Category: SECURITY

Exchange 2010 Public Folder Migration: Replicas stay on 2007 with Load Balancer Setup

Special: Load Balancer Setup with CAS-Array, Hardware Load Balancer like KEMP. Gateway both CAS are going to KEMP backside. But Static Routes on both CAS to Backup Server, DC’s, Acronis Servers, old Exchange. Split DNS. We mostly see this with customer having Internal: customer.ch (LAN) and External: customer.ch (Wan) which is the correct way after […]

Exchange: Anti Virus Software on Exchange 2010/2013 Servers – Mcafee

File and Process Exclusion for Anti Virus Software for Exchange 2010 / 2013 http://technet.microsoft.com/en-us/library/bb332342(v=exchg.150).aspx Cdb.exe Microsoft.Exchange.Pop3service.exe MSExchangeRepl.exe Cidaemon.exe,Microsoft.Exchange.ProtectedServiceHost.exe MSExchangeSubmission.exe Clussvc.exe, Microsoft.Exchange.RPCClientAccess.Service.exe MSExchangeTransport.exe Dsamain.exe Microsoft.Exchange.Search.Service.exe MSExchangeTransportLogSearch.exe EdgeCredentialSvc.exe Microsoft.Exchange.Servicehost.exe MSExchangeThrottling.exe EdgeTransport.exe Microsoft.Exchange.Store.Service.exe Msftefd.exe ExFBA.exe Microsoft.Exchange.Store.Worker.exe Msftesql.exe hostcontrollerservice.exe Microsoft.Exchange.TransportSyncManagerSvc.exe OleConverter.exe Inetinfo.exe Microsoft.Exchange.UM.CallRouter.exe Powershell.exe Microsoft.Exchange.AntispamUpdateSvc.exe MSExchangeDagMgmt.exe ScanEngineTest.exe Microsoft.Exchange.ContentFilter.Wrapper.exe MSExchangeDelivery.exe ScanningProcess.exe Microsoft.Exchange.Diagnostics.Service.exe MSExchangeFrontendTransport.exe TranscodingService.exe Microsoft.Exchange.Directory.TopologyService.exe MSExchangeHMHost.exe UmService.exe Microsoft.Exchange.EdgeSyncSvc.exe MSExchangeHMWorker.exe UmWorkerProcess.exe […]

DNS DIG Lookup / MX Check / Network Diag Links

Since the Robtex.com redesign, which does not seem to work properly under some IE versions, we had to use other resources or say find them. Beside mxtoolbox.com we use for MX SPAM lookup there is dnsinspect.com which is really nice and does most of the stuff for you automatic incl. good Name server check.   […]

Behebung Fehler Mcafee VSE 8.8 SP2 TRUST beim Scannen und Event 516 crypt32.dll

Dieses Dokument beschreibt wie man Mcafee Event516 oder Untrusted Fehlermeldung beheben kann. Fehlermeldung: scan32.exe – Ungültiges Bildscan64.exe – Ungueltiges Bild Versionen:   * Client Windows 7 64BIT SP1, German Language * Mcafee VSE 8.8 P2 with HF Post SP2 (8.8.0.975 BUILD 14.08.2012) * DAT 7180.0000 * Framework 4.8.0.887 * EPO 4.6   Der Fehler tritt […]

Massive Spam Reply wave in Switzerland 08.08.2013 – Federal E-Mail domain admin.ch involved

Subject Range: RE: [#SMV-xxxxxxxxxxxxxxxxxxxx]: Transfer – Ueberweisung   Since today 08.08.2013 starting around 17:10 O’clock CET we see a large amount of “Reply – Delete me also” spam running through all kind devices and also large enterprise Spam filters. We even have a reply from Swiss federal E-Mail domain @admin.ch which hosts all or most […]

W32/Autorun.worm.aaeb-h

Subject: *URGENT* McAfee SNS ALERT: *UPDATE* Reports of W32/autorun.worm.aaeb-h infections   **Update to original message: Stinger tool now available. See Mitigation section below** McAfee has received multiple reports of customers who are severely affected by variants of W32/autorun.worm.aaeb-h. ImpactW32/Autorun.worm.aaeb-h has the ability to infect removable media devices and mounted network shares. It can also copy itself […]

MCAFEE: Hotfix VSE88HF793640 per EPO verteilen

www.butsch.ch Diese Anleitung beschreibt wie man einen HOTFIX auf einem MCAFEE EPO Server 4.5/4.6 integriert und alle Systeme oder eine bestimmte Gruppe verteilt. Als Beispiel den Patch/Hotfix vom 21.08.2012 für Mcafee VSE 8.8. https://kc.mcafee.com/corporate/index?page=content&id=KB76004 DAT 6807/6808 Causing Issues with VSE 8.8.x   Inhalt Hotfix Paket einchecken    1 Distribute/Update an alle Endpoints im Netz    2 Distribute/Update PRO Untergruppe […]

Windows XP Sp3, Event 516, mfehdik, SLL-API, memory Leak, crypt32.dll

Windows XP Sp3, Event 516, mfehdik, SLL-API, memory Leak, crypt32.dll Memory leak in MFEVTPS.EXE Recent Microsoft security updates for Windows XP SP3 and Server 2003R2 introduce a memory leak for the VirusScan Enterprise process MFEVTPS.EXE. The leak is actually from a Windows binary, Crypt32.dll, that MFEVTPS.EXE utilizes. A fix for this issue is available from Microsoft. […]

Mcafee Framework 4.6 and EPO Migrarion from SRV 2003R2 to 2008R2

Mcafee Framework 4.6 is out Please check the 4 important Hotfixes which may seem important if you have “MS Malicious Software Removal Tool” installed. https://kc.mcafee.com/corporate/index?page=content&id=KB72202 1 Install/deploy Framework 4.62 Install HF660014 3 Install HF660568  Migration from Server 2003R2 32BIt to Windows Server R2008 R2 64bit (Same Server Name a must) Mcafee KB66616 (OS=OS) und KB71078 (OS !=OS). Sollte […]