scan for various exe filea

[featured_spectre]

In my new network I want to look for netsupport and logmein exe files....can this do that??

[irsprint84]

couldnt you use the antivirus to look for logmein folders etc.. ? and use it to get rid

[featured_spectre]

None here yet, will be getting ESET Nod in ASAP and also need to have a chat with @tom_newton for a smoothwall deal...literally got given £10k and told to get it going well...lol

[irsprint84]

God1 is your company mad!!! how about FEP?

[irsprint84]

cant windows file manager do searches? or o you want to do searches on pc?

[featured_spectre]

I dont fancy doing a search over the entire network manually (near 300 machines)...if this can do it, fantastic...if not, will look at alternatives

[irsprint84]

actually cant you send a shedule task over group policy and save .txt to network drive?

[featured_spectre]

yes, you sir are a genius!! (Been up since 5am so my mind isn't working properly)

[irsprint84]

No prob

[featured_spectre]

I am thinking this little script on log in (just to get rid of EXE across network whilst I re design the network build image)

 

del C:\Program Files\LogMeIn\x86\LogMeIn.exe /s /q
del C:\Program Files\NetSupport Manager\Client32\Netsupport.exe /s /q

Edited September 24, 2011 by featured_spectre

[irsprint84]

sounds good but 1. why are people got those programs installed?

 

also you could use gpp to reset permissions on that folder or couldnt you use software restrictions? just upload those exe to software restrictions

[featured_spectre]

Reason it was installed was by the previous admin. He left under bad circumstances, no GPOs in place, all scripts to lock everything down so I am literally starting from scratch!!

[irsprint84]

for a quick step solution disable ports for logmein and netsupport on firewall dont want piece of mind

[featured_spectre]

What firewall? lmao! Like I said, £10k to bring it up to code (which is why I want to talk to @tom_newton regarding a UTM)

 

Seriously this place is top spec in terms of equipment in use, but it was set up badly so it needs bringing up to code on a big scale.

 

Allow me to put it to you like this...

 

AV is AVG Home Edition (on staff machines)

No AV on Curriculum PCs

No firewall

Smoothwall (linux version, not paid for version) with custom block lists which are easily a year out of date!

 

Can you begin to see the problem?

[irsprint84]

I see the problem, a legal problem! you need to cover your back and tell them the case and in writing. I got offer 8k 3 years smoothwall then I would get FEP its about 60p per machine on volume licencing

[featured_spectre]

forgive my being dumb....FEP???

[irsprint84]

Forefront Endpoint protection 2010, sccm is a pain but sccm 2012 is out soon as is alot easier

[featured_spectre]

ahhh ok. I dont like Forefront...had it in my last place...

[irsprint84]

2010, why not? 60p not bad per client!

[featured_spectre]

just didnt like it. prefer ESET nod must be me being finicky