<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 7/02/13 3:38 AM, David Hay-Currie
wrote:<br>
</div>
<blockquote
cite="mid:3A4446B00822824B9822FC1AB2810DAE0A3E113F36@svr-exch07.Leisure.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:ver;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><a moz-do-not-send="true"
name="_MailEndCompose">I had that problem with 2 clients so
far (My own desktop and 1 server)<o:p></o:p></a></p>
<p class="MsoNormal">Interesting enough the problem is that
there is no registry entries for BB win in HKLM\Software.<o:p></o:p></p>
<p class="MsoNormal">I am testing re-installing the agent to see
if that works</p>
</div>
</blockquote>
BBwin is 32-bit, so if the OS is 64-bit registry entries are in
HKLM\Software\Wow6432Node\BBWin<br>
<br>
I'm playing with exclusions in SCEP at present. I just managed to
restart a purpled BBwin service after excluding the process using
the exe full path, but have another few servers where no success in
doing that :(<br>
<br>
David.<br>
<blockquote
cite="mid:3A4446B00822824B9822FC1AB2810DAE0A3E113F36@svr-exch07.Leisure.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"ver","serif";color:#004080">David
Hay-Currie</span></b><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"ver","serif";color:#004080">IT
Manager</span></b><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"ver","serif";color:#004080">Leisure
Fitness Equipment LLC</span></b><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"ver","serif";color:#004080">231
Executive Dr. Suite 15</span></b><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"ver","serif";color:#004080">Newark,
DE 19702</span></b><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"ver","serif";color:#004080">Phone:
(302) 224-5018</span></b><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><a moz-do-not-send="true"
href="http://www.leisurefitness.com/?referrer=dhaycurrie"
title=""Click on the Logo to visit the web page"
t "><span
style="font-family:"Verdana","sans-serif";text-decoration:none"><img
id="Picture_x0020_1"
src="cid:part2.00070605.07030503@ausport.gov.au"
alt="Leisure Fitness Logo" border="0" height="49"
width="150"></span></a><span
style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
<a class="moz-txt-link-abbreviated" href="mailto:xymon-bounces@xymon.com">xymon-bounces@xymon.com</a> [<a class="moz-txt-link-freetext" href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>]
<b>On Behalf Of </b>David Baldwin<br>
<b>Sent:</b> Tuesday, February 05, 2013 7:58 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Subject:</b> [Xymon] BBWin hanging on Server 2008R2
SP1<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have noticed a few of my monitored
servers running BBWin having BBWin.exe wedging recently - so
all the client tests go purple. Maybe triggered by a recent
Windows update? The process cannot be killed, so the service
cannot restart without rebooting the server. Has anyone else
noticed this? Some are running 0.12 and others 0.13. All
central mode. We have also recently deployed SCEP AV so
possibly some interaction there? Recent versions of SCEP also
make the MsMpSvc service (Microsoft Antimalware Service)
"invisible" to BBWin so it does not get reported in the svcs
section.<br>
<br>
Any suggestions appreciated!<br>
<br>
Thanks, David.<br>
<br>
<o:p></o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>David Baldwin - Senior Systems Administrator (Datacentres + Networks)<o:p></o:p></pre>
<pre>Information and Communication Technology Services<o:p></o:p></pre>
<pre>Australian Sports Commission <a moz-do-not-send="true" href="http://ausport.gov.au">http://ausport.gov.au</a><o:p></o:p></pre>
<pre>Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616<o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617<o:p></o:p></pre>
<p class="MsoNormal"><o:p> </o:p></p>
<div class="MsoNormal" style="text-align:center" align="center">
<hr align="center" size="2" width="100%"></div>
<p class="MsoNormal">Keep up to date with what's happening in
Australian sport visit <a moz-do-not-send="true"
href="http://www.ausport.gov.au">www.ausport.gov.au</a> <br>
<br>
<span
style="font-size:7.5pt;font-family:"Arial","sans-serif"">This
message is intended for the addressee named and may contain
confidential and privileged information. If you are not the
intended recipient please note that any form of
distribution, copying or use of this communication or the
information in it is strictly prohibited and may be
unlawful. If you receive this message in error, please
delete it and notify the sender.</span> <o:p></o:p></p>
<div class="MsoNormal" style="text-align:center" align="center">
<hr align="center" size="2" width="100%"></div>
</div>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
David Baldwin - Senior Systems Administrator (Datacentres + Networks)
Information and Communication Technology Services
Australian Sports Commission <a class="moz-txt-link-freetext" href="http://ausport.gov.au">http://ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a class="moz-txt-link-abbreviated" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617
</pre>
</body>
</html>