Recently - about 1 month ago, we experienced a fault with the server responsible for running the ePO management console. It appeared as though someone or something had deleted the entire \winnt folder including all its subfolders. The only files left were those that were in use at the time. We immediately suspected a hack. Unfortunately, auditing for these system files was not switched on. We did so.
After about two days, it happened again. This time, we were able to pinpoint what was deleting the files... : NAREPL32.exe
The deletion was happening at precisely the time that the replication was schedule to retrieve the updates from the Internet. Network Associates have not been very helpful at all. I have not installed the ePO patch but this doesn't seem to address the issues we have witnessed. We are currently running updates manually.
Has anyone else seen this? Does anyone know of a solution?
Thanks,
Paul.
After about two days, it happened again. This time, we were able to pinpoint what was deleting the files... : NAREPL32.exe
The deletion was happening at precisely the time that the replication was schedule to retrieve the updates from the Internet. Network Associates have not been very helpful at all. I have not installed the ePO patch but this doesn't seem to address the issues we have witnessed. We are currently running updates manually.
Has anyone else seen this? Does anyone know of a solution?
Thanks,
Paul.