Antivirus is software used to prevent, detect and remove malware.

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

Eset Cluster, What does it do? [on hold]

I recently setup eset for Windows server on 2 of my DCs and 1 File Server. I see in the setup tab that there is a cluster feature. Im having trouble understanding what this does. Is it just to share ...
0
votes
2answers
28 views

Ransomware infection: What to do [duplicate]

t seems that somehow our domain computers have been infected by rasomware, turning files into encrypted files ending with .crypted. Lots of file have been changed and we do have back up. At the same ...
3
votes
1answer
68 views

How can I get Windows to forget it had antivirus installed?

We purchased a networking and software solution for PCI compliance: TrustWave. We started to install the antivirus but realized that it was not required on the machines it was being installed on and ...
-2
votes
0answers
26 views

Which type of virus/malware is file with extension .pdf.bart.zip? [duplicate]

I had K7 antivirus still my machine got infected with some virus and all the documents are encrypted with some file extensions and passwords .bart.zip (and hidden) Which type of virus is file with ...
0
votes
0answers
11 views

Installing F-Secure with amavis on fedora

I've installed the downloadable trial version of F-Secure for Linux (installed on fedora) and it appears to be running properly. However, amavis doesn't seem to be able to control it. Jun 22 22:17:56 ...
0
votes
1answer
45 views

How to diagnose process at 100% CPU without being able to shell in?

Given an Ubuntu 14.04 server setup on a popular VPS provider hosting a single website with Nginx, Apache and WordPress / PHP, after starting the server it works fine for a while. Days later the VPS ...
9
votes
4answers
330 views

Do I need an antivirus program in each virtual machine?

I have a 2012 R2 Hyper-V host running System center endpoint protection. There are two virtual windows servers being hosted by it. I have all .vhdx drives in a folder on d:/server/ Can I trust the ...
1
vote
0answers
32 views

How to fix erroneous virus detection?

We make free software available on our web site. A few years ago, one of the virus scanners started complaining about some of our executables. We rebuilt everything from source code, verified things ...
1
vote
1answer
60 views

PSEXEC - The system cannot find the path specified

I am trying to initiate a Endpoint protection scan on a network share. I found that I need to utilize PSEXEC to complete this but it is having problems connecting to the share. I mapped the drive ...
0
votes
2answers
118 views

Gateway Anti-Virus vs Desktop Anti-Virus

I need your help with a question on Gateway Anti-Virus and Desktop/Server Anti-virus. The example I have is the following: You have a network of 50 machines (Desktops/Servers) which includes a ...
0
votes
0answers
35 views

Symantec Mail Security 6.5 for Exchange 2003 - snowshoe attacks with zip containers and js included payload (possibly Locky)

For a couple of days now a small number of mails that contain zip attachment with single js file inside bypasses content filtering on Symantec's Mail Security 6.5 and unrepairable rules.. Mail ends ...
0
votes
0answers
15 views

How to find server hacker [duplicate]

I have WHM CPanel and cxs plugin installed to scan for malicious scripts. Today I just got notified that a file has been uploaded to my server: Scanning web upload script file... Time ...
2
votes
2answers
303 views

how did ransomware delete shadowcopies on file server

We had a PC infected with a Ransomware Trojan RANSOM_CRYPTESLA.AC that encrypted a bunch of files on a network drive. We isolated the PC and just restored from backup. One of the things that happened ...
1
vote
0answers
66 views

Is it possible to check the progress of of a currently running clamAV scan?

I have searched around but not found a possible solution to this so far. I have an ongoing scan which I thought would've been finished at certain time, but unfortunately it has not. So I am wondering ...
2
votes
1answer
73 views

Fastest triggering of realtime anti virus scan

I have the problem, that in each backup of my mail system (File based archive on Windows Server 2012 R2), errors occur while backing up virus-infected e-mail attachment files. This is caused by the ...
1
vote
1answer
26 views

Best client server protection [closed]

I have around 80 laptops connected to Active Directory server.(Windows Server 2008 r2). Currently all the laptops have Avast free antivirus on them. Is there any way I can check for unprotected ...
1
vote
1answer
175 views

Microsoft Security Essentials says phantomjs for Windows has Varpes.M!plock virus

I can scan the zip file phantomjs-2.1.1-windows.zip, and it does not remove anything. But once I unzip the exe, Security Essentials remove the phantomjs.exe. The zip has the correct MD5 checksum. Any ...
0
votes
0answers
12 views

How to script install of Sophisticated Anti-virus on Linux

Following the Linux start-up guide from Sophos, there is an option to create a deployment package using mkinstpkg. The install.sh script accepts command line arguments in an installOptions file and ...
0
votes
1answer
33 views

AV CLI Scanner for Linux [closed]

I need an Anti Virus CLI Scanner for a standalone server (without internet access). OS is RHEL 7, but it must be able to scan windows file systems (for a windows viruses). I'm using a ClamAV, but I ...
1
vote
0answers
19 views

Trend Smart Scan server updates thrash the disk

Every 2 hours, Trend Worry Free business updates Smart Scan. This process requires Trend to thrash through 6 gigabytes of data - this causes two issues The file cache, full of LOB data, is lost and ...
0
votes
1answer
121 views

Remove McAfee branding from Windows login

McAfee Enterprise plasters its brand over everything on the PC. Everything. The latest is that since installing disk encryption, the McAfee logo is placed over the user account picture on the ...
1
vote
1answer
50 views

Wordpress Anti Virus exclusions list

Problem background: I am contractually bound to install a system Anti Virus solution on every host. For this product I am running Linux (Red hat derived). These instances are hosting Apache/PHP ...
0
votes
1answer
98 views

How to filter JS:ScriptIP-INF (TRJ) in BBClone Webstatistic

I`m using the webstatistic bbclone on my server. In the last month my virus scanner sometimes blocks the details page. it displays the detection of JS:ScriptIP-INF (TRJ) on my bblone. But I ...
1
vote
0answers
62 views

How do you clamscan a file if it doesnt have an extension in its name? [closed]

I'm trying to use clamscan on linux debian, but it doesn't recognize the files. My files don't have extension. Example: clamscan --max-filesize=10000 /var/www/otherfolder/files/7e/...
1
vote
1answer
596 views

How can I scan files (or data streams) for virus/malware before uploading them into the server and database?

How can I scan an incoming file upload (or a datastream) into a webserver and database for virus/malware? I know how (using the excellent Clam) to scan things after they have been uploaded, but I ...
0
votes
2answers
214 views

Ads by jabuticaba in all browsers

Recently we got a user who had some malware on his machine -- we've run our McAfee VirusScan Enterprise software, malware bytes anti-malware, combo-fix, adwcleaner and hijack this just to name a few ...
0
votes
2answers
477 views

How can I check who created a file on server?

Looking through server logs I've noticed some mailicious PHP files hidden among WP and Joomla folders and I'm wondering how they got on the server. Is there a way to review that? It's a shared hosting ...
1
vote
0answers
106 views

Web sites freeze after clicking link - unexplainable ACK packet

We have a sporadic problem accessing some internal links on websites. (Windows Firefox, Internet Explorer, Chrome) Behaviour On first clicking a link, the browser will load infinitely. The second ...
0
votes
2answers
3k views

Is there a quick & easy solution to protect server 2012 against malware?

For a Windows Server 2012 Standard GUI version to support a small IDE Getting malware protection on my 1st server has become a much bigger problem than I imagined it would. My research covered a lot ...
0
votes
1answer
93 views

Setting affinity for virus protection on workstations - best practice?

Despite the modern virus protection is based on prevention by scanning network traffic and by real-time protection, many companies still have policies, that full scans must be performed regularly. ...
0
votes
1answer
62 views

SCEP: imitate potential threat in both live and regular scanner to inspect logs

I am doing some powershell stuff to parse a few logs at work. I would also like to collect some information from the SCEP logs. I find the amount of logs available as well as the different locations ...
3
votes
0answers
99 views

Linux Malware Detection Monitoring: Clean files after hit

I'm using LMD ("Maldet") for scanning a web server with different projects. For this purpose I'm using the inotify-monitoring. Well, the inotify-log shows, that the modified files are noticed, but I ...
0
votes
1answer
641 views

How to install AV on existing Azure VM using agent tools?

If I already deployed a VM, how can I use the VM agent to install an antivirus software from the Azure marketplace (i.e. McAfee)? There must be some Powershell command or something but everything I've ...
1
vote
1answer
484 views

Block attachment files without extensions in Postfix via mime_header_checks?

We know how to reject executables and other potentially dangerous file extensions via mime_header_checks directive: mime_header_checks = regexp:/etc/postfix/mime_header_checks (main.cf) /name=[^>...
2
votes
0answers
86 views

How do I restore 1/2 of all files in a VSS image? aka Previous Version in bulk?

Suppose I have many files that were virus infected in bulk. It isn't the entire drive, but 1/2 of it. I don't want to right click each folder and restore a previous version. Is there a way to do ...
1
vote
2answers
77 views

Why is this server generating outbound IRC connections? [duplicate]

I noticed last night whilst checking our active sessions list on our firewall for something else, that a server was generating outbound IRC connections. Last night there was around 60 connections but ...
1
vote
1answer
51 views

How can a PC be protected from malware without locally installed software?

I'm looking to find a way to protect PCs, without requiring locally installed software. I thought about a device such as a Watchguard that has UTM facilities and make it a transparent proxy, in ...
1
vote
0answers
64 views

Viruses bypassing Trend ScanMail - Could it be a licensing issue or a mime issue

I have some SCR viruses being sent in a ZIP file that are bypassing the Trend Scanner on Exchange 2010 SP1 CU7. There are a few reasons I can think this would be occurring The email message has ...
36
votes
10answers
5k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
1answer
995 views

Ports needed for IP Subnet discovery Kaspersky Security Center 10

I'm trying to discover computers based on IP subnets. The administration server is not part of the same workgroup or active-directory as the clients, so this is the only way to do it. I can ...
0
votes
1answer
184 views

Microsoft AV - Do Exclusions Apply to Full Scans or Realtime Protection Only?

The vendor for a new system we're setting up sent us specs for their recommended A/V exclusions. They recommend that we exclude .PDF, .JAR, .BIN, and .DAT files (among others) from real-time scanning....
3
votes
1answer
2k views

SCCM 2012 Software Update role - Can I still use WSUS?

I manage a network of about 1200 workstations and about 200 or so servers. We have migrated away from McAfee in favor of System Center Endpoint Protection for our corporate Anti-Malware solution. ...
-1
votes
1answer
505 views

Getting rid of Trojan on Debian Server [duplicate]

-------- EDIT --------- I do not agree that this is a duplicate of the linked question. I know that the correct way to deal with this is to wipe and reinstall the server. However, i am interested in ...
-1
votes
2answers
2k views

Check if an Antivirus is installed and enabled

I work in an entreprise with a lot of pcs > 1000 with os windows xp and 7 and symantec antivirus installed on it the probleme is : -how to check if the antivirus is installed on the computers -and ...
0
votes
0answers
91 views

Inter-VLAN Malicious Code Scanning

I am trying to find an inbuilt solution on a Cisco Catayst 3750X Switch to scan all traffic routed from one VLAN to another for malicious code. The situation is that we currently have a development ...
1
vote
1answer
2k views

MsMpEng.exe high CPU usage on Windows Server 2012

We have a Windows Server 2012 installation that we use as an internal web server. Most HTTP requests are very slow on this machine (about 15 seconds for a simple ASP.NET WebAPI request). We noticed ...
0
votes
1answer
1k views

Server 2008 R2 AntiVirus & remote desktop connections [closed]

I use a Server 2008 R2 Enterprise machine which is used solely to allow my customers to remotely connect using remote desktop connection. When they log in, the application is started and when the ...
0
votes
1answer
1k views

Kaspersky blocking server's ip address

I am consistently getting the error that TCP from "server ip" to local port 135 Denied: Intrusion.Win.DCOM.exploit within the kaspersky small office security suite and this disconnects my users ...
1
vote
0answers
77 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
1answer
366 views

Performance and Microsoft Security Essentials Real Time Protection on Server 2008

Is it smart to turn off real time protection for Microsoft Security Essentials on Server 2008? Will this help with performance? I have it running a scan every night.