Brian Ross's dashboard

Ok, please just let us know if this works.

This occurred because of a change that Microsoft made to the code in Services.exe recently. This should not have been quarantined, but may have been due to a configuration problem. If you have the security monitors set to anything other than default, this could be responsible.

To reset the AP Security monitors to default:

1. Open the CSE console
2. Select the policy for the machine that CSE quarantined "Services.exe" on
3. Select the "Active Protection" tab
4. Click "Edit" in the "Monitors" section
5. Click "Security Levels"
6. Choose "Default" from the options

These monitors are typically used by support to resolve certain detection issues. It is highly advisable to leave them at default unless otherwise instructed by support.

To restore the machine, you can either copy "services.exe" from another machine and using safe mode with command prompt, or perhaps a dos boot disk, copy the file to "C:\Windows\System32" or you can restore it from the windows CD.

The current definition version is 5045 as of the time of this posting. If you're still having trouble updating the definitions on the console, I'd like to have you contact support either by email or phone.

Email support@sunbeltsoftware.com
Phone 877-673-1153

If the definitions are not updating, we'll definitely need to look deeper into the situation to correct it.