NEED HELP.....MISSING NETWORK THREAD PROTECTION
Hi all,
I have a problem with my SEP 12.1.
here the story, I have a IBM Server using Windows 2003 Enterprise OS, i'm use this server as a web server for php aplication and SQL. and accesed by user using IP Public.
i install the SEP 12.1 and running well......but today as a usssual i 've checked the server and find my SEP has broke.
SEP showing only Anti Virus and spyware protection only.....
fyi, two days ago...i see in symantec warningt my server get attack from other ip publik.
i try to reinstall SEP but the windows displaying : another newest SEP installed in my server.......but i'm using the same source
please help me........there is virus attack my server or only a SEP error ?
can i fix the SEP ?
thanks for the help
sorry for my bad english..
Rae Sinekti
ps. see the attachment for the SEP screen
Comments 22 Comments • Jump to latest comment
When you created the 12.1 package, did it include NTP?
Can you attach error screenshot please?
SEP Knowledge Base
Endpoint SWAT
Hello,
Did you try restarting the machine, once the SEP was installed on the machine??
If you have already restarted and still cannot see the NTP feature installed??
Could you please create a new package (with full feature set) and install the same on the client machine??
Since this issue is only on 1 machine, you could also install the NTP and other features via Add / Remove Programs as well.
Control Panel >> Add / Remove Programs >> Symantec Endpoint Protection >> Modify >> Add all the features required and click on Next and Click on Finish.
Once installed, you may have to restart the machine for the NTP to get installed and enabled completely.
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Brian : i'm using single user...not SEPM
Mithun : yes mithun, i've restarted for twice...i'll try your suggest
Did you go into Add/Remove programs in Control Panel and try to add manually?
When you did the install, did you make sure NTP was checked?
SEP Knowledge Base
Endpoint SWAT
Brian : still try you and mithun suggest.....fyi first time i installed SEP every thing just fine....all menus completely work...but 1 hour ago......all menu just lost/missing ony Antivirus and spyware protection showing.
I don't believe the components can just disappear. Check add/remove programs to see what is showing. Add manually if need be.
SEP Knowledge Base
Endpoint SWAT
Hello,
Could you also check if there is no Autoupgrade Package assigned to the Groups within SEPM?
The Autoupgrade package might autoupgrade package in silent mode.
http://www.symantec.com/docs/HOWTO80780
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
brian and mithun.......thank's for the quick response..everything back to normal.
btw, can you explain to me...why it happen ?
because i'm so worried if my server attack by virus....this is a production server.....
thanks guys for your help.
Rae Sinekti
What did you do to get it back?
SEP Knowledge Base
Endpoint SWAT
Hello,
I believe this may have happened due to Autoupgrade package which may have been assisgned in the SEPM groups.
Could you also check if there is no Autoupgrade Package assigned to the Groups within SEPM?
SEPM >> Clients >> Install Packages >> Highlight Group >> Install Packages
Incase you see any package assigned, please delete it.
The Autoupgrade package might autoupgrade package in silent mode.
http://www.symantec.com/docs/HOWTO80780
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
I don't believe the components can just disappear. Check add/remove programs to see what is showing. Add manually if need be.
brian...it happen to my SEP
Could you also check if there is no Autoupgrade Package assigned to the Groups within SEPM?
The Autoupgrade package might autoupgrade package in silent mode.
http://www.symantec.com/docs/HOWTO80780
mithun....i'm using SEP only not conneted to SEPM...just single user.
Hello,
Since it is a Unmanaged Client, I see no other reason other than using of a wrong package installation with only AV/AS selected or someone altering the installation from Add / Remove Programs.
Since as of now SEP is installed with full features, you may not worry.
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
What did you do to get it back?
brian : i try you and mithus suggest..using add/reove program.....
What is the version of the SEP installed on this Server? Wasn't there any client updates running in the last days?
You mentioned : "i try to reinstall SEP but the windows displaying : another newest SEP installed in my server.......but i'm using the same source" -> can you double check the version of your source installation and the version currently installed. Is it possible that a newer SEP version installation was pushed from the SEPM Server with only Basic protection that replaced the previous installation?
It sounds like only the Antivirus component was selected during the initial install.
SEP Knowledge Base
Endpoint SWAT
sebstian : my sep ver 12.1.1000.157 RU1.
can a single user upgrade to a newer version ?...my SEP is Unmanaged Client
It sounds like only the Antivirus component was selected during the initial install.
brian....when i installed the SEP first time....all com[ponent are installed....i'm using a firewall to block attack from another IP and today.....all menus gone...just leave th anti virus only
Does anyone else have access to this server that can administer it?
I can't see malware doing this, it would either just disable it or try to corrupt it.
Something/someone had to physically remove the components.
SEP Knowledge Base
Endpoint SWAT
no brian....i'm the administrator and the password save in my head.. :)
Hello,
Since it is a Unmanaged Client, I see no other reason other than using of a wrong package installation with only AV/AS selected
OR
Someone altering the installation from Add / Remove Programs.
Now since you are the Administrator and nobody changing the installation, the second option is removed and hence only thing that may have happened is using of wrong package.
Since as of now SEP is installed with full features, you may not worry.
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
It sounds like everything is Ok than. I would monitor over the next few days though to ensure it stays as it should.
SEP Knowledge Base
Endpoint SWAT
All : many thank's for your help.........and for the quick response
Would you like to reply?
Login or Register to post your comment.