search

nexxai / CryptoBlocker

A script to deploy File Server Resource Manager and associated scripts to block infected users
GNU General Public License v2.0
200 stars 73 forks source link

Missing Group 2 and Screens #31

Closed Archipelego closed 6 years ago

Archipelego commented 6 years ago

Hi all,

I've noticed recently that the automated script that creates the FSRM rules has stopped working correctly.

Reading through the script, I can see that it pulls the list of extensions etc and breaks them up into groups named CryptoBlockerGroup#. It then deletes existing FSRM file groups and recreates them.

This has worked for months without problem. However I'm now seeing that the script doesn't create CryptoBlockerGroup2 or recreate the file screens. It does create CryptoBlcokerGroup 1,3,4 and 5.

I've outputed the results of the powershell script to a log file and when it's trying to create CryptoBlockerGroup2 see the error :

This tool is deprecated and may be removed in future releases of Windows. Please use the Windows PowerShell cmdlets in the FileServerResourceManager module to administer File Server Resource Manager functionality.

The requested object was not found.

This tool is deprecated and may be removed in future releases of Windows. Please use the Windows PowerShell cmdlets in the FileServerResourceManager module to administer File Server Resource Manager functionality. The parameter is incorrect.

Add new file groups. The syntax of this command is: Filescrn Filegroup Add /Filegroup

I'm also seeing the follow error when it tries to create the file screen:

The requested object was not found. Adding/replacing File Screens.. Adding/replacing File Screen for [F:] with Source Template [CryptoBlockerTemplate]..

This tool is deprecated and may be removed in future releases of Windows. Please use the Windows PowerShell cmdlets in the FileServerResourceManager module to administer File Server Resource Manager functionality. The requested object was not found.