Archive for the tag 'Security'

Help my windows server root volume is full!

Ivan Versluis June 25th, 2008

This morning my Cacti appliance warned me by email that the windows root volume was getting above the 90% threshold. I configured this a while ago for getting notified in front.

image 

When installing and configuring this Windows server I didn’t plan the configuration in the right way and my free space for C:\ volume is limited. If you install a fresh server again think about having one volume using the complete physical RAID disk space and not having one 18GB disk as I used now. My main problem is that server has 4GB of RAM and paging file is sitting on C:\.

I was not able to move the paging file nor could I  move the production virtual machine another volume. I went to C:\Windows and found a lot of blue directories which were used by the Automatic Updates. It used more than 500MB.

To safely remove Hotfix Backup files and the Add/Remove Programs Registry entries go to here and download the tool. Run the tool and remove all hotfixe backup files.

image

After you run the tool; go to c:\Windows and delete all blue marked directories. They all should start with $ sign.

image

Now we have on directory we need have closer look. Mine on this particular server grow to 600+ mb. Go to C:\WINDOWS\SoftwareDistribution\Download and verify your size.

image

Stop the “Automatic Updates” service or run “net stop wuauserv” from cmd.

Delete all subfolders within C:\WINDOWS\SoftwareDistribution\Download. Restart the “Automatic Updates”  service. You can safely remote these. The procedure can be executed on a Windows XP or a Windows Server 2003 system.

Top 3 security tips for client virtual machines!

Ivan Versluis April 16th, 2008

How many of us  have Windows Updates automatically configured and Virus Protection installed when using client OS virtual machines for test environments? I hope most of you because unprotected virtual machine in your enterprise environment has the same risk as a physical machine. There is no difference between a virtual or physical installation of Windows XP.

Recently I installed Symantec AntiVirus 10.2 on my Windows XP virtual machine. Hopefully the attach as shown below did protect me against the Adware which was installed on my virtual machine.

image

I was using couple of Internet Explorer sessions and searching for my phpmyadmin issues on one of my virtual machines. I used google and opened top 10 of the results. At some point I’ve got a popup of downloading a exe file when closing all Internet Explorer instances and then my Auto-Protect results came up with threads being found. I definitely did not install anything. After the reboot the “AntiSpyware Master” application was installed without my permission; believe as an IT and Security pro I am not going to install programs which I don’t trust.

Continue Reading »