Category: Uncategorized

Product: Microsoft Edge — Error 1722. There is a problem with this Windows Installer package, Event 11722

EVENT, 11722, MSIinstaller, Application This issue keeps resurfacing, and we most commonly encounter it in customer environments running parallel systems—such as Citrix alongside VDI—but it also appears in traditional Windows desktop deployments. Our observations suggest a strong correlation with scenarios where the same user account is actively used across multiple platforms at the same time […]

image

MS SRV Disable IPv6 the correct way CVE-2024-38063

Recommendation 16.08.2024 for CVE-2024-38063 and IPV6 There is a patch from 2008-2022+ Servers so use it See following LINK on how to import the older OS patches into WSUS CVE-2024-38063, CVSS 9.8, import free 2008/R2 + 2012R2 into WSUS – www.butsch.ch https://www.butsch.ch/post/cve-2024-38063-cvss-9-8-how-to-import-the-free-2008-2008r2-patch-into-wsus/ If you can’t patch then as least options CAREFULLY consider disabling IPV6 the […]

CRL check, Zertifikatsperrlisten Software, Certificate Revocation List Check Tool zum suchen aller geblockten CRL in Firmenumgebungen, crlcheck.exe

crl check | crlcheck tool Eine Certificate Revocation List (CRL) ist eine von einer Certification Authority (CA) geführte Liste, die digitale Zertifikate auflistet, die revoziert wurden und nicht mehr gültig sind. Sie stellt sicher, dass Benutzer die Gültigkeit eines Zertifikats überprüfen können, was die Sicherheit innerhalb einer Public Key Infrastructure (PKI) erhöht. Mit diesem Tool […]

Defrag Exchange on-premises Database with ESEUTIL

http://technet.microsoft.com/en-us/library/aa998863(v=exchg.80).aspx If you are at the end of Migration. Check there are no user active on the DB:  Show all mailboxes on Database “mb3” Get-Mailbox -Database “mb3” | select Displayname, Alias, Database, OrganizationalUnit | ft -wrap –auto  Also check this KB for hidden accounts and dead accounts : https://www.butsch.ch/post/Exchange-20072010-Delete-default-Mailbox-Database-remove-last-MailboxSG.aspx Get the Path of the DB: How […]

Wannacry / WannaCrypt: Microsoft Patch for SMB Exploit Blue on XP/2003 released. Ransomware in der Schweiz aktiv!

14.05.2017, Good News MS Release KB4012598 for XP/VISTA/2003 (32/64) BIT and you can patch your old special machines. 14:05.2017, Most of Swiss Media inlcuding SFDRS sf.tv (Swiss TV) did mention that they are no current infections to date in switzerland. We think that’s wrong and as normal the corporate who are infected keep that under […]

Ransomware: How to integrate the WannaCry EXTRADAT in EPO or McAfee ENS client

12.05.2017 Urgent Release FRIDAY, Wana Decrypt0r | Wana Decryptor | WanaDecryptor@.exe https://kc.mcafee.com/corporate/index?page=content&id=KB89335 EXTRADAT: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/CORP_KNOWLEDGEBASE/890 00/KB89335/en_US/EXTRA.zip EXTRA.zip   McAfee is aware that several customers are impacted by a new ransomware. Ransom-WannaCry (also known as WannaCry, WCry, WanaCrypt and WanaCrypt0r) is encrypting files with the .wnry, .wcry, .wncry, and .wncryt extensions. Encryption is occurring on the local […]

Mcafee EPO prevent exe RUNNING FROM %appdata%

Mcafee EPO prevent exe RUNNING FROM %appdata% folders with an Access protection Policy How to protect from most 0day Flash Exploits and malware like Ransom Cryptowall in summer 2015. You simply can’t keep up with patching even with deployment or Management solutions in place. Now you should have an IPS Filter like Fortigate with Fortiguard. […]