4.15.10.125)

As you can see from the screen shot below, ShadowProtect is actually installed and showing up in the registry, but the Agent is still failing to detect it.

GFI MAX agent insists that ShadowProtect isn't installed

THE SUPPORT

Per a phone call with the good folks at GFI, the GFI Agent is looking for some specific registry keys to determine the existence of ShadowProtect. The keys are in HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\StorageCraft:

  • ShadowProtect SBS
  • ShadowProtect Server
  • ShadowProtect Desktop

THE CRUX

The new ShadowProtect MSP version installs itself as “ShadowProtect”, so the missing “SBS / Server / Desktop” bit at the end causes the Agent to fail.

The FIX

I added a new registry key…

Adding a new registry key for ShadowProtect MSP version

…called “ShadowProtect Server”…

image

…and it passed.

GFI MAX agent now detects ShadowProtect MSP Edition

IMPORTANT: I did NOT modify the existing ShadowProtect registry key – I just added a new one. DON’T rename the existing key.

I called the key “ShadowProtect Server” because this is Server 2008 R2. If this was SBS 2008 or 2011 I’d call the new key “ShadowProtect SBS”.

WHY WE DIDN’T RUN INTO THIS ISSUE BEFORE

As we’ve been converting from the old ShadowProtect MSP version to the new one, that old registry key still existed (even after uninstallation).

SIDE NOTE

The two events the monitoring agent is looking for in regards to ShadowProtect in the Application Log are:

  • ID 1120 – ShadowProtectSvc – Success
  • ID 1121 – ShadowProtectSvc – Failure

Also, GFI MAX will not monitor for the following:

  • ShadowProtect IT Edition
  • ShadowProtect Granular Recovery for Exchange
  • ShadowProtect ImageManager Enterprise
VN:F [1.9.20_1166]
Rating: 0.0/10 (0 votes cast)