Weatherbug on terminal server

[snootalope]

Ok...I'm furious.

I was just assisting a basic end user with some office crap and I noticed the current temperature sitting in the systray. Obviously weatherbug. All our users use terminal servers and dumb terminals.

These users are not admins, power users, or have any other rights more than basic user should have on these servers. How in the hell does weatherbug get install?!?!

I've even got our proxy server setup to block package installation type files.

Furious here!!! How is this possible that this basic user was able to install weatherbug???

 

[58sniper]

It's entirely possible if the weatherbug is a single .exe that just tosses something in their start menu. I've seen that before. Wouldn't require admin rights. As for how it got downloaded - where do I begin? Download it at home, rename to .txt, and email it to work account.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[GlenJohnson]

Also seen a download burned to a cd and brought into work. What's needed is a contract users need to sign telling them what they can and cannot do, with intalling anything not work related right at the top. If you've already done that, well, nuff said.

Glen A Johnson
Tek-Tips Florida
Please give to the Wounded Warrior Project
Merry Christmas

 

[snootalope]

yeah, all those make sense, however we're all dumb terminals/terminal servers. No cd,dvd, floppy, flash, etc.

I guess the only one I can see that may have done it was renaming the file and emailing it. Then again, we've got three layers of email scanning.. sure a txt would slide right through, but come on, these are basic users here! (i know, they're dangerous )

I've been trying pretty hard signed on as a basic user to get this weatherbug installed again so I can see how it happened, but no matter what I do I run in to security events from our proxy.

very frustrating though. hate the weatherbug.

 

[kmills]

Why don't you just ask the user how it happened? Someone will probably be glad to demonstrate their "expertise"!

 

[SteveRoadWarrior]

Exactly, and start your questioning with a compliment. "I see you have the weatherbug on your computer, that's really cool. Does it tell you the weather forecast too? How can I get that on my computer?"

LOL, like shooting fish in a barrel