{"id":39218,"date":"2019-10-31T22:28:31","date_gmt":"2019-10-31T19:28:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/strah-bol-i-nenavist-tehnicheskoj-podderzhki\/"},"modified":"2019-10-31T22:28:31","modified_gmt":"2019-10-31T19:28:31","slug":"strah-bol-i-nenavist-tehnicheskoj-podderzhki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/strah-bol-i-nenavist-tehnicheskoj-podderzhki","title":{"rendered":"Fear, pain, and hatred of technical support","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/8a4fb8a5960601b52a41b768ca845319.jpeg\" style=\"display:block;margin: 0 auto;\" \/>Habr is not a complaints book. This article is about the free tools from Nirsoft for Windows system administrators.<\/p>\n<p>When contacting technical support, many people often experience stress. Some worry that they won't be able to explain the problem and will look foolish. Others are overwhelmed with emotions and find it hard to contain their outrage over the quality of service\u2014since there hadn't been a single interruption before!<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nI like Veeam's technical support, for example. They may not respond quickly, but their answers are precise and to the point. I'm even glad to write to them about trivial issues to learn some new trick.<\/p>\n<p>DeviceLock has decent tech support. The experience of their veterans is commendable. After almost every inquiry, I add a few lines of 'Secret Knowledge' to the corporate Wiki. Meanwhile, they quickly gather test builds of the product with fixed bugs\u2014the support and production teams are closely connected.<\/p>\n<p>ArcServe is not very good. The residents of the Indian Ocean coast are very, very polite and attentive, but I can't say anything else good. If there\u2019s no ready-made KB, your life will be miserable.<\/p>\n<p>Our antivirus flagship\u2014the Kaspersky Lab\u2014stands out in its technical support. Just like one postpones a visit to the dentist, I try to avoid writing to them for as long as possible. Because it will be long, painful, and with unpredictable results. You can't choose your doctors, even if you have 5000 rubles in licenses\u2014the one you get will treat you. And I seem to be a doctor myself (well, not a doctor, but a handyman), which makes it even more frustrating.<\/p>\n<p>On to the matter.<\/p>\n<p>We're upgrading Kaspersky Security for Windows Server from version 10.1.1 to 10.1.2. The operation is simple, but we know better. During the last Patch Tuesday from Microsoft, I noticed that updates had not installed on a large group of servers.<\/p>\n<p>It turned out that the wuauserv and BITS services had stopped working on the servers, and an error is returned upon startup:<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/cbde9f245ebffc20e619bad7ea2ee53e.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAfter resolving the startup issue with some quick fixes<\/p>\n<pre><code class=\"plaintext\">sc config wuauserv type= own\nsc config bits type= own\n<\/code><\/pre>\n<p>\nI realized that there was something common among the servers\u2014100% of the patients had recently been upgraded to KSWS 10.1.2.<\/p>\n<p>It hurt badly, so I opened a ticket.<\/p>\n<blockquote><p>Hello! <br \/>\nAfter upgrading from 10.1.1 to 10.1.2.996, on several servers, the BITS and Windows Update services broke.<br \/>\nAn error is returned upon startup: 1290<br \/>\nIs the occurrence of this error related to the installation of the product? <\/p><\/blockquote>\n<p> The answer was quick to arrive.<\/p>\n<blockquote><p>Good afternoon, Mikhail!<br \/>\nKaspersky Security 10 for Windows Server does not consider existing services during installation or version updates, nor does it check\/change their settings. \n<\/p><\/blockquote>\n<p>They said it \u2014 just like that.<\/p>\n<p>A quick Google search revealed that this problem exists, or at least existed, <noindex><a rel=\"nofollow\" href=\"https:\/\/forum.kaspersky.com\/index.php?\/topic\/404287-%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D0%B8-ksws\/&amp;do=findComment&amp;comment=2863082\">in another version.<\/a><\/noindex>.<\/p>\n<p>I wrote back \u2014 intelligent people say that this problem existed before, maybe it still persists? I provided standard technical information.<\/p>\n<p>For 7 days (seven days, Carl!) the technical support remained silent. The result was disappointing. Here it is in brief:<\/p>\n<blockquote><p>Mikhail, good afternoon!<\/p>\n<p>In your case, the disabling of services after the product upgrade is directly related to individual or group settings of the operating system (my conclusions are based on the analysis of the report you sent). <\/p>\n<p>I recommend you to deeply investigate the operation of the system services. I would be happy to help you with this, however, it falls under Microsoft support\u2019s jurisdiction, as the solution you mentioned is operational and requires only one-time input.<\/p>\n<p>From my side, I want to add that <b>both services you mentioned are related to operating system updates and do not affect the operation of our product, hence also not the level of your protection.<\/b>. <\/p><\/blockquote>\n<p> And that\u2019s the end. It\u2019s disappointing.<\/p>\n<p>Alright, if Kaspersky Lab cannot find the defect, the soldiers of N will have to find it themselves.<\/p>\n<p>The configuration of Windows services is stored in the registry branch:<\/p>\n<pre><code class=\"plaintext\">HKLM\\System\\CurrentControlSet\\services<\/code><\/pre>\n<p>\nThere is nothing useful stored in the file system except for binary files.<\/p>\n<p>What do we use to monitor the registry? The most universal tool is <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.microsoft.com\/en-us\/sysinternals\/downloads\/procmon\">Process Monitor from Sysinternals.<\/a><\/noindex>. <\/p>\n<p>What\u2019s wrong with Process Monitor? It\u2019s extremely difficult to find anything in it if you don\u2019t know exactly what you're looking for. <\/p>\n<p>At the same time, there are utilities from a not-so-well-known company <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nirsoft.net\/\">Nirsoft.<\/a><\/noindex>. They release dozens of unique programs \u2014 from monitoring USB device connections to reading product keys from the registry. If you\u2019ve never heard of them \u2014 I highly recommend visiting the website and checking out the collection. When I first learned about them \u2014 it was like opening a box of toys.<\/p>\n<p>For our work, the utility will be useful <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nirsoft.net\/utils\/registry_changes_view.html\">www.nirsoft.net\/utils\/registry_changes_view.html<\/a><\/noindex><br \/>\nRegistryChangesView v1.21. Download it, run it on the server.<\/p>\n<p>The first thing to do is to create a snapshot before installation.<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/d0a08c8182640f1bd4e79e3d24f7c4cb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nThen we launch Sysinternals Process Monitor, disable everything except for the registry, and set up saving the results to a file.<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/e58a5d494d017e67a5d923c45aac95d7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nWe start the installation process and ensure everything is broken.<br \/>\nWe create a second snapshot in RegistryChangesView.<br \/>\nWe compare the snapshots with each other.<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/b6afb1abaffde95dff5984b5dd81726e.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAnd here is what we were interested in.<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/0bb271f6828bdab7a9f9542e2a2ba00b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/f39fa69459fa468beff842f54bd435f1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nBut who did this? Could the service have broken itself?<\/p>\n<p>We look at the Process Monitor log, starting with filtering the processes:<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/072c53ad956970566ca3b40974caeb5a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/f451e68e95080b3ad526c4587ecc5526.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nWe take a Summary for the registry and sort it by the Writes field:<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/b101923413091b1b0a2204677a5e1411.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAnd here it is:<\/p>\n<p><img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/bc34d854ff48c6f5221ba072426551a1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Fear, pain, and hatred of technical support\" src=\"\/wp-content\/uploads\/2019\/10\/80a4072def0b40b83a85ee2463997166.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nThat's it, friends, within 5 minutes the cause of the problem was found.<\/p>\n<p>It's definitely the Kaspersky installer, and we know exactly how it breaks the service. So, we can easily restore it to its original state.<\/p>\n<p>What conclusions can we draw?<\/p>\n<p>Rely on support, but don't slack off yourself. Don\u2019t be lazy. Figure it out.<br \/>\nUse the right tools. Expand your personal set of technical resources. Learn about the tools you use every day.<br \/>\nBut if you work in support yourself, try to learn to skip the first phase \u2014 'Denial'. This, by the way, is the most difficult part.<\/p>\n<p>I wish I could start following these tips myself. Hello, Lab!<\/p>\n<p>PS: Thank you <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/berez\/\" class=\"user_link\">berez<\/a><\/noindex> for your help with punctuation.<br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/472650\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0425\u0430\u0431\u0440 \u2014 \u043d\u0435 \u0436\u0430\u043b\u043e\u0431\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430. \u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Nirsoft \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Windows. \u041e\u0431\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u043b\u044e\u0434\u0438 \u0438\u0441\u043f\u044b\u0442\u044b\u0432\u0430\u044e\u0442 \u0441\u0442\u0440\u0435\u0441\u0441. \u041a\u0442\u043e-\u0442\u043e \u043f\u0435\u0440\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u0433\u043b\u0443\u043f\u043e. \u041a\u043e\u0433\u043e-\u0442\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u044d\u043c\u043e\u0446\u0438\u0438 \u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u0441\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043d\u0435\u0433\u043e\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u2014 \u0432\u0435\u0434\u044c \u0440\u0430\u043d\u044c\u0448\u0435 \u043d\u0435 \u0431\u044b\u043b\u043e \u043d\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29434,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-39218","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0425\u0430\u0431\u0440 \u2014 \u043d\u0435 \u0436\u0430\u043b\u043e\u0431\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/strah-bol-i-nenavist-tehnicheskoj-podderzhki\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0442\u0440\u0430\u0445, \u0431\u043e\u043b\u044c \u0438 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0425\u0430\u0431\u0440 \u2014 \u043d\u0435 \u0436\u0430\u043b\u043e\u0431\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/strah-bol-i-nenavist-tehnicheskoj-podderzhki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:28:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:28:31+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fear, pain, and hatred of technical support | ProHoster","description":"Habr is not a complaint book.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/strah-bol-i-nenavist-tehnicheskoj-podderzhki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0442\u0440\u0430\u0445, \u0431\u043e\u043b\u044c \u0438 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 | ProHoster","og:description":"\u0425\u0430\u0431\u0440 \u2014 \u043d\u0435 \u0436\u0430\u043b\u043e\u0431\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/strah-bol-i-nenavist-tehnicheskoj-podderzhki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:28:31+00:00","article:modified_time":"2019-10-31T19:28:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39218","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 01:19:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:54:42","updated":"2026-01-24 01:19:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/39218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=39218"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/39218\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/29434"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=39218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=39218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=39218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}