Any service that has a FAQ page that states:


"Top 10 FAQs


Our top 10 goes to 11."

Gets at least a second look from me.

-sc

> -----Original Message-----
> From: David Lum [mailto:[email protected]]
> Sent: Thursday, May 05, 2011 9:53 AM
> To: NT System Admin Issues
> Subject: RE: Antivirus Center
> 
> Thanks for this Roger!
> 
> It never ceases to amaze me the little tidbits I find from this list...
> 
> Dave
> 
> -----Original Message-----
> From: Roger Wright [mailto:[email protected]]
> Sent: Thursday, May 05, 2011 6:26 AM
> To: NT System Admin Issues
> Subject: Re: Antivirus Center
> 
> www.join.me is a free alternative to logmein.
> 
> 
> Roger Wright
> ___
> 
> I'm out of bed and dressed... what more do you want?
> 
> 
> 
> 
> 
> On Wed, May 4, 2011 at 3:43 PM, John Aldrich
> <[email protected]> wrote:
> > Well, he's already shipping it out, and he's frustrated, I'm frustrated...
> > wish I could get the company to spring for a "logmein" account..
> > *sigh*
> >
> >
> >
> >
> > -----Original Message-----
> > From: Tammy Stewart [mailto:[email protected]]
> > Sent: Wednesday, May 04, 2011 3:32 PM
> > To: NT System Admin Issues
> > Subject: RE: Antivirus Center
> >
> > No Problem John,
> >
> > Figured autoruns might be easier to walk users through -- You might
> > also be able to remote access the box in safe mode with networking
> > too. (I know shipping costs are deadly)
> >
> > Tammy
> >
> > -----Original Message-----
> > From: John Aldrich [mailto:[email protected]]
> > Sent: Wednesday, May 04, 2011 3:29 PM
> > To: NT System Admin Issues
> > Subject: RE: Antivirus Center
> >
> > Thanks! Will do! 'Preciate it, Tammy! :D
> >
> >
> >
> >
> > -----Original Message-----
> > From: Tammy Stewart [mailto:[email protected]]
> > Sent: Wednesday, May 04, 2011 3:23 PM
> > To: NT System Admin Issues
> > Subject: RE: Antivirus Center
> >
> > Hi John,
> >
> > Log onto a different account -- that one is normally profile specific.
> > Log off first user though or you risk infecting the next account.
> > If only one account on the machine -- try safe mode admin account or
> > safe mode user account (threat shouldn't run in safe mode)
> >
> > Decent writeup on this one..
> > http://www.bleepingcomputer.com/virus-removal/remove-antivirus-
> center
> >
> > Can omit MBAM though if desired.
> >
> > I use "autoruns" from sysinternals -- I LOVE that tool!
> > http://technet.microsoft.com/en-us/sysinternals/bb963902
> >
> > Once you grab that app & initial scan is done hit the "users" menu at
> > top> choose infected user. Reg path & file path should be there.
> > (either a user run key or runonce under the logon tab in autoruns)
> >
> > Since Rescue didn't nail it -- found samples can be uploaded here:
> >
> > http://www.sunbeltsecurity.com/threat
> >
> > We'll be sure to get it in the defs.
> >
> > Cheers!
> >
> > Tammy
> >
> > -----Original Message-----
> > From: John Aldrich [mailto:[email protected]]
> > Sent: Wednesday, May 04, 2011 2:56 PM
> > To: NT System Admin Issues
> > Subject: RE: Antivirus Center
> >
> > No, Vipre is NOT installed. User has McAfee AND AVG on there... I know
> > that McAfee gets installed by default with Acrobat Reader and  other
> > Adobe products...
> >
> >
> >
> > From: [email protected] [mailto:[email protected]]
> > Sent: Wednesday, May 04, 2011 2:42 PM
> > To: NT System Admin Issues
> > Subject: Re: Antivirus Center
> >
> >
> > If VIPRE is installed, then call!  Tammy knows the entire boot
> > process, and she can probably figure out what is loading what.
> >
> > Some bugs disable the task manager, the CLI, and the ability to boot
> > into SafeMode.
> >
> > Note that some of these bugs will scamble the registry, so no
> > applications can run anymore.  She has fixed that one as well.
> > --
> > richard
> >
> >
> >
> > "John Aldrich" <[email protected]>
> > 05/04/2011 01:22 PM
> > Please respond to
> > "NT System Admin Issues" <[email protected]>
> >
> > To
> > "NT System Admin Issues" <[email protected]>
> >  Press this button if the "To" is a fax number. Enter in the fax
> > number like 123-456-7890.
> > cc
> >
> > Subject
> > Antivirus Center
> >
> >
> >
> >
> >
> >
> >
> > I just had a remote user infected with "Antivirus Center" fake
> > antivirus. I had him try to run Vipre Rescue, but it didn't find
> > anything. Any idea why VR didn't find it?
> >
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> >
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> >
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to