1. A Feature-Based of IT Automation using Remote Control on Safe Mode Developed By: Fernando Perez Advisor : Dr. S. Masoud Sadjadi School of Computing and Information Sciences Florida International University ferapere@fiu.edu http://www.cs.fiu.edu/~sadjadi/

2. Agenda Problem and Motivation Solution Behind the Scene Customizing the Solution Disclaimer Progress Report

3. Problem and Motivation: Computer viruses are a constant problem in the IT world. To help reduce the spread of viruses in the network and reduce the downtime of the affected machines IT automation can assist the system administrator in removing the viruses in Safe Mode remotely.

4. Solution Using Kaseya we can install an agent on the affected machine that can perform a remote Safe Mode Reboot that modifies the Boot.ini file To combat the virus we disable the computer’s interntet connection Run anti-virus software to identify the virus Install tool to remove the virus Restart the computer.

5. Behind the Scene For the Safe Mode Reboot we can use the procedure found in Folder IT Automation -> IT Center -> Reboot to Safe Mode Disable the internet connection by using a procedure that removes the default gateway and adds an explicit route to the Kaseya server to keep the Agent communicated. (Could also block ports, except one used by the Kaseya Agent) Run the anti-virus software in the computer to identify the virus

6. Behind the Scene Install appropriate tool that can remove the virus in safe-mode (depends on virus) and run it Restart the recently cured computer

7. Customizing the Solution Another use of this tool would be to limit the internet connection of a machine if the user is distributing “illegal” or “restricted” content. The user can be warned to stop doing “unaccepted” behavior. If behavior continues the procedure to disable the internet connection can be used. Report what happened to management to solve issue Reverse changes to allow internet connection

8. Disclaimer Only tested with Windows XP (not usable with Mac OS or Linux) Reboot in Safe Mode Procedure (use at your own risk) Computer must be connected to a UPS and attended while performing procedures Machine must have internet connection

9. Progress Report Work in Progress