mikeyuf Posted February 26, 2013 Report Share Posted February 26, 2013 I am running Immunet Version: I am running SBS 2011, and during a scan, a Windows Software Update Service cab was quarentined. Restore of the file failed. I have a feeling this broke my WSUS server, the dates seem to coincide. Any idea how I can restore this file from Quarentine? Link to comment Share on other sites More sharing options...
ritchie58 Posted February 27, 2013 Report Share Posted February 27, 2013 Hi mikeyuf, have you tried adding the complete file path for that file into Immunet's Exclusion List and then run the Window's updater or does the file just get quarantined again? The file's SHA256 hash my need to be whitelisted. Also, I normally disable Monitor Program Install & Blocking Mode in Settings when it's necessary to install Windows updates myself just to avoid any possible conflicts and speed the install process up a bit. I've found it extreamly rare to have Immunet conflict with any Windows update files. Sorry to hear your having problems. Cheers, Ritchie... Link to comment Share on other sites More sharing options...
mikeyuf Posted February 27, 2013 Author Report Share Posted February 27, 2013 Ritchie, My main question is can I somehow restore that file in my Quarentine Folder a less obvious way? I can see the file in there, any way to decode it so I can copy it back into my WSUS folder? Link to comment Share on other sites More sharing options...
ritchie58 Posted February 27, 2013 Report Share Posted February 27, 2013 Hi mike, there is a way to unencrypt a file from Quarantine but you'll have to contact Support directly to get help with that as I don't have access to that informaton. I would highly reccommend you submit a Support Diagnostic Tool Report to support@immunet.com if you haven't already. Information on how to create and submit a SDT Report can be found in the FAQ section of the forum. Link to comment Share on other sites More sharing options...
nwarshawski@sourcefire.com Posted March 9, 2013 Report Share Posted March 9, 2013 Hello, A restore can be reattempted after a reboot through the Immunet GUI. If this fails again, we can also attempt to decrypt the file if you email it to us at support@immunet.com. If possible, please include a Support dump, by using the Immunet Support Tool and attaching the file it drops on the desktop. Nick Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.