Skip to main content

Questions tagged [anti-virus]

Antivirus is software used to prevent, detect and remove malware.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
22 views

Can SentinelOne act in a different way on a Windows 10 than on Windows 11?

Is it possible that the same SentinelOne (S1 - an antivirus software) policy, when applied to Win 10 and 11, can act differently? Can this depend on the system version or even on the particular ...
Glorifyday's user avatar
0 votes
0 answers
113 views

ClamAV scanning remote hosts from windows server

I am trying to find a way for ClamAV to scan remote hosts on my LAN and possibly automate this so it runs every night, I have around 10 - 15 VMs I'd like to scan and get reports for. I have installed ...
NathanExact's user avatar
0 votes
1 answer
108 views

How to clear disk read cache? [closed]

For performance testing I need a way to clear all disk read caches, since rebooting takes time. Clearing the Windows managed cache clearing OS cache is not enough in my case. I want to measure ...
stgatilov's user avatar
  • 111
1 vote
1 answer
306 views

Is there a tool like ClamAV to scan PHP and JS files?

We're offering a shared web hosting service, where many websites live on the same server. Since a lot of people don't update their stuff, they get pirated all the time. Now, the websites are ...
leftcursor's user avatar
0 votes
0 answers
214 views

ClamAV didn't see virus inside an Archive

/home/folder/clam_daily.sh: OK /home/folder/.sudo_as_admin_successful: Empty file /home/folder/.selected_editor: OK /home/folder/PROTECTAgentInstaller.tar.gz: OK /home/folder/.bash_logout: OK /home/...
Sainar Vekinel's user avatar
0 votes
1 answer
404 views

Virus scanner in Azure App Service

Is there any virus scanner installed on Azure App Service machines? When my web application is receiving a file, is it scanned on the wire? Or could I save it to disk, wait 2 seconds and if it ...
Mathias Rönnlund's user avatar
-2 votes
1 answer
377 views

Windows Firewall Disabled every startup [closed]

I have an antivirus installed (Panda Antivirus) and it always worked well for me. Everytime I startup my pc I get the notifications (screenshots below) to turn Windows Firewall ON. I never had this ...
jks's user avatar
  • 3
0 votes
1 answer
1k views

Large test virus file for ClamAV

I need a test file larger than 10K that will trigger ClamAV As per Large Virus File with EICAR-Test-Signature not identified by the clamav library , ClamAV will not detect the EICAR test virus when it ...
Rich's user avatar
  • 744
0 votes
1 answer
1k views

My six year-old WPF executable is suddenly being detected as MSIL/AgentTesla.FU!MTB by Windows Defender

I wrote this app years ago, for my own personal use, never published it anywhere. I wondered if a virus might have been able to infect it, but even restoring the exe from six years ago doesn't solve ...
Benjol's user avatar
  • 202
0 votes
0 answers
1k views

MDATP installation in Docker on Linux Image

Was anyone able to install MDATP on a Linux Docker image? We tried CentOS, Debian, and Ubuntu and all have the same issue. I installed MDATP successful when the Linux box is a full host but not in ...
qc_234578909's user avatar
-2 votes
1 answer
127 views

Hundreds of suspicious messages coming from random sources [closed]

I'm having a serious problem and I'm getting out of options. Out of the blue, my Windows 10 laptop with McAfee started reporting hundreds of suspicious messages blocked by the laptop firewall (I don't ...
ps0604's user avatar
  • 3
7 votes
2 answers
11k views

clamav-daemon start condition failed, /var/lib/clamav/daily.{c[vl]d,inc} was not met

After installing Modoboa(Open Source Mail Hosting), I Tried to start clamav-daemon, but i faced start condition failed. systemctl status clamav-daemon.service clamav-daemon.service - Clam ...
Omid Estaji's user avatar
-5 votes
2 answers
161 views

Can I report malicious ip addresses for money?

My servers get attacks from thousands of ip addresses everyday. I have an idea. Can I report those malicious ip addresses, or use the resource to earn some money? How? You may think these attacks are ...
William's user avatar
  • 109
1 vote
0 answers
206 views

Zimbra sends alarms for service restarts by its cronjobs

I'm trying to solve an issue where we get ~8 nightly mails from Zimbra OSE 8. They'll look i.e. like this one: Dec 21 00:46:15 hostname zmconfigd[16202]: Service status change: exhostname amavis ...
Florian Heigl's user avatar
1 vote
1 answer
235 views

A Batch script to call virustotal api and add a windows firewall rule if a baddie is detected?

Basically, when I connect to any site, it loads not only stuff on that server, but also stuff like background images, scripts, icons, fonts from third party sites. I was wondering if it would be ...
Gorstak's user avatar
  • 11
-1 votes
1 answer
1k views

Strange Virus/Spyware blocked notification on frequently used vendor site

See screen shot above. This Virus warning appears when a user attempts to download an .exe from a frequently used Vendor website. This just started a few days ago. As far as I'm aware we don't have ...
McITGuy's user avatar
  • 258
2 votes
2 answers
9k views

Sending a file to a remote clamd instance

I may be misunderstanding how to utilize clamd. I've got a situation where I have a media server that isn't quite powerfull enough to scan files as well as host the other services it is running (...
BobserLuck's user avatar
-2 votes
1 answer
51 views

How to avoid Antivirus Firewall blocking?

I just released a game that requires a PC and a mobile phone to communicate via UDP in a local area network. I have a mechanism that adds rules to the Windows firewall for the game. However, some ...
ruiyl's user avatar
  • 1
2 votes
0 answers
1k views

ClamAV for the host running docker containers - inotify/fanotify limits

I'm implementing anti-virus solution for Linux with ClamAV daemon running in On-Access mode, watching the created/opened files for malicious content at the host system AND in docker containers, ...
mva's user avatar
  • 141
1 vote
1 answer
74 views

Is there a server side or cloud-side Windows Defender installation administration tool for admins?

I am considering starting the wide use of Windows Defender antivirus on Windows 10, so I am looking is there a way to get a feedback from machines running Windows 10 Defender? It would also be nice ...
mrmut's user avatar
  • 362
0 votes
3 answers
3k views

How can I prevent a service from being stopped in Task Manager (Or McAfee EPO)

I have a service that should never be stopped and am looking into different ways to prevent stopping the process. This is a managed environment connected to Active Directory. Can any Windows-based ...
makerofthings7's user avatar
0 votes
1 answer
105 views

Which files to scan for viruses (or how to reduce the cost of a full scan) on Linux (Debian)?

It may be irrelevant but anyway: I'm using clamscan to check my system. The problem is that a full system scan needs far more than one day. When you plan to do one scan a day, that's not acceptable....
TimSch's user avatar
  • 101
0 votes
1 answer
185 views

Sophos Antivirus or other Firewall/AV blocking Tomcat or AmazonS3Client listObjects() method?

I have a pair of Java/Tomcat web applications running on a third party (customer) server, and of late, those applications can no longer list or download objects from AmazonS3. This is a "nothing ...
Robert Gannon's user avatar
0 votes
1 answer
480 views

Windows defender real-time protection "disabled"

Initially windows defender was disabled for some reason in Windows server 2016. I enabled it from gpedit.msc by disabling "Turn off windows defender". When opening Windows defender, it shows real-...
Bose's user avatar
  • 1
2 votes
2 answers
358 views

How to ask antivirus software to work slower and hence use less disk access?

It is our policy for our end-user's computers (usually laptops) to have high power CPUs, GPUs, RAMs (no less than 16GB) and HDD space (1TB), but we save money by choosing lower rotation speed of HDD. ...
TomR's user avatar
  • 111
2 votes
0 answers
39 views

How to prevent the installation of third-party AVs for a domain using GPOs?

Our organization uses a particular AV that we manage, but we currently have no way to enforce users not to install any other AVs, which has started to become an issue. I know windows can typically ...
SDV's user avatar
  • 21
2 votes
0 answers
2k views

Suricata logs "A Network Trojan was detected". Is it false positive?

I use the Suricata as IDS on the local network that it doesn't the internet. It logged a few alerts from some clients that said A Network Trojan was detected. All log's properties are in the following:...
Arani's user avatar
  • 338
2 votes
3 answers
2k views

What do Windows Defender Powershell ThreatAction enums map to?

I'm looking at a default Defender configuration in Server 2016. I'm not sure how to discover what these '0' mean for the ThreatDefaultAction: HighThreatDefaultAction : 0 ...
Bob's user avatar
  • 295
0 votes
0 answers
43 views

windows server 2016 hacked for the third time [duplicate]

hello everyone I'm using a windows server 2016 as web server that runs a WebLogic application on a specific port (7001) and I have almost done every thing I know or I read about on the internet to ...
omarzKH's user avatar
0 votes
0 answers
429 views

Install Antivirus on Windows Server 2008 R2

So, I have a CIS Microsoft Windows Server 2008 R2 - Level 1 image that needs to have an Anti-Virus installed and set to scan every day. This must be done with PowerShell so I can fit it into the ...
zalpha314's user avatar
  • 101
0 votes
0 answers
83 views

Trend Micro Anti-Virus / Deep Security Unattended Installation

I would greatly appreciate if someone with operational knowledge about Trend Micro Deep Security, could verify or debunk the following statement: The software cannot be installed unattended client-...
Casper Leon Nielsen's user avatar
4 votes
2 answers
13k views

Scan the full filesystem in parallel with clamscan

I run a clamav scan weekly on my servers. There is one server with a raid6 cluster of 30TB of disk space where the scan take more than 24h to run. So I wonder how can I run clamscan on the whole ...
azmeuk's user avatar
  • 195
1 vote
2 answers
3k views

How to remove active_desktop_launcher.exe by KuGou [duplicate]

Hi I am running Windows Server 2012 R2. And I am facing a strange problem. There active_desktop_launcher.exe service is randomly get executed and takes up 100% of CPU utilization slowing the whole ...
10K35H 5H4KY4's user avatar
3 votes
1 answer
32k views

Using Windows Defender on Windows Server 2012R2 & 2016

We have to renew our Anti-Virus licensing with McAffee. However, we only have a handful of Windows Servers (2012R2 & 2016) that are running as a DC, Exchange, Backup and File server. Would it be a ...
user2827958's user avatar
1 vote
0 answers
303 views

windows Antimalware using high CPU with local TCP links

I have observed a problems with Windows Antimalware Service Executable using high CPU when two processes on my computer are communicating over TCP. If I disable realtime scanning in defender the ...
rlb's user avatar
  • 111
1 vote
0 answers
28 views

How to find complete installer location which is installed using small size initiator .exe on Windows 10

Some time companies give small setup.exe file, for example 2 MB .exe of Kaspersky which we run and that will connect to the company server, download complete installer/setup and install the software. ...
Tushar's user avatar
  • 11
5 votes
2 answers
3k views

Why is IPScan detected as a virus?

Does anyone have a definitive answer to why Angry IP Scanner (IPScan) is detected as a virus (hacktool) by so many antivirus vendors, while similar tools such as Nmap and Advanced IP Scanner are not? ...
DarkMoon's user avatar
  • 1,069
-1 votes
1 answer
765 views

ESET Endpoint Protection - License will soon be overused

ESET Remote Administrator (ERA) keeps warning me that my license will soon be overused. The number of units in use, listed by License Management doesn't match the the number of computers I have ...
chump's user avatar
  • 66
1 vote
3 answers
110 views

Physical and software firewall

I wanted to know if having two firewalls is usefull at all. I'm an apprentice in a company and the I'm the only one in my company who knows little about networking. We have a cisco firewall and each ...
Hansel F.'s user avatar
3 votes
6 answers
15k views

Trying to update windows defender from UNC path continuously fails

I'm trying to update Windows Defender (on Win 10) using definistions stored on a UNC path. I'm setting the path the the mpam-fe.exe file like this Set-MpPreference -...
George Kendros's user avatar
0 votes
2 answers
1k views

TFS 2017 anti-virus exclusion

Does anyone know if there is an official anti-virus exclusion list from Microsoft that lists which folders and processes should be excluded from anti-virus on the TFS 2017 application server? This ...
Oliver Nilsen's user avatar
10 votes
4 answers
33k views

Is it safe to purge %WinDir%\assembly\NativeImages*\Temp\?

On my Windows Server 2008 R2 (SBS 2011) i have found more than 25 GB of files that seem to be junk: %WinDir%\assembly\NativeImages_v2.0.50727_32\Temp\ - 6.9 GB (656 files in 675 folders) %WinDir%\...
Opmet's user avatar
  • 271
-1 votes
2 answers
706 views

Update64.exe Using All CPU Resources

I have tried finding out what Update64.exe really does. I think it might be a virus but there's not much out there on the topic. Does anyone know how to fix this? It's using pretty much 80-100% of CPU....
DomainsFeatured's user avatar
0 votes
0 answers
92 views

Sage2.0 Ransomware and Tomcat 7

We have a tomcat server running on window 2012 server which seems to be constantly being attached by Sage 2.0 ransomeware. Some details of the sever, 1) Tomcat is running on port 80 and 8080. 2) ...
Cool Techie's user avatar
0 votes
1 answer
32 views

Watch Guard Total Security working over VPN

We have a warehouse and 4 other showroom locations. All the 4 locations are connect to the warehouse through a VPN. If we get a watch guard for each location and connect through a VPN. Would it be ...
Brett Nelson's user avatar
49 votes
8 answers
8k views

Are zipped EXE files harmless for Linux servers?

I ran a malware scanner on my site, and it marked a bunch of zipped EXE files as potential risk files (these files got uploaded by users). Since I'm able to uncompress the files on my Mac I assume ...
Xavin's user avatar
  • 592
17 votes
5 answers
105k views

Where are windows 10 defender offline scan logs/results?

I can't find any events or log files, are there such records somewhere or WD reports only if it finds something? Windows 10 pro, drive is encrypted with bitlocker (might affects somehow?)
bdimych's user avatar
  • 171
4 votes
1 answer
5k views

Windows 10 Notification Bug – Check Virus Protection

I have a bit of an issue on a Windows 10 Pro Machine on the Anniversary update with Trend Micro Installed. For some unknown reason I get this popup about every 5 minutes up to a total of about 200+ ...
TacticalKitchen's user avatar
0 votes
2 answers
4k views

How can I install anti-virus software on all my network devices?

I have 20 laptops connected to a router wirelessly. Is there any way I can install an anti-virus program on those devices? What is the best way to do this? (It would be hard to manually install a ...
Hisham Aburass's user avatar
5 votes
1 answer
4k views

How to scan for Windows viruses on Linux servers?

I have a CentOS server storing files for windows users. How do I scan for windows viruses in these files, and meanwhile prevent quarantine and other measures? I do not want the files altered in any ...
DannyZB's user avatar
  • 289

1
2 3 4 5
7