+ Post New Thread
Results 1 to 10 of 10
Windows Thread, Disappearing .exes - only recently installed programs in Technical; Hi We've had our network running for about a year and a half now (Server 2003 / XP Pro) and ...
  1. #1

    Join Date
    Sep 2007
    Location
    Bridlington
    Posts
    50
    Thank Post
    0
    Thanked 5 Times in 3 Posts
    Rep Power
    15

    Disappearing .exes - only recently installed programs

    Hi

    We've had our network running for about a year and a half now (Server 2003 / XP Pro) and have had no troubles until recently.

    We've put 2 big bits of software on: Clicker 5 and the 2Simple collection.

    They've been running fine until one day every exe from the Crick Software folder and every exe from the 2Simple Collection subfolders vanished.

    The first I knew about it was when a shortcut said it couldn't find the exe.

    I redeployed both packages and everything was find for a bit. Then they disappeared again. At the same time.

    We gutted our ICT suite over the summer and reghosted everything and the same thing has happened again this week.

    There's 30 workstations and a laptop that the teachers use in the suite, all in the same OU with the same GPOs applied, yet nothing has disappeared off the laptop so far.

    The only difference software wise is that the laptop has AB Tutor Control teacher application on and the desktops have the client version. I've tried a computer in the suite without ABTC on it and it still happened, so I don't think it's that.

    Does anyone have any ideas why it's just the recently installed apps and no other ones? Or even better, why it's happening in the first place?

    Thanks

    Tim

  2. #2
    mrtechsystems's Avatar
    Join Date
    Jun 2005
    Location
    Yorkshire
    Posts
    424
    Thank Post
    99
    Thanked 22 Times in 22 Posts
    Rep Power
    25
    mmmm my guess would be to check the AV to see if it not blocking them or seening them as a threat

  3. #3

    Join Date
    Sep 2007
    Location
    Bridlington
    Posts
    50
    Thank Post
    0
    Thanked 5 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by mrtechsystems View Post
    mmmm my guess would be to check the AV to see if it not blocking them or seening them as a threat
    Oh, that's the other thing (thanks!)

    Over the summer we got rid of Symantec and installed Kaspersky.

    The problem is still present...

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,807
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Yes my first bet is that your AV software has deleted/quarrentined them. Other possibilities are a File Restriction Policy blocking or Access Based Enumeration.

  5. #5

    Join Date
    Sep 2007
    Location
    Bridlington
    Posts
    50
    Thank Post
    0
    Thanked 5 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by Geoff View Post
    Yes my first bet is that your AV software has deleted/quarrentined them. Other possibilities are a File Restriction Policy blocking or Access Based Enumeration.
    Wouldn't a file restriction policy block it from the start? The exes are there for a few days, then they disappear.

    AFAIK we haven't got Access Based Enumeration set up

  6. #6
    Newton's Avatar
    Join Date
    Oct 2007
    Posts
    179
    Thank Post
    59
    Thanked 5 Times in 5 Posts
    Rep Power
    15
    Sophos AV can report the 2Simiple software as .exe's as a virus, supose other AVs might do the same

  7. #7

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    I agree, it most likely the AV software which is quarantining them. Another possibility is a real virus itself, but then again, why would it just delete these two exe's?

    With Sophos (and other AV software), at server level you should be able to specify exceptions or exclusions. I too have seen 2simple software identified as a threat. Absolutely no idea why though.

  8. #8

    Join Date
    Sep 2007
    Location
    Bridlington
    Posts
    50
    Thank Post
    0
    Thanked 5 Times in 3 Posts
    Rep Power
    15
    Quote Originally Posted by Michael View Post
    I agree, it most likely the AV software which is quarantining them. Another possibility is a real virus itself, but then again, why would it just delete these two exe's?

    With Sophos (and other AV software), at server level you should be able to specify exceptions or exclusions. I too have seen 2simple software identified as a threat. Absolutely no idea why though.
    It's not just those 2 exes...

    There's 2 from the clicker 5 folder (clicker5.exe and dontnetfx.exe (or something like that)) and at least another 27 from the 2simple collection, all from subfolders. Every other file remains.

    There's nothing in Kaspersky to say it's done anything with the exes either

  9. #9

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Have you tried studying the event logs for unusual behaviour?

  10. #10

    Join Date
    Sep 2008
    Posts
    10
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    13
    You're welcome to contact 2Simple support directly (020 8203 1781) and we'll try to help you with this problem

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 21
    Last Post: 29th May 2009, 10:19 PM
  2. Recently commented threads
    By spc-rocket in forum Comments and Suggestions
    Replies: 3
    Last Post: 3rd March 2008, 12:26 PM
  3. Replies: 0
    Last Post: 28th November 2007, 03:09 PM
  4. Replies: 7
    Last Post: 16th November 2007, 12:43 AM
  5. Replies: 12
    Last Post: 10th November 2006, 11:24 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •