Reply to thread

Message: [QUOTE="Tim Locke, post: 50640, member: 430"] Last time I was near Active directory it was before it was called Azure. Back then the IT guys managed it AND also made a slipstreamed install for all the PCs in the organisation so that everyone was immediately joined ...also of course there was other stuff like connecting to Exchange and getting the corporate AV. If your machines had all been loaded at the same computer store or from the same download I wondered if someone had picked up a pre-made install disk. But that is not so. Did you update all these machines with 1607? But if the first machine got spoofed and if the others were defaulted to the sharing Windows updates thing I guess they could all p;ick up something. [B] MS website[I]. It took several hours to download which seemed odd.[/I] During the download, task manager was showing all kinds of activity; but only a small portion was from windows update service. As soon as the update was available on the computer, I installed it. It took a little over an hour. When the computer restarted after the update the computer was again attached to an Azure AD and there was no "Leave an Organization Button". I ran a malwarebytes full scan. It found one small file in system32 f.exe that it quarantined. [/B] I wonder if the MS website was being spoofed? I then wonder if Macafee website was being spoofed. 1607 is about 2.6GB. if you are on a normal ( hardwired to the ISP:) connection you know the speed and using the network and sharing centre get a good idea of the actual download speed. [/QUOTE]

Verification