Questions tagged [anti-virus]

Antivirus is software used to prevent, detect and remove malware.

Filter by
Sorted by
Tagged with
0
votes
0answers
22 views

clamav timing out when scanning stream for large file

Have a React/Django app that a small group of clients use to submit files to us. Using react-dropzone for the file upload, without any maxSize specified, so it should be react-dropzone causing the ...
-1
votes
0answers
40 views

Antivirus and Mail server in 1 server

I have 1 antivirus server symantec running on windows server 2012 and 1 mail server for axigen mail server running on ubuntu server 16.04. Axigen support in windows os. Because some reason i want ...
0
votes
0answers
25 views

Performance diagnostics Azure VM slow performance

We have an Azure VM that is running rather slow. I did the performance diagnostics and it shows me the following: Multiple Anti-Virus programs are installed on this VM. Running more than one Anti-...
0
votes
0answers
18 views

Windows Defender on-demand scan via MpCmdRun fails

I am having a problem with Microsoft's Windows Defender on Windows Server 2016 and Windows Server 2012 while running scans on-demand via command line. MpCmdRun.exe -Scan -ScanType 3 -File C:\...
0
votes
0answers
26 views

Is it possible that unencrypted traffic can cause Windows socket #10057, #10060, #10061 errors?

I have client-server programmas in the Windows environment that are also deployed in the public network. They are Delphi/Indy based. All were working good for years, but recentely (some months ago) ...
0
votes
3answers
42 views

How can I prevent a service from being stopped in Task Manager (Or McAfee EPO)

I have a service that should never be stopped and am looking into different ways to prevent stopping the process. This is a managed environment connected to Active Directory. Can any Windows-based ...
0
votes
1answer
36 views

Which files to scan for viruses (or how to reduce the cost of a full scan) on Linux (Debian)?

It may be irrelevant but anyway: I'm using clamscan to check my system. The problem is that a full system scan needs far more than one day. When you plan to do one scan a day, that's not acceptable....
0
votes
1answer
20 views

Sophos Antivirus or other Firewall/AV blocking Tomcat or AmazonS3Client listObjects() method?

I have a pair of Java/Tomcat web applications running on a third party (customer) server, and of late, those applications can no longer list or download objects from AmazonS3. This is a "nothing ...
0
votes
1answer
53 views

Windows defender real-time protection “disabled”

Initially windows defender was disabled for some reason in Windows server 2016. I enabled it from gpedit.msc by disabling "Turn off windows defender". When opening Windows defender, it shows real-...
0
votes
0answers
54 views

amavisd-new: Disable a specific virus scanner for certain users (senders / recipients)

I am running a mailserver with postfix and amavisd-new. I use a clamAV virus scanner (with sanesecurity signatures). So far, everything is working fine. Now, I want to block emails that have an MS ...
0
votes
0answers
17 views

check for active firewall and antivirus on multiple workstations

My boss decided that in order to increase the security in the firm, from now on every employee who wants to work from home and install forticlient and Citrix must have an active firewall and antivirus....
2
votes
2answers
70 views

How to ask antivirus software to work slower and hence use less disk access?

It is our policy for our end-user's computers (usually laptops) to have high power CPUs, GPUs, RAMs (no less than 16GB) and HDD space (1TB), but we save money by choosing lower rotation speed of HDD. ...
2
votes
0answers
21 views

How to prevent the installation of third-party AVs for a domain using GPOs?

Our organization uses a particular AV that we manage, but we currently have no way to enforce users not to install any other AVs, which has started to become an issue. I know windows can typically ...
2
votes
0answers
240 views

Suricata logs “A Network Trojan was detected”. Is it false positive?

I use the Suricata as IDS on the local network that it doesn't the internet. It logged a few alerts from some clients that said A Network Trojan was detected. All log's properties are in the following:...
1
vote
3answers
259 views

What do Windows Defender Powershell ThreatAction enums map to?

I'm looking at a default Defender configuration in Server 2016. I'm not sure how to discover what these '0' mean for the ThreatDefaultAction: HighThreatDefaultAction : 0 ...
0
votes
0answers
40 views

windows server 2016 hacked for the third time [duplicate]

hello everyone I'm using a windows server 2016 as web server that runs a WebLogic application on a specific port (7001) and I have almost done every thing I know or I read about on the internet to ...
0
votes
0answers
47 views

Install Antivirus on Windows Server 2008 R2

So, I have a CIS Microsoft Windows Server 2008 R2 - Level 1 image that needs to have an Anti-Virus installed and set to scan every day. This must be done with PowerShell so I can fit it into the ...
0
votes
0answers
64 views

Trend Micro Anti-Virus / Deep Security Unattended Installation

I would greatly appreciate if someone with operational knowledge about Trend Micro Deep Security, could verify or debunk the following statement: The software cannot be installed unattended client-...
1
vote
2answers
2k views

Scan the full filesystem in parallel with clamscan

I run a clamav scan weekly on my servers. There is one server with a raid6 cluster of 30TB of disk space where the scan take more than 24h to run. So I wonder how can I run clamscan on the whole ...
1
vote
2answers
2k views

How to remove active_desktop_launcher.exe by KuGou [duplicate]

Hi I am running Windows Server 2012 R2. And I am facing a strange problem. There active_desktop_launcher.exe service is randomly get executed and takes up 100% of CPU utilization slowing the whole ...
2
votes
1answer
12k views

Using Windows Defender on Windows Server 2012R2 & 2016

We have to renew our Anti-Virus licensing with McAffee. However, we only have a handful of Windows Servers (2012R2 & 2016) that are running as a DC, Exchange, Backup and File server. Would it be a ...
1
vote
0answers
188 views

windows Antimalware using high CPU with local TCP links

I have observed a problems with Windows Antimalware Service Executable using high CPU when two processes on my computer are communicating over TCP. If I disable realtime scanning in defender the ...
1
vote
0answers
21 views

How to find complete installer location which is installed using small size initiator .exe on Windows 10

Some time companies give small setup.exe file, for example 2 MB .exe of Kaspersky which we run and that will connect to the company server, download complete installer/setup and install the software. ...
2
votes
2answers
338 views

Why is IPScan detected as a virus?

Does anyone have a definitive answer to why Angry IP Scanner (IPScan) is detected as a virus (hacktool) by so many antivirus vendors, while similar tools such as Nmap and Advanced IP Scanner are not? ...
-1
votes
1answer
527 views

ESET Endpoint Protection - License will soon be overused

ESET Remote Administrator (ERA) keeps warning me that my license will soon be overused. The number of units in use, listed by License Management doesn't match the the number of computers I have ...
1
vote
3answers
77 views

Physical and software firewall

I wanted to know if having two firewalls is usefull at all. I'm an apprentice in a company and the I'm the only one in my company who knows little about networking. We have a cisco firewall and each ...
2
votes
5answers
3k views

Trying to update windows defender from UNC path continuously fails

I'm trying to update Windows Defender (on Win 10) using definistions stored on a UNC path. I'm setting the path the the mpam-fe.exe file like this Set-MpPreference -...
0
votes
2answers
741 views

TFS 2017 anti-virus exclusion

Does anyone know if there is an official anti-virus exclusion list from Microsoft that lists which folders and processes should be excluded from anti-virus on the TFS 2017 application server? This ...
7
votes
4answers
21k views

Is it safe to purge %WinDir%\assembly\NativeImages*\Temp\?

On my Windows Server 2008 R2 (SBS 2011) i have found more than 25 GB of files that seem to be junk: %WinDir%\assembly\NativeImages_v2.0.50727_32\Temp\ - 6.9 GB (656 files in 675 folders) %WinDir%\...
-1
votes
2answers
692 views

Update64.exe Using All CPU Resources

I have tried finding out what Update64.exe really does. I think it might be a virus but there's not much out there on the topic. Does anyone know how to fix this? It's using pretty much 80-100% of CPU....
0
votes
0answers
82 views

Sage2.0 Ransomware and Tomcat 7

We have a tomcat server running on window 2012 server which seems to be constantly being attached by Sage 2.0 ransomeware. Some details of the sever, 1) Tomcat is running on port 80 and 8080. 2) ...
0
votes
1answer
27 views

Watch Guard Total Security working over VPN

We have a warehouse and 4 other showroom locations. All the 4 locations are connect to the warehouse through a VPN. If we get a watch guard for each location and connect through a VPN. Would it be ...
49
votes
8answers
8k views

Are zipped EXE files harmless for Linux servers?

I ran a malware scanner on my site, and it marked a bunch of zipped EXE files as potential risk files (these files got uploaded by users). Since I'm able to uncompress the files on my Mac I assume ...
7
votes
3answers
22k views

Where are windows 10 defender offline scan logs/results?

I can't find any events or log files, are there such records somewhere or WD reports only if it finds something? Windows 10 pro, drive is encrypted with bitlocker (might affects somehow?)
3
votes
1answer
5k views

Windows 10 Notification Bug – Check Virus Protection

I have a bit of an issue on a Windows 10 Pro Machine on the Anniversary update with Trend Micro Installed. For some unknown reason I get this popup about every 5 minutes up to a total of about 200+ ...
0
votes
2answers
44 views

How can I install anti-virus software on all my network devices?

I have 20 laptops connected to a router wirelessly. Is there any way I can install an anti-virus program on those devices? What is the best way to do this? (It would be hard to manually install a ...
5
votes
1answer
2k views

How to scan for Windows viruses on Linux servers?

I have a CentOS server storing files for windows users. How do I scan for windows viruses in these files, and meanwhile prevent quarantine and other measures? I do not want the files altered in any ...
1
vote
1answer
729 views

Why is MsMpEng.exe using 100% Disk I/O for minutes to scan one small file?

Occasionally (maybe once a day), when I download any file with my browser and first try to open the download, my Windows 8 box CPU spikes to 100% for a minute or more. The file doesn't open until ...
1
vote
1answer
680 views

Windows Server 2012 web server maxing out on application start - could antivirus be responsible?

We have a Windows Server 2012 R2 web server running IIS 8.5 hosting a number of ASP.NET applications each in their own app pool. The server was originally specced to cope with expected load, but since ...
0
votes
1answer
336 views

Who is injecting TCP RST packets?

I work for a very large organisation and I am having issues with a device injecting RST packets to cut off a connection from one of my servers to another. I suspect it is some sort of anti-virus ...
2
votes
1answer
250 views

How to get SCEP to notify the user when they just downloaded a virus?

We're using Microsoft's System Center Endpoint Protection (SCEP) as our antivirus solution. We have it set within SCCM to send the help desk and the sysadmins an email when a virus detection is found....
0
votes
2answers
86 views

Ransomware infection: What to do [duplicate]

t seems that somehow our domain computers have been infected by rasomware, turning files into encrypted files ending with .crypted. Lots of file have been changed and we do have back up. At the same ...
3
votes
1answer
136 views

How can I get Windows to forget it had antivirus installed?

We purchased a networking and software solution for PCI compliance: TrustWave. We started to install the antivirus but realized that it was not required on the machines it was being installed on and ...
0
votes
1answer
422 views

How to diagnose process at 100% CPU without being able to shell in?

Given an Ubuntu 14.04 server setup on a popular VPS provider hosting a single website with Nginx, Apache and WordPress / PHP, after starting the server it works fine for a while. Days later the VPS ...
9
votes
4answers
1k views

Do I need an antivirus program in each virtual machine?

I have a 2012 R2 Hyper-V host running System center endpoint protection. There are two virtual windows servers being hosted by it. I have all .vhdx drives in a folder on d:/server/ Can I trust the ...
1
vote
0answers
70 views

How to fix erroneous virus detection?

We make free software available on our web site. A few years ago, one of the virus scanners started complaining about some of our executables. We rebuilt everything from source code, verified things ...
2
votes
1answer
4k views

PSEXEC - The system cannot find the path specified

I am trying to initiate a Endpoint protection scan on a network share. I found that I need to utilize PSEXEC to complete this but it is having problems connecting to the share. I mapped the drive ...
0
votes
2answers
838 views

Gateway Anti-Virus vs Desktop Anti-Virus

I need your help with a question on Gateway Anti-Virus and Desktop/Server Anti-virus. The example I have is the following: You have a network of 50 machines (Desktops/Servers) which includes a ...
2
votes
2answers
2k views

how did ransomware delete shadowcopies on file server

We had a PC infected with a Ransomware Trojan RANSOM_CRYPTESLA.AC that encrypted a bunch of files on a network drive. We isolated the PC and just restored from backup. One of the things that happened ...
6
votes
1answer
2k views

Is it possible to check the progress of of a currently running clamAV scan?

I have searched around but not found a possible solution to this so far. I have an ongoing scan which I thought would've been finished at certain time, but unfortunately it has not. So I am wondering ...