Questions tagged [anti-virus]

Antivirus is software used to prevent, detect and remove malware.

Filter by
Sorted by
Tagged with
0 votes
1 answer
53 views

How to clear disk read cache? [closed]

For performance testing I need a way to clear all disk read caches, since rebooting takes time. Clearing the Windows managed cache clearing OS cache is not enough in my case. I want to measure ...
-1 votes
0 answers
18 views

An executable compiled from source triggers a Windows Defender quarantine on just one computer

Can anyone suggest next steps for the following virus alert scenario? We have a new employee (located in the United States) who was shipped a brand new laptop directly from Dell USA. It has Windows ...
31 votes
3 answers
58k views

How should I test Clam Anti-Virus?

I have setup a new email server and now I need to test that Clam Antivirus is scanning messages correctly. How should I do this in a safe and controlled way?
7 votes
4 answers
12k views

Is it possible to check the progress of of a currently running clamAV scan?

I have searched around but not found a possible solution to this so far. I have an ongoing scan which I thought would've been finished at certain time, but unfortunately it has not. So I am wondering ...
1 vote
1 answer
128 views

Is there a tool like ClamAV to scan PHP and JS files?

We're offering a shared web hosting service, where many websites live on the same server. Since a lot of people don't update their stuff, they get pirated all the time. Now, the websites are ...
7 votes
2 answers
10k views

clamav-daemon start condition failed, /var/lib/clamav/daily.{c[vl]d,inc} was not met

After installing Modoboa(Open Source Mail Hosting), I Tried to start clamav-daemon, but i faced start condition failed. systemctl status clamav-daemon.service clamav-daemon.service - Clam ...
9 votes
3 answers
7k views

What is the difference between Windows Defender and Microsoft Windows Malicious Software Removal Tool?

Why does Windows Vista have two programs to remove viruses: Windows Defender and Microsoft Windows Malicious Software Removal Tool (MRT)
0 votes
0 answers
147 views

ClamAV didn't see virus inside an Archive

/home/folder/clam_daily.sh: OK /home/folder/.sudo_as_admin_successful: Empty file /home/folder/.selected_editor: OK /home/folder/PROTECTAgentInstaller.tar.gz: OK /home/folder/.bash_logout: OK /home/...
0 votes
1 answer
252 views

Virus scanner in Azure App Service

Is there any virus scanner installed on Azure App Service machines? When my web application is receiving a file, is it scanned on the wire? Or could I save it to disk, wait 2 seconds and if it ...
0 votes
0 answers
51 views

How to allow file in windows virus and threat protection in Windows Server Core

In Windows Server 2022 with GUI, when Windows Security incorrect detect file as virus and threat and quarantined threat, I can allowed threats from Windows Security settings. But I do not know how to ...
2 votes
2 answers
8k views

Sending a file to a remote clamd instance

I may be misunderstanding how to utilize clamd. I've got a situation where I have a media server that isn't quite powerfull enough to scan files as well as host the other services it is running (...
17 votes
5 answers
100k views

Where are windows 10 defender offline scan logs/results?

I can't find any events or log files, are there such records somewhere or WD reports only if it finds something? Windows 10 pro, drive is encrypted with bitlocker (might affects somehow?)
-2 votes
1 answer
307 views

Windows Firewall Disabled every startup [closed]

I have an antivirus installed (Panda Antivirus) and it always worked well for me. Everytime I startup my pc I get the notifications (screenshots below) to turn Windows Firewall ON. I never had this ...
3 votes
6 answers
15k views

Trying to update windows defender from UNC path continuously fails

I'm trying to update Windows Defender (on Win 10) using definistions stored on a UNC path. I'm setting the path the the mpam-fe.exe file like this Set-MpPreference -...
0 votes
1 answer
909 views

Large test virus file for ClamAV

I need a test file larger than 10K that will trigger ClamAV As per Large Virus File with EICAR-Test-Signature not identified by the clamav library , ClamAV will not detect the EICAR test virus when it ...
9 votes
8 answers
20k views

Is it safe to disable clamd?

Clamd is taking up about 5% of my memory (2GB) on my dedicated server (running linux) and I'm wondering if I can disable it without any security risks. The server just hosts a few of my own websites. ...
10 votes
2 answers
13k views

MsMpEng.exe high CPU usage on Windows Server 2012

We have a Windows Server 2012 installation that we use as an internal web server. Most HTTP requests are very slow on this machine (about 15 seconds for a simple ASP.NET WebAPI request). We noticed ...
3 votes
2 answers
4k views

mcafee local automatic update

I'm working in a intranet with 50 machines and I'd like to set up mcafee to have each machine update its engine et virus definitions on a local FTP. How to set up this configuration and what are the ...
0 votes
1 answer
1k views

My six year-old WPF executable is suddenly being detected as MSIL/AgentTesla.FU!MTB by Windows Defender

I wrote this app years ago, for my own personal use, never published it anywhere. I wondered if a virus might have been able to infect it, but even restoring the exe from six years ago doesn't solve ...
2 votes
3 answers
2k views

how i can write test virus?

i have a website and in website some people can upload files .... and when user upload file it must scan from virus by antivirus ... so i need test virus have the following extention (.doc ,jpg, png, ...
0 votes
0 answers
1k views

MDATP installation in Docker on Linux Image

Was anyone able to install MDATP on a Linux Docker image? We tried CentOS, Debian, and Ubuntu and all have the same issue. I installed MDATP successful when the Linux box is a full host but not in ...
-1 votes
1 answer
1k views

Trend Micro OfficeScan with Windows 7 Embedded and FBWF

I'm running up a bunch of HP Thin Terminals with Windows 7 Embedded Standard. I've enabled FBWF on the terminals and applications will be accessed by users via Citrix. Very little needs to exist on ...
-2 votes
1 answer
126 views

Hundreds of suspicious messages coming from random sources [closed]

I'm having a serious problem and I'm getting out of options. Out of the blue, my Windows 10 laptop with McAfee started reporting hundreds of suspicious messages blocked by the laptop firewall (I don't ...
-5 votes
2 answers
156 views

Can I report malicious ip addresses for money?

My servers get attacks from thousands of ip addresses everyday. I have an idea. Can I report those malicious ip addresses, or use the resource to earn some money? How? You may think these attacks are ...
1 vote
0 answers
178 views

Zimbra sends alarms for service restarts by its cronjobs

I'm trying to solve an issue where we get ~8 nightly mails from Zimbra OSE 8. They'll look i.e. like this one: Dec 21 00:46:15 hostname zmconfigd[16202]: Service status change: exhostname amavis ...
1 vote
1 answer
220 views

A Batch script to call virustotal api and add a windows firewall rule if a baddie is detected?

Basically, when I connect to any site, it loads not only stuff on that server, but also stuff like background images, scripts, icons, fonts from third party sites. I was wondering if it would be ...
-1 votes
1 answer
1k views

Strange Virus/Spyware blocked notification on frequently used vendor site

See screen shot above. This Virus warning appears when a user attempts to download an .exe from a frequently used Vendor website. This just started a few days ago. As far as I'm aware we don't have ...
-1 votes
1 answer
1k views

long access times and errors in iis application

I am having an issue with an IIS application (details of environment at the end of the message). The web site works great most of the time and I cannot reproduce any error in our test system. On the ...
-2 votes
1 answer
49 views

How to avoid Antivirus Firewall blocking?

I just released a game that requires a PC and a mobile phone to communicate via UDP in a local area network. I have a mechanism that adds rules to the Windows firewall for the game. However, some ...
9 votes
9 answers
10k views

Windows Defender- good or bad?

Anyone have any experience with Windows Defender? Is it a replacement for antivirus software or something else to run alongside? We are looking for something that isnt as bloated as McAfee 8.5i.
2 votes
0 answers
1k views

ClamAV for the host running docker containers - inotify/fanotify limits

I'm implementing anti-virus solution for Linux with ClamAV daemon running in On-Access mode, watching the created/opened files for malicious content at the host system AND in docker containers, ...
1 vote
1 answer
74 views

Is there a server side or cloud-side Windows Defender installation administration tool for admins?

I am considering starting the wide use of Windows Defender antivirus on Windows 10, so I am looking is there a way to get a feedback from machines running Windows 10 Defender? It would also be nice ...
0 votes
2 answers
1k views

TFS 2017 anti-virus exclusion

Does anyone know if there is an official anti-virus exclusion list from Microsoft that lists which folders and processes should be excluded from anti-virus on the TFS 2017 application server? This ...
7 votes
3 answers
424 views

Searching nearly free Security-Solution for School-Computer-Network [closed]

I am currently searching a (if possible completely free security-solution for a Computer-Network of a really small private School in the USA. The Infrastructure: Currently the school has one Server ...
0 votes
1 answer
456 views

Windows defender real-time protection "disabled"

Initially windows defender was disabled for some reason in Windows server 2016. I enabled it from gpedit.msc by disabling "Turn off windows defender". When opening Windows defender, it shows real-...
0 votes
3 answers
2k views

How can I prevent a service from being stopped in Task Manager (Or McAfee EPO)

I have a service that should never be stopped and am looking into different ways to prevent stopping the process. This is a managed environment connected to Active Directory. Can any Windows-based ...
0 votes
1 answer
176 views

Sophos Antivirus or other Firewall/AV blocking Tomcat or AmazonS3Client listObjects() method?

I have a pair of Java/Tomcat web applications running on a third party (customer) server, and of late, those applications can no longer list or download objects from AmazonS3. This is a "nothing ...
1 vote
3 answers
2k views

Problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista

I'm having some problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista. My client requires this exact version. The system on which I'm installing the software is recently ...
0 votes
1 answer
94 views

Which files to scan for viruses (or how to reduce the cost of a full scan) on Linux (Debian)?

It may be irrelevant but anyway: I'm using clamscan to check my system. The problem is that a full system scan needs far more than one day. When you plan to do one scan a day, that's not acceptable....
5 votes
1 answer
4k views

How to scan for Windows viruses on Linux servers?

I have a CentOS server storing files for windows users. How do I scan for windows viruses in these files, and meanwhile prevent quarantine and other measures? I do not want the files altered in any ...
2 votes
2 answers
338 views

How to ask antivirus software to work slower and hence use less disk access?

It is our policy for our end-user's computers (usually laptops) to have high power CPUs, GPUs, RAMs (no less than 16GB) and HDD space (1TB), but we save money by choosing lower rotation speed of HDD. ...
1 vote
2 answers
3k views

How to remove active_desktop_launcher.exe by KuGou [duplicate]

Hi I am running Windows Server 2012 R2. And I am facing a strange problem. There active_desktop_launcher.exe service is randomly get executed and takes up 100% of CPU utilization slowing the whole ...
2 votes
0 answers
33 views

How to prevent the installation of third-party AVs for a domain using GPOs?

Our organization uses a particular AV that we manage, but we currently have no way to enforce users not to install any other AVs, which has started to become an issue. I know windows can typically ...
2 votes
0 answers
2k views

Suricata logs "A Network Trojan was detected". Is it false positive?

I use the Suricata as IDS on the local network that it doesn't the internet. It logged a few alerts from some clients that said A Network Trojan was detected. All log's properties are in the following:...
2 votes
6 answers
480 views

Malware vs Viruses

Is there a legitimate technical difference between malware and viruses? I have looked at the Wikipedia entries but I am not really seeing the difference. Currently, I kind of feel like this is just ...
2 votes
3 answers
352 views

Virtual Machine Antivirus

We're starting to ramp up our Virtual Machine operations and are increasingly running more and more Windows guests. As far as I can tell traditional antivirus programs are not a scalable solution for ...
2 votes
3 answers
2k views

What do Windows Defender Powershell ThreatAction enums map to?

I'm looking at a default Defender configuration in Server 2016. I'm not sure how to discover what these '0' mean for the ThreatDefaultAction: HighThreatDefaultAction : 0 ...
1 vote
4 answers
3k views

Recurring virus infection on a domain workstation

One of our users is having a recurring problem with a virus. It has happened to this user on two different machines, in each instance infecting the same program with the same virus. Malware bytes ...
0 votes
0 answers
43 views

windows server 2016 hacked for the third time [duplicate]

hello everyone I'm using a windows server 2016 as web server that runs a WebLogic application on a specific port (7001) and I have almost done every thing I know or I read about on the internet to ...
2 votes
1 answer
14k views

clamd says socket in use by another process but I can't find one

I'm running CentOS 5.3 (Final) and using rpmforge I installed clamd and prereqs ok. I started clamd and ran a freshclam all ok. But if I run "clamd PING" or clamd /path/to/file I get ERROR: LOCAL: ...

1
2 3 4 5
7