Antivirus is software used to prevent, detect and remove malware.

learn more… | top users | synonyms (1)

0
votes
0answers
15 views

AVG Antivirus causes slow PHP response time

My PHP website has suffered from really slow response times, and after a long research I finally found out the culprit is AVG Antivirus installed on the web server. The website is running on IIS 7.5 ...
1
vote
2answers
33 views

Why is this server generating outbound IRC connections? [duplicate]

I noticed last night whilst checking our active sessions list on our firewall for something else, that a server was generating outbound IRC connections. Last night there was around 60 connections but ...
1
vote
1answer
41 views

How can a PC be protected from malware without locally installed software?

I'm looking to find a way to protect PCs, without requiring locally installed software. I thought about a device such as a Watchguard that has UTM facilities and make it a transparent proxy, in ...
1
vote
0answers
32 views

Viruses bypassing Trend ScanMail - Could it be a licensing issue or a mime issue

I have some SCR viruses being sent in a ZIP file that are bypassing the Trend Scanner on Exchange 2010 SP1 CU7. There are a few reasons I can think this would be occurring The email message has ...
34
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
1answer
126 views

Ports needed for IP Subnet discovery Kaspersky Security Center 10

I'm trying to discover computers based on IP subnets. The administration server is not part of the same workgroup or active-directory as the clients, so this is the only way to do it. I can ...
0
votes
0answers
33 views

Microsoft AV - Do Exclusions Apply to Full Scans or Realtime Protection Only?

The vendor for a new system we're setting up sent us specs for their recommended A/V exclusions. They recommend that we exclude .PDF, .JAR, .BIN, and .DAT files (among others) from real-time ...
2
votes
1answer
395 views

SCCM 2012 Software Update role - Can I still use WSUS?

I manage a network of about 1200 workstations and about 200 or so servers. We have migrated away from McAfee in favor of System Center Endpoint Protection for our corporate Anti-Malware solution. ...
-1
votes
1answer
454 views

Getting rid of Trojan on Debian Server [duplicate]

-------- EDIT --------- I do not agree that this is a duplicate of the linked question. I know that the correct way to deal with this is to wipe and reinstall the server. However, i am interested in ...
-2
votes
2answers
177 views

Check if an Antivirus is installed and enabled

I work in an entreprise with a lot of pcs > 1000 with os windows xp and 7 and symantec antivirus installed on it the probleme is : -how to check if the antivirus is installed on the computers -and ...
0
votes
0answers
64 views

Inter-VLAN Malicious Code Scanning

I am trying to find an inbuilt solution on a Cisco Catayst 3750X Switch to scan all traffic routed from one VLAN to another for malicious code. The situation is that we currently have a development ...
0
votes
1answer
338 views

MsMpEng.exe high CPU usage on Windows Server 2012

We have a Windows Server 2012 installation that we use as an internal web server. Most HTTP requests are very slow on this machine (about 15 seconds for a simple ASP.NET WebAPI request). We noticed ...
0
votes
0answers
59 views

Windows file server denying openfile for the first few seconds a process is running

I'm trying to figure out the cause of a problem that happen at two of our customer's. They are running our application with the executable located on a SMB share on a Windows 2008 R2 servers (the one ...
0
votes
1answer
534 views

Server 2008 R2 AntiVirus & remote desktop connections [closed]

I use a Server 2008 R2 Enterprise machine which is used solely to allow my customers to remotely connect using remote desktop connection. When they log in, the application is started and when the ...
0
votes
1answer
646 views

Kaspersky blocking server's ip address

I am consistently getting the error that TCP from "server ip" to local port 135 Denied: Intrusion.Win.DCOM.exploit within the kaspersky small office security suite and this disconnects my users ...
1
vote
0answers
57 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
1answer
153 views

Performance and Microsoft Security Essentials Real Time Protection on Server 2008

Is it smart to turn off real time protection for Microsoft Security Essentials on Server 2008? Will this help with performance? I have it running a scan every night.
4
votes
1answer
187 views

Server side antivirus or not?

We have basic server-side virus scanning in our datacenter, but it's expensive, uses a considerable amount of CPU cycles, and is annoying to maintain. I'm not looking for a sales-pitch on "better" AV ...
1
vote
1answer
58 views

Defending PCs against APTs

We are evaluating the security of the PCs used by people with access to high-value company documents. At the moment they are kept patched and run a virus checker, but we are concerned about zero-day ...
0
votes
0answers
50 views

Windows Share Meltdown, Unexplainable

I am having precisely the exact symptoms on my server as is described in this article. This includes statements that the specified network name is no longer available and RPC Server is too busy ...
-2
votes
1answer
184 views

Vipre antivirus on virtualized server 2012 [closed]

Can anyone confirm that Vipre ('VIPRE Antivirus Business') runs ok in a 2012 server environment? This is only for a simple single server solution, no need for managing workstations etc. Feedback ...
4
votes
1answer
355 views

Network boot of Windows Defender Offline will not update

I have been working on configuring a network bootable virus removal suite, and I am using the Windows Defender WinPE iso generated from using this 64-bit tool. The tool downloads and creates an ISO ...
0
votes
1answer
53 views

Which is wrong: emailing links that only work once, or a virus scanner that visits links? [closed]

I ran into an interesting bug today. I was trying to update my address on a mailing list, and it sent an email to the new address, with a unique URL that I was supposed to visit to confirm my ...
0
votes
1answer
84 views

Strange ports on default install of W7

I have a base new install of windows 7, and when I went to look for something else I saw the attached netstat output. What concerns me is that this is Windows + Truecrypt + drivers, nothing else ...
1
vote
1answer
87 views

Protecting Backups from Viruses

Currently we are using ReadyNAS RN102 by NETGEAR to hold all our images from all our machines. My question is can viruses expand from the machines and infect the NAS drive and the backups? We are ...
1
vote
1answer
2k views

Microsoft Security Essentials: MpCmdRun.exe -SignatureUpdate -unc switch does not work

Looking here I can see extracting a downloaded mpam-fe.exe and copying the files to a shared folder should allow me to run the following command from an MSE client so it will pull down the updates ...
3
votes
2answers
157 views

Windows updates, Anti-virus updates for Air gapped hosts

I just took over as an admin for a network that uses corporate imaged hosts, to manage various special purpose machines. These hosts directly connect to the equipment they are managing via Serial or ...
5
votes
1answer
1k views

What are the differences between Windows Defender and Windows Intune Endpoint Protection and SCCM Endpoint Protection?

What are the functional differences between Windows Defender and Windows Intune Endpoint Protection and SCCM Endpoint Protection, apart from methods of management, if any? (I am referring to the ...
-1
votes
1answer
128 views

Symantec Endpoint Protection virus definition files

Are Symantec Endpoint Protection virus definition files protected by "Protect Symantec security software from being tampered with or shutdown" option? in other words I want to know if virus ...
0
votes
2answers
448 views

Drowning in Norton Endpoint Protection virus definition files

I've been noticing that my 40 GB C: drive on the Windows 2008 Server keeps getting filled up. After investigation I found that this is a known issue with SEP described in article TECH180056 on ...
1
vote
2answers
2k views

Kaspersky blocked RDC on Windows - how to fix?

I installed Kaspersky Endpoint security, but as soon as the installer finished, my remote desktop connection broke and I wasn't able to login anymore. Seems that Kaspersky firewall blocks RDC ports ...
0
votes
1answer
102 views

Does anybody actually run antivirus software on linux servers? [closed]

Running about 10 servers all CentOS 6.3. Some servers are web role (nginx, php-fpm, node.js), others are database (MySQL, MongoDB). Do people actually run antivirus software on their linux servers? ...
-5
votes
1answer
56 views

Why is the Anti Virus Definition file only 200MBs? [closed]

So I downloaded a virus definition file for symantec endpoint protection. We regularly update our client's closed network anti virus using these files once every 6 months. The files are of '.JDB' ...
1
vote
2answers
45 views

Do these files look like virus remnants?

We've been having Backup Exec issues related to a corrupt file within SYSVOL on an SBS 2008 server. An anti-virus scan removed a file (the same one BE was failing on) from within the scripts folder as ...
-1
votes
1answer
608 views

Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]

The virsu hiding all of the folders and replace it with shortcut. These are the setting in shortcuts. C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
1
vote
1answer
77 views

Is AV only needed because of human users?

I rent a VPS, and as an a kneejerk reaction (it's a Windows server), I got AV for it. Given that I do very little with it as a logged-in user (I use it as a web server), bar install my own software ...
1
vote
1answer
510 views

Mod_security2 and clamav to catch malicious files on upload

Is there a clear documentation to describe the solution? It's very common and also necessary.
1
vote
2answers
2k views

Group policy logon script copies files to client PC but does not execute exe

We are trying to copy 3 files from our domain controller to a user PC and have it execute from a .bat file when a user logs in via Active Directory. When we associate the .bat file to a user in AD ...
1
vote
1answer
518 views

Troubleshooting I/O latency possibly caused by file system driver

I have a SQL Server instance (SQL Server 2008 R2, Windows 2008 R2) that complains, for very short, random periods of about 15-20 seconds, that some of its I/O requests are taking longer than 15 ...
0
votes
3answers
1k views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
1
vote
1answer
794 views

Rkhunter triggered last night warning for a possible infection. What next?

Last night rkhunter triggered with the following warnings: [04:10:23] Warning: Network TCP port 32982 is being used by /usr/lib/apache2/mpm-prefork/apache2. Possible rootkit: Solaris Wanuk ...
-1
votes
1answer
59 views

Used malwarebytes now i have missing .dlls [duplicate]

I did a maleware search and got rid of few trogans but now I kep getting messages like error in C:\documents and settings\lindam\application\ntcdsr.dll miss entry c:\documents and ...
0
votes
2answers
619 views

How to scan only last 24 hours files with clamav

I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours. ...
1
vote
1answer
1k views

Trend Micro Causing IIS Slow Response

I have a Windows 2008 R2 SP1 server with IIS serving up a static html page. I am using this to verify the performance of the server before deploying my web app. I use apache bench to test the the ...
0
votes
1answer
90 views

Updating Mcafee Group Shield on Exchange Server

So I don't actually have a problem yet, but I might. You see my fathers company have 10 computers and an exchange server with Mcafee Group Shield. lately they've had issues with mails from customers ...
3
votes
1answer
548 views

Kaspersky processing error Explorer.exe (recycle bin)

I get daily critical errors from Kaspersky involving Explorer.exe... The file in question is almost always in the Recycle Bin, or something on the desktop. Here is an example error detail: Event ...
-1
votes
1answer
173 views

Firewall Deep Inspection Updates and Antivirus Subscription, worth it? [closed]

I realize that this is a subjective question, but I'm trying to get some experiences We have Juniper firewalls in our organization (SSG-320M, SSG-5, and some old NS-5GT). We have the option of a ...
1
vote
1answer
2k views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: ...
4
votes
3answers
1k views

Easiest way to get MS Security Essentials to run for people who turn off their computers?

All the employees at my work shutdown their Windows 7 computers (iMacs running BootCamp) when they leave work. This ends up with people having MS Security Essentials say their computer is at risk, due ...
2
votes
1answer
66 views

What are the impacts of running VirusScan on a Linux server?

I am asked in a bid for tender to assert that my software will cohabit without a problem with VirusScan (v6.0.3) under Linux. My software is a web application, running under tomcat. It can create ...