Category Archives: Microsoft Blog

Microsoft Blog

Commvault appliance lineup expands by two

NASHVILLE, Tenn. — Commvault expanded its data protection appliance strategy with two new hardware models this week at its annual user conference.

The appliances launched at Commvault Go extend the vendor’s data protection and management capabilities to enterprises, managed service providers (MSPs) and remote offices. All devices run Commvault Complete Backup & Recovery, the vendor’s flagship data management and protection software.

Commvault began integrating its backup software onto appliances in 2017, after years of resisting selling hardware. The integrated Commvault appliance competes with the likes of Veritas NetBackup appliances and scale-out secondary storage platforms from relative newcomers Rubrik and Cohesity.

The Commvault HyperScale HS3300 is similar to the currently available HS1300, which targets midsize businesses and starts at 29 TB. The Commvault HS3300 stores between 174 TB and 262 TB of useable storage, making it suited for enterprises and MSPs with larger workloads.

The other new Commvault appliance, the Remote Office Appliance, scales down. This appliance has between 5 TB and 15 TB of capacity for remote or branch offices. While they would store data locally, these devices could be managed remotely as part of a larger data ecosystem.

The Commvault Remote Office Appliance is available immediately, while the HyperScale HS3300 is expected to be available in December 2018.

Render of Commvault HyperScale HS3300
The Commvault HyperScale HS3300 is designed for enterprise workloads.

Customers wanted more appliance choices

After years of resisting integrated appliances, Commvault is now doubling down on the HyperScale platform. Phil Goodwin, research director at IDC, said he believes the reason for the expansions to the Commvault appliance portfolio can be traced back to backup software market leader Veritas’ similar move.

“It’s a convenient consumption model for the consumer,” Goodwin said of Veritas’ move into integrated appliances. “Everything is already configured, it’s loaded, [and] it’s ready to go. It’s the closest you can get to plug-and-play for a backup product. For Commvault, I think it’s really a similar thing.”

[Customers are] really looking to simplify their environment. This appliance is a step in that direction, where you’re eliminating some of that complexity of having to deal with separate components.
Phil Wandreidirector of solutions at Commvault

Now, with the Commvault appliance additions, the vendor is positioned to take on the other enterprise data management leaders with its scale-out model.

“The HyperScale is more aimed specifically at Rubrik and Cohesity as a hyper-converged implementation,” Goodwin said. “Rubrik and Cohesity are very successful in the marketplace, so vendors are naturally moving into that space to capture some of that growth.”

Phil Wandrei, director of solutions marketing at Commvault, based in Tinton Falls, N.J., said since the first Commvault appliance was deployed a year ago, there has been customer demand for a wider range of sizes.

“The common piece of feedback that we got from customers was they wanted more appliances,” he said. “Specifically, they wanted a larger appliance and a smaller one.”

Before the first HyperScale appliance was released, Commvault sold software, and customers provided their own hardware backup targets. The integrated appliances enable one-stop shopping.

“They’re really looking to simplify their environment,” Wandrei said of Commvault customers. “This appliance is a step in that direction, where you’re eliminating some of that complexity of having to deal with separate components.”

For Sale – Or Trade – 27″ iMac (Late 2012 Boxed) & HTPC

I am selling both my 27″ iMac (Late 2012) and HTPC the specs are:

27″ iMac

27″ Screen
Intel Core i5 3.2GHZ
32GBS RAM
1TB HDD
NVIDIA GeForce GTX 675MX 1GB RAM

The original keyboard and mouse are included and in excellent condition, the iMac has barely been used over the years as I would always end up using my MacBook air out of convenience.

The original box is in great condition and I have included an external blu-ray drive as well.

£850

HTPC

Windows 10 Pro
Intel Core i3-4160 – 3.6GHZ
8GBS RAM
120GB SSD
1TB HDD
Slim line DVD drive
TBS 6281 TV Dual Tuner Card
Silverstone Case
Microsoft Xbox controller
Logitech Keyboard and touchpad
Pulse Eight USB – CEC adaptor (control the media software with your tv remote)
TP Link AC1200 Wifi Adaptor

I have reset windows to remove all my files etc, I used this as our main media centre for the past 3 years flawlessly. I used Kodi as the main software which booted automatically, and mediaportal as the freeview client which worked perfectly. These will need to be reinstalled but are all free and there is a great Kodi / Mediaportal guide on these forums.

£320

Price and currency: £850 & £320
Delivery: Delivery cost is not included
Payment method: PPG or BT
Location: Aberdeen
Advertised elsewhere?: Advertised elsewhere
Prefer goods collected?: I have no preference
______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

SevOne and Versa Networks join forces for SD-WAN monitoring

Boston-based SevOne Inc. announced this week a partnership with Versa Networks to extend its software-defined WAN monitoring capabilities to Versa’s Secure Cloud IP Platform.

With SevOne’s SD-WAN monitoring update, Versa SD-WAN customers will gain real-time and historical visibility into their networks, so they can keep track of their cloud-based network services and applications, according to a SevOne statement.

SevOne’s SD-WAN monitoring service helps enterprises and managed service providers reduce or eliminate network management and monitoring risks when deploying SD-WANs in their network infrastructures. SevOne collects data from Versa SD-WAN controllers and devices, so operations and engineering teams can do the following:

  • understand and report on site-to-site performance;
  • visualize transmitted traffic’s assigned path and class and ensure proper policy configuration;
  • use custom dashboards and key performance indicators that align with specific organizational roles in infrastructure;
  • follow end-to-end application performance during service transitions;
  • monitor and manage existing MPLS environments and SD-WAN developments in a single manner; and
  • plan for new SD-WAN monitoring policies with historical data and analytics.

SevOne’s SD-WAN monitoring support for Versa’s Cloud IP Platform is available now.

HPE reveals joint cloud services platform with Microsoft

Hewlett Packed Enterprise (HPE) announced this week five hybrid cloud services it developed with Microsoft to provide SMBs with essential hybrid cloud tools and simpler setup. HPE also unveiled two new servers built specifically for smaller enterprises.

HPE’s new hybrid cloud offerings are Hybrid File and Backup, Hybrid Web Hosting, Hybrid Virtualization, Hybrid Development and Test, and Hybrid Database. The services aim to improve enterprise productivity and reduce the need for in-house expertise by providing simplified deployment capabilities, the company said in a statement. Each offering works with the new HPE servers: ProLiant DL20 and ML30 Gen10.

The HPE ProLiant DL20 Gen10 server is designed for space-constrained environments. It supports a range of Intel processor choices and storage capacity options to provide better flexibility and performance, HPE said. The HPE ProLiant ML30 Gen10 Server supports core business applications and is well-suited to meet specific application or performance goals.

HPE also introduced HPE Rapid Setup Software, which includes a guided installation process to save customers time during system installation and configuration.

HPE unveiled its new offerings during the SpiceWorld 2018 conference in Austin, Texas.

Aerohive brings cloud management to A3 service

Aerohive Networks, a cloud networking provider, has updated its A3 secure access management services with cloud management.

The A3 service was originally released in May 2018 as an on-premises service, but it now integrates with microservices cloud management architecture using Kubernetes containers, Aerohive said in a statement.

A3 offers cloud-based monitoring for all customer sites and allows full lifecycle management of access network infrastructure components, such as access points, routers and switches. The update also includes secure access management and network access control through a single management console. On-site enforcement nodes take on localized tasks, such as device onboarding and access control enforcement, Aerohive said.

Updated features also include an automated and GUI-based configuration process, which enables a complete A3 platform cluster setup in six clicks, the company said. A3 cloud management supports integration with any network, and it is available now at no additional charge to A3 customers.

For Sale – Asrock Deskmini Mini PC, G4600, 2x4gb Ram, 120gb SSD

Decided to sell HTPC as want to go other routes. Mint condtion, boxes, warranty.

This little PC is very powerful and can be easily used as main PC, obviously perfect for HTPC. All drivers/updates/bios are installed.
In case you don’t know, g4600 is basically 99% of i3 7100.
There is 2 x 2.5″ hdd/ssd slot and 1 x m.2 2280 but it has to be pci-e.

Asrock Deskmini
G4600 with intel stock cooler
2x4gb 2133Mhz Samsung DDR4
120gb Kingston A400 SSD
Intel AC WIFI card with antennas
Windows 10 Pro

Price and currency: 210
Delivery: Delivery cost is not included within my country
Payment method: BT/PPG/Cash on collection
Location: London
Advertised elsewhere?: Advertised elsewhere
Prefer goods collected?: I prefer the goods to be collected

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

Customers get new dual-region Google Cloud Storage option

Google today updated its cloud object storage with new dual-regional options and higher availability service-level agreements. Google claims the new options will further differentiate its offerings from market leaders Amazon and Microsoft Azure.

The dual-regional Google Cloud Storage option gives customers greater control over where they store their data, while providing geographic redundancy in the event of an outage. The previous default for a Google Cloud Storage object was a larger multi-regional bucket. Google also offers customers the choice of a single-regional bucket.

Dual-region Google Cloud Storage option locations

The dual-regional Google Cloud Storage option is currently available in beta-test mode for U.S. data centers in Iowa and South Carolina, and European Union (EU)-based data centers in the Netherlands and Finland. Dominic Preuss, a Google director of product management, said the public cloud provider typically beta tests new capabilities for about two months. He said Google plans to add more dual-region pairs based on customer demand.

“If you wanted to do this on another public cloud vendor, you would have to put your data into a region, set up replication, and pay network traffic to replicate that data over,” Preuss said. “You wouldn’t be able to predict what the cost was going to be unless you understood all the network connectivity.”

Preuss said Google dual-region customers pay a single price because they do not need to set up replication and pay for storage in two locations plus network traffic fees. He expects the new dual-regional Google Cloud Storage option to be especially helpful with analytics and big data workloads. Those workloads run faster when data is close to compute resources. The company said the dual-regional option should also help customers that use a content delivery network.

Preuss said Twitter is already using the new dual-regional option as it moves more than 300 PB of Hadoop data into Google Cloud Storage. Twitter wanted to ensure the data is geographically redundant from an availability standpoint and also needed to run data processing jobs in the same region where the data is stored, Preuss said. He said Google previously stored copies of the data in multiple regions without telling customers the specific regions where the data was kept.

Options for Google Cloud Storage
Google Cloud Storage options

Availability SLA raised to 99.9%

Google Cloud Storage today also added a higher availability service-level agreement (SLA) for the Nearline and Coldline cloud storage in multi-regional locations in the U.S., EU or Asia. Google is boosting the SLA from 99.0% to 99.9% for its Nearline and Coldline storage. Nearline is for customers who access data less than once a month, and Coldline is for those expecting to access data less than once a year.

“Two nines of availability is not a very high level if you’re using mission-critical data. Getting the three nines of availability is significant for customers that rely on that data to run their businesses,” Preuss said.

He said the company is trying to simplify Google Cloud Storage options by asking customers to choose their desired level of redundancy (multi-regional, dual-regional or regional) and rate of access (Standard, Nearline or Coldline). That will enable them to better predict the cost of using cloud storage, he said.

Also today, Google launched a new C++ client library for use with its cloud storage. Preuss said Google was responding to customer demand, especially from the gaming and oil and gas industries that run large-scale jobs dependent on the C++ programming language. Google also supports Go, Java, .Net, Node.js, PHP, Python, and Ruby.

For Sale – Asus Poseidon 980ti Graphics card

Discussion in ‘Desktop Computer Classifieds‘ started by martian1, Sep 28, 2018.

  1. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Hi this card is up for sale due to just upgrading my card. I purchased it off this forum so a little history the original card developed an issue and the original owner very kindly swapped the card out for me with this card. It has ran flawlessly never been tampered with or overclocked and I just never got round to trying it watercooled as temps were fine so I decided against it. It still runs games like bf1 great and even not bad with the bf5 beta. It will ship boxed only so no cables cd or manual the box is from the original card as well. I shipped the faulty card back to cherryblossom who then replaced the card with this one and shipped it back in the box I sent.
    Thanks all

    For Sale – GeForce GTX 980Ti Poseidon 6144MB GDDR5 PCI-Express Graphics Card

    ASUS GeForce GTX 980 Ti Poseidon Review

    POSEIDON-GTX980TI-P-6GD5 | Graphics Cards | ASUS United Kingdom

    Price and currency: 230.0
    Delivery: Delivery cost is included within my country
    Payment method: Bank transfer
    Location: Sunderland
    Advertised elsewhere?: Not advertised elsewhere
    Prefer goods collected?: I have no preference

    ______________________________________________________
    This message is automatically inserted in all classifieds forum threads.
    By replying to this thread you agree to abide by the trading rules detailed here.
    Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

    • Landline telephone number. Make a call to check out the area code and number are correct, too
    • Name and address including postcode
    • Valid e-mail address

    DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

    Attached Files:

  2. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Bump open to offers putting on the bay over the weekend

  3. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Price reduced £210 inc delivery

  4. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Price reduced £210

  5. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Please note the card is also listed for sale elsewhere now
    Thanks

  6. GIBSrUS

    GIBSrUS

    Active Member

    Joined:
    May 30, 2011
    Messages:
    374
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    28
    Ratings:
    +26

    Hi mate, would you take £195inc?

  7. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Yes i would ok to go to pm ?..let me know thanks.

  8. GIBSrUS

    GIBSrUS

    Active Member

    Joined:
    May 30, 2011
    Messages:
    374
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    28
    Ratings:
    +26

    Yeah, will send over now thanks.

  9. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Could I have your details please I have taken the card down off ebay. Once payment made I can post straight out to you Monday.

    Thanks

  10. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Ok payment received all packed up ready to post in the morning

  11. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Card posted sent Royal mail sp deliver should arrive by 1pm Tuesday tracking info sent to GIBSrUS

  12. GIBSrUS

    GIBSrUS

    Active Member

    Joined:
    May 30, 2011
    Messages:
    374
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    28
    Ratings:
    +26

    Received thanks

  13. martian1

    martian1

    Well-known Member

    Joined:
    Dec 30, 2001
    Messages:
    2,431
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    113
    Location:
    Sunderland
    Ratings:
    +672

    Excellent enjoy

Share This Page

Loading…

Caringo Swarm adds single server option, multi-cloud support

Caringo enhanced performance and added cloud tiering upgrades to its Swarm object storage, and added a single-server appliance that allows organizations to start with smaller implementations.

The new Swarm Single Server option gives customers an entry point of 96 TB of raw capacity. It uses hardware from vendor 45 Drives, a division of Protocase. Like most object storage, Caringo Swarm software is designed to scale out to hundreds of petabytes across clusters of servers. The vendor has sold preconfigured M, S and E Series servers on Dell hardware since 2016, with a minimum configuration of four servers at a starting raw capacity of 288 TB.

The Caringo Swarm 10 release includes the SwarmNFS 2.1 file-to-object converter with improved streaming performance, and added policy-based data tiering to multiple public clouds in the FileFly data migration component.

Caringo CEO Tony Barbagallo said the idea for the Swarm Single Server came from feedback from small movie studios and post-production houses that found it too complex to set up an object storage cluster. He said Caringo had to optimize Swarm software to get it to work on a single appliance.

“In any typical object storage environment, you have to make that initial investment in three or four physical servers to get started,” Barbagallo said. “We broke through that barrier. We had to make enhancements and optimizations in the base software to allow these things to happen.”

Caringo containerized its Swarm storage software operating system to run on a 15-drive-bay single box. The appliance includes 10 HDDs for storage, two SSDs for the Elasticsearch indexing database and two SSDs to boot the virtual machines, leaving one spare bay if needed. The Swarm Single Server uses a 4:2 erasure coding configuration with four HDDs for data and two for parity, and spreads the bits across the 10 storage drives. Customers have the option to change the erasure coding or replication policies.

Scott Sinclair, a senior analyst at Enterprise Strategy Group, said the single server can shorten both deployment times and the sales cycle.

“Object storage traditionally has had long sales cycles because it tends to involve large deployments with multiple servers in clusters,” Sinclair said. “But we’re increasingly seeing organizations that want the scale and metadata capabilities of object storage in a smaller form factor that they can deploy very quickly. Time to provisioning is becoming incredibly important. Companies can’t wait six months to stand things up anymore. Part of this mindset comes from the cloud, where they can go and provision infrastructure very quickly. And companies like Caringo that were predominantly on premises have to sit down and respond.”

Marc Staimer, president of Dragon Slayer Consulting, said most organizations don’t need the petabyte-range scale that object storage promises.

“The vast majority of people don’t need huge amounts of storage,” Staimer said. “If you look at the thousands and thousands of organizations out there, there’s a reason a lot of them are going to the cloud. It’s not because they need huge amounts of storage. It’s because they want convenience.”

Barbagallo said the Swarm Single Server might also appeal to larger production companies that store data on a project basis, or serve as a backup appliance for small enterprises outside of media and entertainment.  He said the media asset manager software that many companies use now supports the Amazon S3 API for back-end storage, so users could swap out NAS boxes for Caringo object storage.

The Caringo Swarm Single Server lists at $49,995, with Swarm software components licensed separately.

Swarm Single Server from Caringo
Caringo Swarm Single Server

FileFly 3.0 features multi-cloud support

Caringo also upgraded its FileFly migration software. FileFly 3.0 is the first version of the product that can run independently of Swarm. FileFly does the file-to-object conversion and enables users to tier data from Windows and NetApp file servers to Amazon Web Services (AWS), Microsoft Azure and Google Cloud.

One drawback to the FileFly tiering is that users need to rehydrate the data in the original Windows or NetApp storage in order to use it, according to Staimer. He likened the Caringo approach to hierarchical storage management products.

Adrian Herrera, vice president of marketing at Caringo, said FileFly’s data tiering to public cloud storage is intended for remote sites or disaster recovery. He said customers can also tier data to Swarm, where it is directly viewable and accessible.

Herrera said Caringo noticed that large organizations, especially in content-driven industries, want to bring their data back from public-cloud to on-premises deployments or build out their own storage services internally.

“There are additional costs for organizations that continue to access data, and that makes the cloud expensive,” Herrera said. “We’re also seeing a lot of security and copyright concerns. Especially in the media and entertainment space, organizations really need to keep that data in-house.”

Caringo Swarm 10 performance

Caringo cited a U.K.-based research institution’s proof of concept to explore the possibility of replacing a parallel file system. Barbagallo said the institution achieved 35 GB per second read throughput and 12.5 GB per second write throughput with the Swarm 10 object storage. He said the new SwarmNFS 2.1 software enabled file data to be ingested into Swarm object storage at a rate of 1.6 GB per second sustained, with no front-end caching.

“With all object stores, the read and write speeds are going to be dependent on the particular hardware that it’s running on,” Barbagallo said. He said the main challenge for the research institution was removing the network bottleneck through the use of a 100 Gigabit Layer 3 Ethernet network and 40 Gigabit Ethernet switches to each of the racks.

The new Caringo Swarm 10 software adds support for multiple VLANs and subnets. Swarm 10 also supports the latest Elasticsearch 5 technology, enabling analysis tools such as Grafana and Kibana to run directly from the metadata indexed into the open source search engine. 

On the management front, Caringo combined the content and storage hardware administration user interfaces (UIs) and added new capabilities in Swarm 10. For instance, users can now edit object metadata from the UI in addition to making changes programmatically, as they could in the past, Barbagallo said. He said users do not need to copy an object into a new object to edit or add metadata, as they do with many other object stores.

Wanted – Quad Core PC

Discussion in ‘Desktop Computer Classifieds‘ started by hamez101, Sep 27, 2018.

  1. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2

    My PC just died on me and will not boot up so need a replacement but it has to be fast with a decent graphics card and hard drive notTB or anthing like that and no fancy cases. can pay straight away by BT.

    Location: Scotland

    ______________________________________________________
    This message is automatically inserted in all classifieds forum threads.
    By replying to this thread you agree to abide by the trading rules detailed here.
    Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

    • Landline telephone number. Make a call to check out the area code and number are correct, too
    • Name and address including postcode
    • Valid e-mail address

    DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

    Last edited: Sep 28, 2018

  2. blackmesa

    Active Member

    Joined:
    Jun 19, 2007
    Messages:
    2,067
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    51
    Ratings:
    +80

    Budget? decent graphics card? to do what. i guess you need to be a bit more specific.

  3. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2

    essentially a PC that will play most recent games.

  4. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2

    my budget is £200 but I could push the boat out a bit.

  5. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2

    after reading reviews and suff I need a PC that can play Fifa 19, PRO EVO 19, NHL 19 and the likes staight off the bat.

    what yous got?

    Last edited: Oct 1, 2018

  6. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2

    any availble?

  7. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2
  8. GingerRocky

    Active Member

    Joined:
    Sep 30, 2016
    Messages:
    535
    Products Owned:
    0
    Products Wanted:
    1
    Trophy Points:
    31
    Location:
    chelmsford
    Ratings:
    +58

    you’ll need to go higher than £200 for those kind of pc’s. possibly double that.

  9. hamez101

    hamez101

    Novice Member

    Joined:
    Sep 27, 2018
    Messages:
    23
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    3
    Location:
    Scotland
    Ratings:
    +2

    probably yes but we’re talking 2nd hand here so I might just stick with my trusty Xbone.

  10. GingerRocky

    Active Member

    Joined:
    Sep 30, 2016
    Messages:
    535
    Products Owned:
    0
    Products Wanted:
    1
    Trophy Points:
    31
    Location:
    chelmsford
    Ratings:
    +58

    so was i dude!

    however, you may pick up a 2nd gen 2500k system for £200 with an older gpu.

Share This Page

Loading…

Tips to track down and neutralize PowerShell malware

Some organizations feel more secure keeping their servers hosted in their own data centers rather than the cloud. However, many in IT might not realize this makes their machines very attractive targets for hackers.

Malicious actors actively target servers in the data center to tap into the sheer amount of bandwidth and processing power they can use for their own nefarious deeds. In this article, we will look at how we uncovered and disabled PowerShell malware that ran its workload on a specific schedule.

System performance takes a nosedive

We knew something was wrong because the issues were obvious. The machine, whether it was a physical or a virtual server, would slow to a halt. We launched Task Manager and checked the details to see multiple instances of PowerShell.exe consuming as much CPU as possible.

We killed the PowerShell.exe processes, but it was a temporary fix, as the processes would respawn every two hours to restart its cryptomining operation.

To stop the PowerShell malware from running, we used this command to stop the automated process:

taskkill /IM PowerShell.exe /F

A look at Task Scheduler yielded no obvious clues. Normally, malware modifies a Windows file or creates a similar one that the antivirus does not pick up in a hidden folder. In this case, there were no hidden folders and all the system files looked normal when checking the creation date.

To dig deeper into the cause, we turned on PowerShell logging with Group Policy using the administrative templates. Within 30 minutes, we checked the logs and found the machine talking to several external IP addresses.

PowerShell administrative templates
Use the Group Policy editor to apply templates for PowerShell logging to uncover the details of the mysterious events behind the PowerShell.exe process.

After identifying the external IPs, we created a new static route to send the traffic to nowhere. To do this, we launched an elevated command prompt and ran the following command, replacing X.X.X.X with the default gateway address:

route ADD 105.27.177.210 MASK 255.255.255.255 X.X.X.X if 1 -p

We ran the same command for the other external IPs found in the logs. Now, when the PowerShell malware tried to start, it would stop because it could not talk to the internet.

We removed the default gateway on servers that didn’t require access to the internet. This offered the same result as null routing the IP and killed the process immediately after it launched.

Remove the infection from the WMI database

[embedded content]
Ways to defend your infrastructure from
PowerShell-based malware

Next, we checked Windows Management Instrumentation (WMI) because a lot of WMI alerts appeared in the event log during the high CPU spikes when PowerShell.exe launched.

Run these PowerShell commands to check for a corrupt or infected WMI database — gwmi is the alias for Get-WmiObject:

gwmi -Namespace “root/subscription” -class __FilterToConsumerBinding -Filter “Filter = “”__EventFilter.Name=’SCM Event Filter'”””

gwmi -Namespace “root/subscription” -Class __EventFilter | Where Name -eq “SCM Event Filter”

gwmi -Namespace “root/subscription” -Class __EventConsumer | Where Name -eq “SCM Event Consumer”

If there is anything amiss, encrypted text will appear. Due to this obfuscation, the operating system may not recognize the PowerShell malware as a threat.

To remove the malware, we had to delete those entries from the WMI database using the Remove-Object pipe.

gwmi -Namespace “root/subscription” -class __FilterToConsumerBinding -Filter “Filter = “”__EventFilter.Name=’SCM Event Filter'””” | Remove-WMIObject

gwmi -Namespace “root/subscription” -Class __EventFilter | Where Name -eq “SCM Event Filter” | Remove- WMIObject

gwmi -Namespace “root/subscription” -Class __EventConsumer | Where Name -eq “SCM Event Consumer” | Remove- WMIObject

Take extra steps to be safe

We also discovered the malware used IPv6 to tunnel traffic to IPv4. If you have a server that does not require IPv6, I suggest removing it by updating the registry and then removing the pass-through with the following commands:

reg add hklmsystemcurrentcontrolsetservicestcpip6parameters /v DisabledComponents /t REG_DWORD /d 0xFF /f

Get-NetAdapterBinding -ComponentID “ms_tcpip6” | disable-NetAdapterBinding -ComponentID “ms_tcpip6” -PassThru

After rebooting the server, the multiple instances of PowerShell.exe stopped.    

CenturyLink service offers self-serve connection to AWS

CenturyLink has launched a self-serve, pay-as-you-go service that lets companies create a temporary virtual Ethernet connection between AWS and a colocation facility or office location.

The new CenturyLink service, called Cloud Connect Dynamic Connections, is available to businesses that use any of the 2,200 colocation data centers with CenturyLink optical fiber. The service is also accessible by companies with offices located in more than 100,000 commercial buildings with the carrier’s fiber.

Geographically, Cloud Connect Dynamic Connections is available in North America, Asia Pacific and Europe. The broad accessibility stems from CenturyLink’s $34 billion acquisition of Level 3 Communications in 2017.

Level 3’s software-defined networking technology powers Cloud Connect Dynamic Connections, which creates a private Layer 2 connection to AWS. A corporate engineer would create the link by logging into the CenturyLink portal and choosing the location he wants the carrier to connect to the AWS data center where his company’s applications are running.

New CenturyLink service bills by the hour

CenturyLink charges by the hour for the virtual circuit, which the engineer would delete when it’s no longer needed. If the link remains after five to 10 days — CenturyLink hasn’t decided on the exact time — the carrier will switch the connection from the hourly rate to a monthly subscription.

Companies sometimes need temporary circuits to transfer data to or from applications running on AWS. Companies can choose circuit speeds ranging from 5 Mbps to 3 Gbps, depending on the amount of data headed to the cloud provider. CenturyLink plans to up the maximum speed to 30 Gbps soon, said Chris McReynolds, vice president of core network services at CenturyLink.

Dynamic Connections is a part of CenturyLink’s Cloud Connect service, which provides long-term links to AWS through the cloud provider’s private network connection, called Direct Connect. Companies use the CenturyLink service when corporate policy or government regulations prohibit them from using the public internet.

Last month, CenturyLink used the broader fiber optic coverage it received with Level 3 to make its software-defined WAN service available in more than 30 countries.

The acquisition resulted in CenturyLink exiting the colocation business. Less than a week after announcing the Level 3 takeover, CenturyLink sold its 57 colocation data centers to private equity consortium BC Partners for $2.15 billion in cash. The carrier used the money to help finance the Level 3 deal.