scan for various exe filea

[nephilim]

In my new network I want to look for netsupport and logmein exe files....can this do that??

[irsprint84]

couldnt you use the antivirus to look for logmein folders etc.. ? and use it to get rid

[nephilim]

None here yet, will be getting ESET Nod in ASAP and also need to have a chat with @tom_newton for a smoothwall deal...literally got given £10k and told to get it going well...lol

[irsprint84]

God1 is your company mad!!! how about FEP?

[irsprint84]

cant windows file manager do searches? or o you want to do searches on pc?

[nephilim]

I dont fancy doing a search over the entire network manually (near 300 machines)...if this can do it, fantastic...if not, will look at alternatives

[irsprint84]

actually cant you send a shedule task over group policy and save .txt to network drive?

[nephilim]

yes, you sir are a genius!! (Been up since 5am so my mind isn't working properly)

[irsprint84]

No prob

[nephilim]

I am thinking this little script on log in (just to get rid of EXE across network whilst I re design the network build image)

del C:\Program Files\LogMeIn\x86\LogMeIn.exe /s /q
del C:\Program Files\NetSupport Manager\Client32\Netsupport.exe /s /q

[irsprint84]

sounds good but 1. why are people got those programs installed?

also you could use gpp to reset permissions on that folder or couldnt you use software restrictions? just upload those exe to software restrictions

[nephilim]

Reason it was installed was by the previous admin. He left under bad circumstances, no GPOs in place, all scripts to lock everything down so I am literally starting from scratch!!

[irsprint84]

for a quick step solution disable ports for logmein and netsupport on firewall dont want piece of mind

[nephilim]

What firewall? lmao! Like I said, £10k to bring it up to code (which is why I want to talk to @tom_newton regarding a UTM)

Seriously this place is top spec in terms of equipment in use, but it was set up badly so it needs bringing up to code on a big scale.

Allow me to put it to you like this...

AV is AVG Home Edition (on staff machines)
No AV on Curriculum PCs
No firewall
Smoothwall (linux version, not paid for version) with custom block lists which are easily a year out of date!

Can you begin to see the problem?

[irsprint84]

I see the problem, a legal problem! you need to cover your back and tell them the case and in writing. I got offer 8k 3 years smoothwall then I would get FEP its about 60p per machine on volume licencing