Antivirus is software used to prevent, detect and remove malware.

learn more… | top users | synonyms (1)

0
votes
1answer
148 views

Server 2008 R2 AntiVirus & remote desktop connections [closed]

I use a Server 2008 R2 Enterprise machine which is used solely to allow my customers to remotely connect using remote desktop connection. When they log in, the application is started and when the ...
0
votes
1answer
246 views

Kaspersky blocking server's ip address

I am consistently getting the error that TCP from "server ip" to local port 135 Denied: Intrusion.Win.DCOM.exploit within the kaspersky small office security suite and this disconnects my users ...
1
vote
0answers
41 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
1answer
63 views

Performance and Microsoft Security Essentials Real Time Protection on Server 2008

Is it smart to turn off real time protection for Microsoft Security Essentials on Server 2008? Will this help with performance? I have it running a scan every night.
1
vote
1answer
53 views

Defending PCs against APTs

We are evaluating the security of the PCs used by people with access to high-value company documents. At the moment they are kept patched and run a virus checker, but we are concerned about zero-day ...
0
votes
0answers
48 views

Windows Share Meltdown, Unexplainable

I am having precisely the exact symptoms on my server as is described in this article. This includes statements that the specified network name is no longer available and RPC Server is too busy ...
-1
votes
1answer
77 views

Vipre antivirus on virtualized server 2012 [closed]

Can anyone confirm that Vipre ('VIPRE Antivirus Business') runs ok in a 2012 server environment? This is only for a simple single server solution, no need for managing workstations etc. Feedback ...
0
votes
1answer
50 views

Which is wrong: emailing links that only work once, or a virus scanner that visits links? [closed]

I ran into an interesting bug today. I was trying to update my address on a mailing list, and it sent an email to the new address, with a unique URL that I was supposed to visit to confirm my ...
0
votes
1answer
71 views

Strange ports on default install of W7

I have a base new install of windows 7, and when I went to look for something else I saw the attached netstat output. What concerns me is that this is Windows + Truecrypt + drivers, nothing else ...
3
votes
1answer
80 views

Protecting Backups from Viruses

Currently we are using ReadyNAS RN102 by NETGEAR to hold all our images from all our machines. My question is can viruses expand from the machines and infect the NAS drive and the backups? We are ...
1
vote
1answer
1k views

Microsoft Security Essentials: MpCmdRun.exe -SignatureUpdate -unc switch does not work

Looking here I can see extracting a downloaded mpam-fe.exe and copying the files to a shared folder should allow me to run the following command from an MSE client so it will pull down the updates ...
3
votes
2answers
101 views

Windows updates, Anti-virus updates for Air gapped hosts

I just took over as an admin for a network that uses corporate imaged hosts, to manage various special purpose machines. These hosts directly connect to the equipment they are managing via Serial or ...
-1
votes
1answer
87 views

Symantec Endpoint Protection virus definition files

Are Symantec Endpoint Protection virus definition files protected by "Protect Symantec security software from being tampered with or shutdown" option? in other words I want to know if virus ...
0
votes
2answers
252 views

Drowning in Norton Endpoint Protection virus definition files

I've been noticing that my 40 GB C: drive on the Windows 2008 Server keeps getting filled up. After investigation I found that this is a known issue with SEP described in article TECH180056 on ...
1
vote
2answers
924 views

Kaspersky blocked RDC on Windows - how to fix?

I installed Kaspersky Endpoint security, but as soon as the installer finished, my remote desktop connection broke and I wasn't able to login anymore. Seems that Kaspersky firewall blocks RDC ports ...
0
votes
1answer
73 views

Does anybody actually run antivirus software on linux servers? [closed]

Running about 10 servers all CentOS 6.3. Some servers are web role (nginx, php-fpm, node.js), others are database (MySQL, MongoDB). Do people actually run antivirus software on their linux servers? ...
-5
votes
1answer
52 views

Why is the Anti Virus Definition file only 200MBs? [closed]

So I downloaded a virus definition file for symantec endpoint protection. We regularly update our client's closed network anti virus using these files once every 6 months. The files are of '.JDB' ...
0
votes
2answers
38 views

Do these files look like virus remnants?

We've been having Backup Exec issues related to a corrupt file within SYSVOL on an SBS 2008 server. An anti-virus scan removed a file (the same one BE was failing on) from within the scripts folder as ...
-1
votes
1answer
500 views

Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]

The virsu hiding all of the folders and replace it with shortcut. These are the setting in shortcuts. C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
1
vote
1answer
75 views

Is AV only needed because of human users?

I rent a VPS, and as an a kneejerk reaction (it's a Windows server), I got AV for it. Given that I do very little with it as a logged-in user (I use it as a web server), bar install my own software ...
1
vote
1answer
278 views

Troubleshooting I/O latency possibly caused by file system driver

I have a SQL Server instance (SQL Server 2008 R2, Windows 2008 R2) that complains, for very short, random periods of about 15-20 seconds, that some of its I/O requests are taking longer than 15 ...
0
votes
3answers
523 views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
1
vote
1answer
484 views

Rkhunter triggered last night warning for a possible infection. What next?

Last night rkhunter triggered with the following warnings: [04:10:23] Warning: Network TCP port 32982 is being used by /usr/lib/apache2/mpm-prefork/apache2. Possible rootkit: Solaris Wanuk ...
-1
votes
1answer
54 views

Used malwarebytes now i have missing .dlls [duplicate]

I did a maleware search and got rid of few trogans but now I kep getting messages like error in C:\documents and settings\lindam\application\ntcdsr.dll miss entry c:\documents and ...
0
votes
1answer
303 views

How to scan only last 24 hours files with clamav

I've create a bash script to scan whole server for virus via clamav. The script has been running via cron every night. Because of this I want to scan only the files that has been added last 24 hours. ...
1
vote
0answers
181 views

Postfix, Attachments and Virus scanning, difference between Milters AND Filters? Efficiency and Performance

I'm re-implementing an overloaded Postfix cluster, which beyond its many problems, has major efficiency concerns. The cluster is a dedicated MX Gateway, so mailboxes are not a consideration. ...
0
votes
1answer
67 views

Updating Mcafee Group Shield on Exchange Server

So I don't actually have a problem yet, but I might. You see my fathers company have 10 computers and an exchange server with Mcafee Group Shield. lately they've had issues with mails from customers ...
3
votes
1answer
400 views

Kaspersky processing error Explorer.exe (recycle bin)

I get daily critical errors from Kaspersky involving Explorer.exe... The file in question is almost always in the Recycle Bin, or something on the desktop. Here is an example error detail: Event ...
0
votes
0answers
233 views

Clamfs+Samba blocking access when clamd is scanning

I am using Debian 6.0.6. I have installed clamfs, which mounts /var/lib/samba/shared_dir as /clamfs/shared_volume. That shared_volume is being "shared" to Microsoft Windows clients. Everything is ...
-1
votes
1answer
135 views

Firewall Deep Inspection Updates and Antivirus Subscription, worth it? [closed]

I realize that this is a subjective question, but I'm trying to get some experiences We have Juniper firewalls in our organization (SSG-320M, SSG-5, and some old NS-5GT). We have the option of a ...
1
vote
1answer
1k views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: ...
4
votes
3answers
841 views

Easiest way to get MS Security Essentials to run for people who turn off their computers?

All the employees at my work shutdown their Windows 7 computers (iMacs running BootCamp) when they leave work. This ends up with people having MS Security Essentials say their computer is at risk, due ...
2
votes
1answer
55 views

What are the impacts of running VirusScan on a Linux server?

I am asked in a bid for tender to assert that my software will cohabit without a problem with VirusScan (v6.0.3) under Linux. My software is a web application, running under tomcat. It can create ...
7
votes
3answers
545 views

Do you run antivirus in mail server?

Considering a normal e-mail volume (I don't know how can I define that) of 10000 users in a mail server does it make sense to scan emails for viruses? I guess it should affect the server load but in ...
-4
votes
3answers
309 views

Need Anti-Virus software for CentOS [closed]

We are using CentOS with parallel plesk server for our web application. User can upload their files to server. For security reason I need a anti-virus software scanning on all uploaded files. So ...
0
votes
1answer
157 views

How do I set Microsoft Security Essentials to always ask before taking any action? [closed]

How do I set the antivirus known as Microsoft Security Essentials to always ask before taking any action? I'm paranoid after dealing with Norton's ridiculous false positive rate. I don't need any AV ...
0
votes
5answers
992 views

antivirus gateway such as sonicwall any use?

We have users who frequently get virus/spyware such as fake antivirus spyware on their win7 machines. They have admin access to their machines, and that's not going to change. Desktop installed ...
-1
votes
1answer
1k views

Anti-Malware Antivirus for Linux Web Server? [closed]

Does anyone have experience running anti-virus software on a Linux web server, especially CentOS, and what do you recommend? I'm interested in putting it on a web server we have as one more method ...
3
votes
2answers
954 views

Does System Center 2012 Endpoint Protection require the use of Configuration Manager?

We have a relatively small organization (~15 users), and have used the ForeFront EndPoint Protection 2010 desktop client without the use of central management, like Configuration Manager. Now that ...
-3
votes
2answers
621 views

Rootkit scanning

Are there any good services or ways to scan for rootkits and backdoors? I know there are rkhunter and chkrootkit but are they even ideal anymore? They never seem updated and look more like they were ...
19
votes
8answers
2k views

How to prevent zero day attacks

Traditionally, all anti-virus programs and IPS systems work using signature-based techniques. However, this doesn't help much to prevent zero-day attacks. Therefore, what can be done to prevent ...
1
vote
0answers
73 views

cgpav not scanning in CommuniGate Pro

I have setup cgpav and cgpsa. Spamassassin works fine - the cgpav filter seems to run, cgpro log files just show OK when it receives an email with a known virus (eicar test virus), however, if run ...
0
votes
1answer
1k views

Symantec AntiVirus virus definitions file version date is not updating

I'm keeping tabs on a remote sever that is running Symantec AntiVirus Corporate Server 10.1.7.7001. About a month ago, the Virus Definition File version date stopped updating and hasn't updated since ...
1
vote
3answers
712 views

Recurring virus infection on a domain workstation

One of our users is having a recurring problem with a virus. It has happened to this user on two different machines, in each instance infecting the same program with the same virus. Malware bytes ...
0
votes
1answer
180 views

Sophos Enterprise Console 4.5, Mac Client 7 Not Auto-Populating SEC Info

I have Sophos Endpoint Security and Control, which includes Sophos Enterprise Console (SEC). I'm currently running version 4.5 of SEC, which is an older version. I subscribe to Mac updates, and SEC ...
4
votes
4answers
359 views

How to audit security on Remote Employees' PCs?

We have several remote developers who are working on our code and have access to our FTP server. Recently someone copied an infected file to the FTP server and virus spread throughout the whole FTP ...
3
votes
3answers
574 views

Antivirus Appliances instead of per PC software?

Is there such thing as an Antivirus appliance that would sit at the top of your network and identify/block threats? I'm just thinking that it would be nice, if all the traffic is being scanned by the ...
0
votes
1answer
326 views

Kaspersky slows down the clients. How do i find the real cause?

At my work, we have 15 client pc's with Windows 7. As it turned out. Kaspersky slows down each pc. The Problem started couple days ago. And for example, when i click on Computer -> properties -> ...
0
votes
1answer
71 views

Good resource for evaluting AV and anti Malware software?

I am looking for good resources to use to compare the effectiveness of various antivirus/antimalware software solutions. In particular, I am comparing Windows Security Essentials against Symantec ...
2
votes
1answer
106 views

Confluence - Looking for user experiences running AntiVirus to Scan Attachments

We're exploring confluence server configurations and want to use AV software to scan attachments. I'm looking for advice/experience in setting up AV software for that purpose. Example questions I ...