Antivirus is software used to prevent, detect and remove malware.

learn more… | top users | synonyms (1)

32
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
1answer
65 views

Ports needed for IP Subnet discovery Kaspersky Security Center 10

I'm trying to discover computers based on IP subnets. The administration server is not part of the same workgroup or active-directory as the clients, so this is the only way to do it. I can ...
0
votes
0answers
23 views

Microsoft AV - Do Exclusions Apply to Full Scans or Realtime Protection Only?

The vendor for a new system we're setting up sent us specs for their recommended A/V exclusions. They recommend that we exclude .PDF, .JAR, .BIN, and .DAT files (among others) from real-time ...
2
votes
1answer
107 views

SCCM 2012 Software Update role - Can I still use WSUS?

I manage a network of about 1200 workstations and about 200 or so servers. We have migrated away from McAfee in favor of System Center Endpoint Protection for our corporate Anti-Malware solution. ...
-1
votes
1answer
438 views

Getting rid of Trojan on Debian Server [duplicate]

-------- EDIT --------- I do not agree that this is a duplicate of the linked question. I know that the correct way to deal with this is to wipe and reinstall the server. However, i am interested in ...
-2
votes
2answers
87 views

Check if an Antivirus is installed and enabled

I work in an entreprise with a lot of pcs > 1000 with os windows xp and 7 and symantec antivirus installed on it the probleme is : -how to check if the antivirus is installed on the computers -and ...
0
votes
0answers
56 views

Inter-VLAN Malicious Code Scanning

I am trying to find an inbuilt solution on a Cisco Catayst 3750X Switch to scan all traffic routed from one VLAN to another for malicious code. The situation is that we currently have a development ...
0
votes
1answer
415 views

Server 2008 R2 AntiVirus & remote desktop connections [closed]

I use a Server 2008 R2 Enterprise machine which is used solely to allow my customers to remotely connect using remote desktop connection. When they log in, the application is started and when the ...
0
votes
1answer
537 views

Kaspersky blocking server's ip address

I am consistently getting the error that TCP from "server ip" to local port 135 Denied: Intrusion.Win.DCOM.exploit within the kaspersky small office security suite and this disconnects my users ...
1
vote
0answers
52 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
1answer
130 views

Performance and Microsoft Security Essentials Real Time Protection on Server 2008

Is it smart to turn off real time protection for Microsoft Security Essentials on Server 2008? Will this help with performance? I have it running a scan every night.
1
vote
1answer
57 views

Defending PCs against APTs

We are evaluating the security of the PCs used by people with access to high-value company documents. At the moment they are kept patched and run a virus checker, but we are concerned about zero-day ...
0
votes
0answers
49 views

Windows Share Meltdown, Unexplainable

I am having precisely the exact symptoms on my server as is described in this article. This includes statements that the specified network name is no longer available and RPC Server is too busy ...
-1
votes
1answer
153 views

Vipre antivirus on virtualized server 2012 [closed]

Can anyone confirm that Vipre ('VIPRE Antivirus Business') runs ok in a 2012 server environment? This is only for a simple single server solution, no need for managing workstations etc. Feedback ...
0
votes
1answer
52 views

Which is wrong: emailing links that only work once, or a virus scanner that visits links? [closed]

I ran into an interesting bug today. I was trying to update my address on a mailing list, and it sent an email to the new address, with a unique URL that I was supposed to visit to confirm my ...
0
votes
1answer
82 views

Strange ports on default install of W7

I have a base new install of windows 7, and when I went to look for something else I saw the attached netstat output. What concerns me is that this is Windows + Truecrypt + drivers, nothing else ...
1
vote
1answer
87 views

Protecting Backups from Viruses

Currently we are using ReadyNAS RN102 by NETGEAR to hold all our images from all our machines. My question is can viruses expand from the machines and infect the NAS drive and the backups? We are ...
1
vote
1answer
2k views

Microsoft Security Essentials: MpCmdRun.exe -SignatureUpdate -unc switch does not work

Looking here I can see extracting a downloaded mpam-fe.exe and copying the files to a shared folder should allow me to run the following command from an MSE client so it will pull down the updates ...
3
votes
2answers
140 views

Windows updates, Anti-virus updates for Air gapped hosts

I just took over as an admin for a network that uses corporate imaged hosts, to manage various special purpose machines. These hosts directly connect to the equipment they are managing via Serial or ...
-1
votes
1answer
121 views

Symantec Endpoint Protection virus definition files

Are Symantec Endpoint Protection virus definition files protected by "Protect Symantec security software from being tampered with or shutdown" option? in other words I want to know if virus ...
0
votes
2answers
385 views

Drowning in Norton Endpoint Protection virus definition files

I've been noticing that my 40 GB C: drive on the Windows 2008 Server keeps getting filled up. After investigation I found that this is a known issue with SEP described in article TECH180056 on ...
1
vote
2answers
2k views

Kaspersky blocked RDC on Windows - how to fix?

I installed Kaspersky Endpoint security, but as soon as the installer finished, my remote desktop connection broke and I wasn't able to login anymore. Seems that Kaspersky firewall blocks RDC ports ...
0
votes
1answer
101 views

Does anybody actually run antivirus software on linux servers? [closed]

Running about 10 servers all CentOS 6.3. Some servers are web role (nginx, php-fpm, node.js), others are database (MySQL, MongoDB). Do people actually run antivirus software on their linux servers? ...
-5
votes
1answer
54 views

Why is the Anti Virus Definition file only 200MBs? [closed]

So I downloaded a virus definition file for symantec endpoint protection. We regularly update our client's closed network anti virus using these files once every 6 months. The files are of '.JDB' ...
0
votes
2answers
40 views

Do these files look like virus remnants?

We've been having Backup Exec issues related to a corrupt file within SYSVOL on an SBS 2008 server. An anti-virus scan removed a file (the same one BE was failing on) from within the scripts folder as ...
-1
votes
1answer
583 views

Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]

The virsu hiding all of the folders and replace it with shortcut. These are the setting in shortcuts. C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
1
vote
1answer
77 views

Is AV only needed because of human users?

I rent a VPS, and as an a kneejerk reaction (it's a Windows server), I got AV for it. Given that I do very little with it as a logged-in user (I use it as a web server), bar install my own software ...
1
vote
1answer
445 views

Troubleshooting I/O latency possibly caused by file system driver

I have a SQL Server instance (SQL Server 2008 R2, Windows 2008 R2) that complains, for very short, random periods of about 15-20 seconds, that some of its I/O requests are taking longer than 15 ...
0
votes
3answers
943 views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
1
vote
1answer
694 views

Rkhunter triggered last night warning for a possible infection. What next?

Last night rkhunter triggered with the following warnings: [04:10:23] Warning: Network TCP port 32982 is being used by /usr/lib/apache2/mpm-prefork/apache2. Possible rootkit: Solaris Wanuk ...
-1
votes
1answer
56 views

Used malwarebytes now i have missing .dlls [duplicate]

I did a maleware search and got rid of few trogans but now I kep getting messages like error in C:\documents and settings\lindam\application\ntcdsr.dll miss entry c:\documents and ...
0
votes
2answers
498 views

How to scan only last 24 hours files with clamav

I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours. ...
0
votes
1answer
85 views

Updating Mcafee Group Shield on Exchange Server

So I don't actually have a problem yet, but I might. You see my fathers company have 10 computers and an exchange server with Mcafee Group Shield. lately they've had issues with mails from customers ...
3
votes
1answer
509 views

Kaspersky processing error Explorer.exe (recycle bin)

I get daily critical errors from Kaspersky involving Explorer.exe... The file in question is almost always in the Recycle Bin, or something on the desktop. Here is an example error detail: Event ...
-1
votes
1answer
160 views

Firewall Deep Inspection Updates and Antivirus Subscription, worth it? [closed]

I realize that this is a subjective question, but I'm trying to get some experiences We have Juniper firewalls in our organization (SSG-320M, SSG-5, and some old NS-5GT). We have the option of a ...
1
vote
1answer
1k views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: ...
4
votes
3answers
998 views

Easiest way to get MS Security Essentials to run for people who turn off their computers?

All the employees at my work shutdown their Windows 7 computers (iMacs running BootCamp) when they leave work. This ends up with people having MS Security Essentials say their computer is at risk, due ...
2
votes
1answer
66 views

What are the impacts of running VirusScan on a Linux server?

I am asked in a bid for tender to assert that my software will cohabit without a problem with VirusScan (v6.0.3) under Linux. My software is a web application, running under tomcat. It can create ...
7
votes
3answers
583 views

Do you run antivirus in mail server?

Considering a normal e-mail volume (I don't know how can I define that) of 10000 users in a mail server does it make sense to scan emails for viruses? I guess it should affect the server load but in ...
-4
votes
3answers
377 views

Need Anti-Virus software for CentOS [closed]

We are using CentOS with parallel plesk server for our web application. User can upload their files to server. For security reason I need a anti-virus software scanning on all uploaded files. So ...
0
votes
1answer
171 views

How do I set Microsoft Security Essentials to always ask before taking any action? [closed]

How do I set the antivirus known as Microsoft Security Essentials to always ask before taking any action? I'm paranoid after dealing with Norton's ridiculous false positive rate. I don't need any AV ...
0
votes
5answers
1k views

antivirus gateway such as sonicwall any use?

We have users who frequently get virus/spyware such as fake antivirus spyware on their win7 machines. They have admin access to their machines, and that's not going to change. Desktop installed ...
0
votes
1answer
1k views

Anti-Malware Antivirus for Linux Web Server? [closed]

Does anyone have experience running anti-virus software on a Linux web server, especially CentOS, and what do you recommend? I'm interested in putting it on a web server we have as one more method ...
3
votes
2answers
999 views

Does System Center 2012 Endpoint Protection require the use of Configuration Manager?

We have a relatively small organization (~15 users), and have used the ForeFront EndPoint Protection 2010 desktop client without the use of central management, like Configuration Manager. Now that ...
-3
votes
2answers
667 views

Rootkit scanning

Are there any good services or ways to scan for rootkits and backdoors? I know there are rkhunter and chkrootkit but are they even ideal anymore? They never seem updated and look more like they were ...
19
votes
8answers
2k views

How to prevent zero day attacks

Traditionally, all anti-virus programs and IPS systems work using signature-based techniques. However, this doesn't help much to prevent zero-day attacks. Therefore, what can be done to prevent ...
1
vote
0answers
82 views

cgpav not scanning in CommuniGate Pro

I have setup cgpav and cgpsa. Spamassassin works fine - the cgpav filter seems to run, cgpro log files just show OK when it receives an email with a known virus (eicar test virus), however, if run ...
0
votes
1answer
1k views

Symantec AntiVirus virus definitions file version date is not updating

I'm keeping tabs on a remote sever that is running Symantec AntiVirus Corporate Server 10.1.7.7001. About a month ago, the Virus Definition File version date stopped updating and hasn't updated since ...
1
vote
3answers
867 views

Recurring virus infection on a domain workstation

One of our users is having a recurring problem with a virus. It has happened to this user on two different machines, in each instance infecting the same program with the same virus. Malware bytes ...
0
votes
1answer
202 views

Sophos Enterprise Console 4.5, Mac Client 7 Not Auto-Populating SEC Info

I have Sophos Endpoint Security and Control, which includes Sophos Enterprise Console (SEC). I'm currently running version 4.5 of SEC, which is an older version. I subscribe to Mac updates, and SEC ...