Antivirus is software used to prevent, detect and remove malware.
-1
votes
1answer
16 views
Using CLAMAV how to scan only a file spec at a time [closed]
Using CLAMAV
how to scan only a file spec at a time
for example.
scan only -> abc*.ppt
or scan only *.scr
or scan *.exe and *.com at the same time
-1
votes
0answers
26 views
Can I block a request based on HTTP-VIA and HTTP_X_FORWARDED_FOR?
I have the problem where a specific anti-virus is following all my tracking URLs in emails. The Logging of these requests based on their IP's result in two extra headers being passed through:
...
0
votes
2answers
31 views
Do these files look like virus remnants?
We've been having Backup Exec issues related to a corrupt file within SYSVOL on an SBS 2008 server. An anti-virus scan removed a file (the same one BE was failing on) from within the scripts folder as ...
-3
votes
0answers
23 views
Server infected with Backdoor:Win32/Caphaw.D virus, need script to clear shortcuts [duplicate]
Ask here Server infected with Backdoor:Win32/Caphaw.D virus
The virsu hiding all of the folders and replace it with shortcut.
These are the setting in shortcuts.
C:\Windows\system32\cmd.exe /C start ...
-1
votes
1answer
53 views
Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]
The virsu hiding all of the folders and replace it with shortcut.
These are the setting in shortcuts.
C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
0
votes
0answers
17 views
Trojan hiding in System process [duplicate]
I have a virus/trojan/malware on my pc that is constantly scanning random hosts on the internet on port 137/udp. Probably just to see if it can find any hosts listening on NetBios. I scanned the ...
1
vote
1answer
68 views
Is AV only needed because of human users?
I rent a VPS, and as an a kneejerk reaction (it's a Windows server), I got AV for it.
Given that I do very little with it as a logged-in user (I use it as a web server), bar install my own software ...
1
vote
1answer
81 views
Troubleshooting I/O latency possibly caused by file system driver
I have a SQL Server instance (SQL Server 2008 R2, Windows 2008 R2) that complains, for very short, random periods of about 15-20 seconds, that some of its I/O requests are taking longer than 15 ...
0
votes
3answers
78 views
How should I test Clam Anti-Virus?
I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly.
How should I do this in a safe and controlled way?
1
vote
1answer
96 views
Rkhunter triggered last night warning for a possible infection. What next?
Last night rkhunter triggered with the following warnings:
[04:10:23] Warning: Network TCP port 32982 is being used by /usr/lib/apache2/mpm-prefork/apache2. Possible rootkit: Solaris Wanuk
...
-1
votes
1answer
41 views
Used malwarebytes now i have missing .dlls [duplicate]
I did a maleware search and got rid of few trogans but now I kep getting messages like error in C:\documents and settings\lindam\application\ntcdsr.dll miss entry
c:\documents and ...
0
votes
1answer
73 views
How to scan only last 24 hours files with clamav
I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours.
...
1
vote
0answers
94 views
Postfix, Attachments and Virus scanning, difference between Milters AND Filters? Efficiency and Performance
I'm re-implementing an overloaded Postfix cluster, which beyond its many problems, has major efficiency concerns. The cluster is a dedicated MX Gateway, so mailboxes are not a consideration. ...
0
votes
1answer
36 views
Updating Mcafee Group Shield on Exchange Server
So I don't actually have a problem yet, but I might.
You see my fathers company have 10 computers and an exchange server with Mcafee Group Shield.
lately they've had issues with mails from customers ...
0
votes
0answers
110 views
Enabling vscan on Netapp Filer
I want to enable vscan on my Netapp Filers. I have 2 filers dealing with different type of user data. I am presently using Sophos Endpoint Security v10 on my windows based machines and managing the ...
-3
votes
1answer
84 views
I need best antivirus and internet security for Small Workgroup Network ( 6 Pc's with windows xp in the network, no server ) [closed]
I have 6 Pc's with Windows Xp and connected in workgroup, there is no server,
and shareing of files, printer and internet using Small ADSL router
Now i want antivirus and internet security for ...
3
votes
1answer
202 views
Kaspersky processing error Explorer.exe (recycle bin)
I get daily critical errors from Kaspersky involving Explorer.exe... The file in question is almost always in the Recycle Bin, or something on the desktop.
Here is an example error detail:
Event ...
0
votes
0answers
256 views
How do I run ClamAV on Windows Server efficently? [closed]
I'm hosting a WordPress site on Windows Server 2008 RS, and I want to scan all files that are uploaded by users for viruses using this plugin: http://wordpress.org/extend/plugins/upload-scanner/.
I'm ...
0
votes
0answers
124 views
Clamfs+Samba blocking access when clamd is scanning
I am using Debian 6.0.6. I have installed clamfs, which mounts /var/lib/samba/shared_dir as /clamfs/shared_volume.
That shared_volume is being "shared" to Microsoft Windows clients. Everything is ...
-1
votes
1answer
74 views
Firewall Deep Inspection Updates and Antivirus Subscription, worth it? [closed]
I realize that this is a subjective question, but I'm trying to get some experiences
We have Juniper firewalls in our organization (SSG-320M, SSG-5, and some old NS-5GT). We have the option of a ...
1
vote
1answer
389 views
clamd says socket in use by another process but I can't find one
I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get
ERROR: ...
4
votes
3answers
501 views
Easiest way to get MS Security Essentials to run for people who turn off their computers?
All the employees at my work shutdown their Windows 7 computers (iMacs running BootCamp) when they leave work. This ends up with people having MS Security Essentials say their computer is at risk, due ...
2
votes
1answer
51 views
What are the impacts of running VirusScan on a Linux server?
I am asked in a bid for tender to assert that my software will cohabit without a problem with VirusScan (v6.0.3) under Linux.
My software is a web application, running under tomcat.
It can create ...
7
votes
3answers
400 views
Do you run antivirus in mail server?
Considering a normal e-mail volume (I don't know how can I define that) of 10000 users in a mail server does it make sense to scan emails for viruses?
I guess it should affect the server load but in ...
-4
votes
3answers
202 views
Need Anti-Virus software for CentOS [closed]
We are using CentOS with parallel plesk server for our web application. User can upload their files to server. For security reason I need a anti-virus software scanning on all uploaded files. So ...
0
votes
1answer
110 views
How do I set Microsoft Security Essentials to always ask before taking any action? [closed]
How do I set the antivirus known as Microsoft Security Essentials to always ask before taking any action?
I'm paranoid after dealing with Norton's ridiculous false positive rate. I don't need any AV ...
0
votes
5answers
457 views
antivirus gateway such as sonicwall any use?
We have users who frequently get virus/spyware such as fake antivirus spyware on their win7 machines. They have admin access to their machines, and that's not going to change.
Desktop installed ...
-1
votes
1answer
652 views
Anti-Malware Antivirus for Linux Web Server? [closed]
Does anyone have experience running anti-virus software on a Linux web server, especially CentOS, and what do you recommend? I'm interested in putting it on a web server we have as one more method ...
3
votes
2answers
702 views
Does System Center 2012 Endpoint Protection require the use of Configuration Manager?
We have a relatively small organization (~15 users), and have used the ForeFront EndPoint Protection 2010 desktop client without the use of central management, like Configuration Manager.
Now that ...
-3
votes
2answers
432 views
Rootkit scanning
Are there any good services or ways to scan for rootkits and backdoors?
I know there are rkhunter and chkrootkit but are they even ideal anymore? They never seem updated and look more like they were ...
0
votes
0answers
162 views
Allow a managed SEP client modify its scan schedule?
Is there a way for a Symantec Endpoint Protection (SEP) administrator to configure managed clients to be allowed to configure their weekly scheduled scan?
Users can modify the schedule in the ...
19
votes
8answers
2k views
How to prevent zero day attacks
Traditionally, all anti-virus programs and IPS systems work using signature-based techniques. However, this doesn't help much to prevent zero-day attacks.
Therefore, what can be done to prevent ...
1
vote
0answers
56 views
cgpav not scanning in CommuniGate Pro
I have setup cgpav and cgpsa. Spamassassin works fine - the cgpav filter seems to run, cgpro log files just show OK when it receives an email with a known virus (eicar test virus), however, if run ...
0
votes
1answer
484 views
Symantec AntiVirus virus definitions file version date is not updating
I'm keeping tabs on a remote sever that is running Symantec AntiVirus Corporate Server 10.1.7.7001. About a month ago, the Virus Definition File version date stopped updating and hasn't updated since ...
1
vote
3answers
385 views
Recurring virus infection on a domain workstation
One of our users is having a recurring problem with a virus. It has happened to this user on two different machines, in each instance infecting the same program with the same virus.
Malware bytes ...
0
votes
1answer
115 views
Sophos Enterprise Console 4.5, Mac Client 7 Not Auto-Populating SEC Info
I have Sophos Endpoint Security and Control, which includes Sophos Enterprise Console (SEC). I'm currently running version 4.5 of SEC, which is an older version. I subscribe to Mac updates, and SEC ...
4
votes
4answers
344 views
How to audit security on Remote Employees' PCs?
We have several remote developers who are working on our code and have access to our FTP server. Recently someone copied an infected file to the FTP server and virus spread throughout the whole FTP ...
3
votes
3answers
285 views
Antivirus Appliances instead of per PC software?
Is there such thing as an Antivirus appliance that would sit at the top of your network and identify/block threats? I'm just thinking that it would be nice, if all the traffic is being scanned by the ...
0
votes
1answer
248 views
Kaspersky slows down the clients. How do i find the real cause?
At my work, we have 15 client pc's with Windows 7. As it turned out. Kaspersky slows down each pc. The Problem started couple days ago. And for example, when i click on Computer -> properties -> ...
0
votes
1answer
63 views
Good resource for evaluting AV and anti Malware software?
I am looking for good resources to use to compare the effectiveness of various antivirus/antimalware software solutions. In particular, I am comparing Windows Security Essentials against Symantec ...
1
vote
1answer
65 views
Confluence - Looking for user experiences running AntiVirus to Scan Attachments
We're exploring confluence server configurations and want to use AV software to scan attachments.
I'm looking for advice/experience in setting up AV software for that purpose.
Example questions I ...
0
votes
1answer
120 views
Sophos what is the current client definition?
I'm unfamiliar with Sophos Endpoint Security and have taken over a client who is using version 9.5. The Sophos server appears to be updating without issues, but the clients are unable to receive the ...
-2
votes
1answer
37 views
Need advice on Windows Server 2003 security for website use [closed]
I hope some really cool experts can share their knowledge with me.
We have a dedicated server to host our online store
Runs SQL 2005
No uploading by web viewers, strictly to sell goods
Server ...
-1
votes
1answer
138 views
Total disk use of various antivirus solutions (not just installations) [closed]
I'm running a Windows XP VM with very limited disk space. But due to network connection it requires a real-time virus protection. A decent one.
Microsoft Security Essentials uses only about 16MB in ...
0
votes
0answers
325 views
How do I check to see if a Forefront client has checked in with the server?
I staged a system and installed the package for ForeFront client security (1.5.1996.0) which I believe to have been created on our local server. I assume it should automatically point back to it and ...
0
votes
1answer
80 views
File corrupted by some tools (probably virus or antivirus)- does the pattern indicate any known corruptions?
As part of our software we install postgres(windows). In one of the customer sites, a set of files got corrupted. All files were part of timezone information(postgres/share/timezone). They are some ...
-1
votes
1answer
152 views
Eset antivirus 5 license vs ver 5? [duplicate]
Possible Duplicate:
Can you help me with my software licensing question?
I have already purchased antivirus 4 (eset) .
Is this license valid to eset antivirus 5 ?
Do I need to purchase ...
3
votes
1answer
174 views
Disable Security Center on SYSPREP-ed Windows XP
I am deploying Windows XP SP3 images in a stand-alone environment using SYSPREP. I am updating an existing image with patches, drivers, etc. Although my first images never launched Windows Security ...
0
votes
1answer
83 views
How do I specify clamd's IP address when using clamdscan?
I set up a separate host for clamd to handle virus-scanning, and I want to test it before putting it in production. Now, while MailScanner's configuration for remote clamd is clear and simple, I can't ...
2
votes
1answer
178 views
McAfee VirusScan Enterprise is not retaining Access Protection Rules
McAfee VirusScan is not retaining settings that are specified in the client for more than roughly five minutes, for example, I have enabled prevent mass mailing worm but after a short time has passed ...
