Antivirus is software used to prevent, detect and remove malware.

learn more… | top users | synonyms (1)

-1
votes
2answers
43 views

Is there a quick & easy solution to protect server 2012 against malware?

For a Windows Server 2012 Standard GUI version to support a small IDE Getting malware protection on my 1st server has become a much bigger problem than I imagined it would. My research covered a lot ...
0
votes
1answer
31 views

Setting affinity for virus protection on workstations - best practice?

Despite the modern virus protection is based on prevention by scanning network traffic and by real-time protection, many companies still have policies, that full scans must be performed regularly. ...
0
votes
1answer
11 views

SCEP: imitate potential threat in both live and regular scanner to inspect logs

I am doing some powershell stuff to parse a few logs at work. I would also like to collect some information from the SCEP logs. I find the amount of logs available as well as the different locations ...
3
votes
0answers
25 views

Linux Malware Detection Monitoring: Clean files after hit

I'm using LMD ("Maldet") for scanning a web server with different projects. For this purpose I'm using the inotify-monitoring. Well, the inotify-log shows, that the modified files are noticed, but I ...
0
votes
0answers
6 views

Could somebody that has worked with ePolicy Orchestrator in VMWare provide a high level overview of the roles in the stack? [duplicate]

E policy Orchestrator (EPO) is a McAfee product that manages AV MOVE apis. The EPO server works in conjunction with ESX and vcenter. VISUALLY I don't see the workflow of this entire process very ...
0
votes
1answer
44 views

How to install AV on existing Azure VM using agent tools?

If I already deployed a VM, how can I use the VM agent to install an antivirus software from the Azure marketplace (i.e. McAfee)? There must be some Powershell command or something but everything I've ...
1
vote
1answer
83 views

Block attachment files without extensions in Postfix via mime_header_checks?

We know how to reject executables and other potentially dangerous file extensions via mime_header_checks directive: mime_header_checks = regexp:/etc/postfix/mime_header_checks (main.cf) ...
2
votes
0answers
14 views

How do I restore 1/2 of all files in a VSS image? aka Previous Version in bulk?

Suppose I have many files that were virus infected in bulk. It isn't the entire drive, but 1/2 of it. I don't want to right click each folder and restore a previous version. Is there a way to do ...
0
votes
0answers
35 views

AVG Antivirus causes slow PHP response time

My PHP website has suffered from really slow response times, and after a long research I finally found out the culprit is AVG Antivirus installed on the web server. The website is running on IIS 7.5 ...
1
vote
2answers
39 views

Why is this server generating outbound IRC connections? [duplicate]

I noticed last night whilst checking our active sessions list on our firewall for something else, that a server was generating outbound IRC connections. Last night there was around 60 connections but ...
1
vote
1answer
44 views

How can a PC be protected from malware without locally installed software?

I'm looking to find a way to protect PCs, without requiring locally installed software. I thought about a device such as a Watchguard that has UTM facilities and make it a transparent proxy, in ...
1
vote
0answers
38 views

Viruses bypassing Trend ScanMail - Could it be a licensing issue or a mime issue

I have some SCR viruses being sent in a ZIP file that are bypassing the Trend Scanner on Exchange 2010 SP1 CU7. There are a few reasons I can think this would be occurring The email message has ...
34
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
1answer
200 views

Ports needed for IP Subnet discovery Kaspersky Security Center 10

I'm trying to discover computers based on IP subnets. The administration server is not part of the same workgroup or active-directory as the clients, so this is the only way to do it. I can ...
0
votes
1answer
51 views

Microsoft AV - Do Exclusions Apply to Full Scans or Realtime Protection Only?

The vendor for a new system we're setting up sent us specs for their recommended A/V exclusions. They recommend that we exclude .PDF, .JAR, .BIN, and .DAT files (among others) from real-time ...
2
votes
1answer
649 views

SCCM 2012 Software Update role - Can I still use WSUS?

I manage a network of about 1200 workstations and about 200 or so servers. We have migrated away from McAfee in favor of System Center Endpoint Protection for our corporate Anti-Malware solution. ...
-1
votes
1answer
463 views

Getting rid of Trojan on Debian Server [duplicate]

-------- EDIT --------- I do not agree that this is a duplicate of the linked question. I know that the correct way to deal with this is to wipe and reinstall the server. However, i am interested in ...
-2
votes
2answers
334 views

Check if an Antivirus is installed and enabled

I work in an entreprise with a lot of pcs > 1000 with os windows xp and 7 and symantec antivirus installed on it the probleme is : -how to check if the antivirus is installed on the computers -and ...
0
votes
0answers
67 views

Inter-VLAN Malicious Code Scanning

I am trying to find an inbuilt solution on a Cisco Catayst 3750X Switch to scan all traffic routed from one VLAN to another for malicious code. The situation is that we currently have a development ...
0
votes
1answer
477 views

MsMpEng.exe high CPU usage on Windows Server 2012

We have a Windows Server 2012 installation that we use as an internal web server. Most HTTP requests are very slow on this machine (about 15 seconds for a simple ASP.NET WebAPI request). We noticed ...
0
votes
0answers
63 views

Windows file server denying openfile for the first few seconds a process is running

I'm trying to figure out the cause of a problem that happen at two of our customer's. They are running our application with the executable located on a SMB share on a Windows 2008 R2 servers (the one ...
0
votes
1answer
651 views

Server 2008 R2 AntiVirus & remote desktop connections [closed]

I use a Server 2008 R2 Enterprise machine which is used solely to allow my customers to remotely connect using remote desktop connection. When they log in, the application is started and when the ...
0
votes
1answer
735 views

Kaspersky blocking server's ip address

I am consistently getting the error that TCP from "server ip" to local port 135 Denied: Intrusion.Win.DCOM.exploit within the kaspersky small office security suite and this disconnects my users ...
1
vote
0answers
60 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
1answer
179 views

Performance and Microsoft Security Essentials Real Time Protection on Server 2008

Is it smart to turn off real time protection for Microsoft Security Essentials on Server 2008? Will this help with performance? I have it running a scan every night.
4
votes
1answer
207 views

Server side antivirus or not?

We have basic server-side virus scanning in our datacenter, but it's expensive, uses a considerable amount of CPU cycles, and is annoying to maintain. I'm not looking for a sales-pitch on "better" AV ...
1
vote
1answer
58 views

Defending PCs against APTs

We are evaluating the security of the PCs used by people with access to high-value company documents. At the moment they are kept patched and run a virus checker, but we are concerned about zero-day ...
0
votes
0answers
50 views

Windows Share Meltdown, Unexplainable

I am having precisely the exact symptoms on my server as is described in this article. This includes statements that the specified network name is no longer available and RPC Server is too busy ...
-2
votes
1answer
206 views

Vipre antivirus on virtualized server 2012 [closed]

Can anyone confirm that Vipre ('VIPRE Antivirus Business') runs ok in a 2012 server environment? This is only for a simple single server solution, no need for managing workstations etc. Feedback ...
4
votes
1answer
370 views

Network boot of Windows Defender Offline will not update

I have been working on configuring a network bootable virus removal suite, and I am using the Windows Defender WinPE iso generated from using this 64-bit tool. The tool downloads and creates an ISO ...
0
votes
1answer
53 views

Which is wrong: emailing links that only work once, or a virus scanner that visits links? [closed]

I ran into an interesting bug today. I was trying to update my address on a mailing list, and it sent an email to the new address, with a unique URL that I was supposed to visit to confirm my ...
0
votes
1answer
88 views

Strange ports on default install of W7

I have a base new install of windows 7, and when I went to look for something else I saw the attached netstat output. What concerns me is that this is Windows + Truecrypt + drivers, nothing else ...
1
vote
1answer
89 views

Protecting Backups from Viruses

Currently we are using ReadyNAS RN102 by NETGEAR to hold all our images from all our machines. My question is can viruses expand from the machines and infect the NAS drive and the backups? We are ...
1
vote
1answer
2k views

Microsoft Security Essentials: MpCmdRun.exe -SignatureUpdate -unc switch does not work

Looking here I can see extracting a downloaded mpam-fe.exe and copying the files to a shared folder should allow me to run the following command from an MSE client so it will pull down the updates ...
3
votes
2answers
168 views

Windows updates, Anti-virus updates for Air gapped hosts

I just took over as an admin for a network that uses corporate imaged hosts, to manage various special purpose machines. These hosts directly connect to the equipment they are managing via Serial or ...
5
votes
1answer
2k views

What are the differences between Windows Defender and Windows Intune Endpoint Protection and SCCM Endpoint Protection?

What are the functional differences between Windows Defender and Windows Intune Endpoint Protection and SCCM Endpoint Protection, apart from methods of management, if any? (I am referring to the ...
-1
votes
1answer
138 views

Symantec Endpoint Protection virus definition files

Are Symantec Endpoint Protection virus definition files protected by "Protect Symantec security software from being tampered with or shutdown" option? in other words I want to know if virus ...
0
votes
2answers
493 views

Drowning in Norton Endpoint Protection virus definition files

I've been noticing that my 40 GB C: drive on the Windows 2008 Server keeps getting filled up. After investigation I found that this is a known issue with SEP described in article TECH180056 on ...
1
vote
2answers
2k views

Kaspersky blocked RDC on Windows - how to fix?

I installed Kaspersky Endpoint security, but as soon as the installer finished, my remote desktop connection broke and I wasn't able to login anymore. Seems that Kaspersky firewall blocks RDC ports ...
0
votes
1answer
104 views

Does anybody actually run antivirus software on linux servers? [closed]

Running about 10 servers all CentOS 6.3. Some servers are web role (nginx, php-fpm, node.js), others are database (MySQL, MongoDB). Do people actually run antivirus software on their linux servers? ...
-5
votes
1answer
58 views

Why is the Anti Virus Definition file only 200MBs? [closed]

So I downloaded a virus definition file for symantec endpoint protection. We regularly update our client's closed network anti virus using these files once every 6 months. The files are of '.JDB' ...
1
vote
2answers
45 views

Do these files look like virus remnants?

We've been having Backup Exec issues related to a corrupt file within SYSVOL on an SBS 2008 server. An anti-virus scan removed a file (the same one BE was failing on) from within the scripts folder as ...
-1
votes
1answer
633 views

Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]

The virsu hiding all of the folders and replace it with shortcut. These are the setting in shortcuts. C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
1
vote
1answer
77 views

Is AV only needed because of human users?

I rent a VPS, and as an a kneejerk reaction (it's a Windows server), I got AV for it. Given that I do very little with it as a logged-in user (I use it as a web server), bar install my own software ...
1
vote
1answer
607 views

Mod_security2 and clamav to catch malicious files on upload

Is there a clear documentation to describe the solution? It's very common and also necessary.
1
vote
2answers
3k views

Group policy logon script copies files to client PC but does not execute exe

We are trying to copy 3 files from our domain controller to a user PC and have it execute from a .bat file when a user logs in via Active Directory. When we associate the .bat file to a user in AD ...
1
vote
1answer
581 views

Troubleshooting I/O latency possibly caused by file system driver

I have a SQL Server instance (SQL Server 2008 R2, Windows 2008 R2) that complains, for very short, random periods of about 15-20 seconds, that some of its I/O requests are taking longer than 15 ...
0
votes
3answers
1k views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
1
vote
1answer
873 views

Rkhunter triggered last night warning for a possible infection. What next?

Last night rkhunter triggered with the following warnings: [04:10:23] Warning: Network TCP port 32982 is being used by /usr/lib/apache2/mpm-prefork/apache2. Possible rootkit: Solaris Wanuk ...
-1
votes
1answer
60 views

Used malwarebytes now i have missing .dlls [duplicate]

I did a maleware search and got rid of few trogans but now I kep getting messages like error in C:\documents and settings\lindam\application\ntcdsr.dll miss entry c:\documents and ...