[THIN] Re: Off topic: Make custom virus def
- From: "TSguy92 Lan" <tsguy92@xxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Thu, 7 Aug 2008 14:45:17 -0700
Hmm, that does make it more of a challenge doesn't it ;). When you say there
are no DC's under your control, does that mean you don't have windows level
administrative access to the machine in question?
I can't say much for Trend AV options, but the other ideas I have for trying
to tackle this one...
Trust-no-Exe =
http://www.beyondlogic.org/solutions/trust-no-exe/trust-no-exe.htm (pretty
sure Jim K. linked this to the list a while back)
Or, another option on the software policy restrictions idea, would be using
PSexec - http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx, to
remotely run and configure gpedit.msc on the workstation, and setup software
restriction policies that way.
But of course if you don't have administrative rights to the machine in
question, both of these options are not gonna get you too far. . .
Good luck,
Lan
On Thu, Aug 7, 2008 at 2:20 PM, Greg Reese <gareese@xxxxxxxxx> wrote:
> unfortunately that is not an option for me at the moment. There are no
> domain controllers under my control. We're converting networks from the old
> company to the new company. I can't make any GPO changes until we're done
> converting. But I do control the AV server which is why I am looking there
> first.
>
>
> On Thu, Aug 7, 2008 at 4:11 PM, TSguy92 Lan <tsguy92@xxxxxxxxx> wrote:
>
>> Hi Greg,
>>
>> Perhaps taking a look at setting up software restriction policies on the
>> workstation may help with this.
>>
>> http://technet.microsoft.com/en-us/library/bb457006.aspx
>>
>> HTH
>>
>> Lan
>>
>>
>>
>> On Thu, Aug 7, 2008 at 1:49 PM, Greg Reese <gareese@xxxxxxxxx> wrote:
>>
>>> Sorry for the off topic. I am trying to find a way to define a specific
>>> exe as a virus. Does anyone know how to do this with Trend OfficeScan?
>>>
>>> Seems like this should be possible.
>>>
>>> I have a user loading a game from a thumb drive. I want to define it as
>>> a virus to keep it off the computer and kill it from their thumb drive.
>>>
>>> any ideas are greatly appreciated.
>>>
>>> Thanks!
>>>
>>> Greg
>>>
>>
>>
>
Other related posts:
