Service Request Ticket - # 76151

Service Request Information

CONTACT Name Hedgepeth, Sandra   View open tasks   View tasks from last 30 days   Schedule Change Contact Date Jul 29, 2020 10:23 AM
Department Creative Arts/Theater-Dance Phone 88739
Location Email hedgepes@wou.edu Request for more information Send 'Keeping in touch' email Send 'I'm thinking of you' email

SR INFO Type WOU #
Priority Equipment Type
Status Flagged
Description

Laptop Edit WOU # 20190421[Edit Inv] (opens in a new window) Bldg/Room RA 107
Service Tag Description Apple 13in MacBook Pro Touch Ba SpcGry #MUHP2LL/A
Serial No. FVFZ5Z70L410 Location Sandy Hedgepeth, Assoc. Professor, Dept Head

CPU Intel Core i5(1.4GHz quad-core, 8thGEN)


OS MAC OS X 10.14 (Mojave) Software Microsoft Office from XXXX2019009325; Adobe CC Suite NAMED USER [Adobe ID hedgepes@wou.edu];

Wireless NIC A4:83:E7:6D:9A:0C


Bluetooth NIC A4:83:E7:7B:66:E3


TECHS Submitted by Megan Thibeault Contact thibeaultm@wou.edu 88925
Primary Technician Contact ellism@wou.edu 88629

Tracking

Entered by Date Memo
Michael Ellis
Email

Public

Entered by Date Memo
Michael Ellis Aug 18, 2020 11:04 AM
Status changed from (1) Pending to (5) Completed
Add Attachment
Michael Ellis Aug 18, 2020 11:04 AM
I think I got this fixed :)
Add Attachment
Michael Ellis Aug 12, 2020 10:10 AM
Email:


Sandy,

Have you had this issue in the past?
Brittany is the only one with experience on this, and she's on LWOP until at least September :(
What does this software do?

Any info you can provide would be great!
Thanks,

Michael
Add Attachment
Peter Puettmann Jul 31, 2020 08:58 AM
Task reassigned to Michael Ellis.
Add Attachment
Peter Puettmann Jul 31, 2020 08:58 AM
She has a screencast app that she uses and it gets flagged as ransomware. what should we do about this michael? 
Add Attachment
Peter Puettmann Jul 31, 2020 08:58 AM
bundlore thing is cleaned up. 

Add Attachment
Peter Puettmann Jul 31, 2020 08:52 AM
sandy emailed me back and said that the scan came back all good. 
Add Attachment
Peter Puettmann Jul 30, 2020 09:57 AM
****This is an outgoing email****
Hi Sandra,

I need some additional information regarding service request #76151

Description: [MEDIUM] Alert for Sophos Central [Western Oregon University]: We detected a potentially unwanted application

Id like to schedule a time with you to look at your laptop (W#20190421) to make sure that Sophos properly cleaned up and removed the application. My hours for the summer are Monday-Thursday, 8am-12pm/1pm-5pm. Let me know what works best, have a great day. 

FYI i left you a voicemail as well, no need to call back, responding to this email is fine. Thanks!

--Peter P, UCS Lead Student Tech 

Add Attachment
Public
Megan Thibeault Jul 29, 2020 10:23 AM
What happened: We detected a potentially unwanted application (PUA) on a computer. PUAs are not malicious but are often considered unsuitable for corporate networks.

Where it happened: W20190421

Path: /Volumes/Install/.hidden/Install.command

What was detected: Bundlore

User associated with device: W20190421\hedgepes

How severe it is: Medium

What Sophos has done so far: We blocked access to the PUA.

What you need to do: In the Sophos Central Admin console, go to the Alerts page. Select the PUA alert. To remove the PUA, click Clean up PUA(s). If you want to let it run, click Authorize PUA(s). Authorize PUAs will apply to all your computers, not just the one in this alert.
Add Attachment