« previous next »
Pages: [1] 2   Go Down

Author Topic: Managed Client don't detect virus  (Read 21643 times)

0 Members and 1 Guest are viewing this topic.

chav

  • Guest
Managed Client don't detect virus
« on: September 28, 2009, 07:36:57 AM »
Hi, All.

Managed Client does not detect the virus AutoIt: Balero-A / AutoIt: Balero-A2.
I run scan all drives with a maximum sensitivity. It gave no results. Next, I uninstall Managed Client and install avast Home. Virus was detected Standard Shield, Heuristic analysis :o ??? (not in logs) and Simple User Interface (after first reboot).

Warning.log:
24.09.2009   17:39:12   1253795952   SYSTEM   1700   Sign of "AutoIt:Balero-A2 [Wrm]" has been found in "C:\WINDOWS\system32\csrcs.exe\>>>AUTOIT SCRIPT<<<" file. 
24.09.2009   17:39:12   1253795952   SYSTEM   1700   Sign of "AutoIt:Balero-A [Wrm]" has been found in "C:\WINDOWS\system32\csrcs.exe\AutoIt.script" file. 
24.09.2009   17:39:12   1253795952   SYSTEM   1700   Sign of "AutoIt:Balero-A2 [Wrm]" has been found in "C:\WINDOWS\system32\csrcs.exe\>>>AUTOIT SCRIPT<<<" file. 
24.09.2009   17:39:12   1253795952   SYSTEM   1700   Sign of "AutoIt:Balero-A [Wrm]" has been found in "C:\WINDOWS\system32\csrcs.exe\AutoIt.script" file. 
25.09.2009   9:36:36   1253853396   User   2960   Sign of "AutoIt:Balero-A2 [Wrm]" has been found in "c:\windows\system32\csrcs.exe\>>>AUTOIT SCRIPT<<<" file. 
25.09.2009   9:36:45   1253853405   User   2960   Sign of "AutoIt:Balero-A [Wrm]" has been found in "c:\windows\system32\csrcs.exe\AutoIt.script" file. 

configuration: 130 computers WinXPproSP3+Managed Client4.8.1038+latest virus database.
Logged

wpn

  • Guest
Re: Managed Client don't detect virus
« Reply #1 on: September 28, 2009, 01:24:48 PM »
did you report this directly to the support desk already??

if not, do it directly, since they dont always read the forum i assume...

though it is strange since the managed client and the non-managed clients use the same engine i believe (would be strange to not have the same detection engine)....
you are very confident that the client that had the managed client installed on it was really up to date?  that one machine in the network is up to date doesnt mean that all are (checked in ADNM or manually on the client itself?)

Logged

chav

  • Guest
Re: Managed Client don't detect virus
« Reply #2 on: September 28, 2009, 02:28:50 PM »
Quote from: wpn on September 28, 2009, 01:24:48 PM
did you report this directly to the support desk already??
if not, do it directly, ...
support.avast.com ?
Quote from: wpn on September 28, 2009, 01:24:48 PM
...they dont always read the forum...
:(  :o
Quote from: wpn on September 28, 2009, 01:24:48 PM
... it is strange ...
it is very strange

Quote from: wpn on September 28, 2009, 01:24:48 PM
you are very confident that the client that had the managed client installed on it was really up to date?  that one machine in the network is up to date doesnt mean that all are (checked in ADNM or manually on the client itself?)
all computers are updated, these machines are some (infected).
Logged

wpn

  • Guest
Re: Managed Client don't detect virus
« Reply #3 on: September 28, 2009, 08:37:34 PM »
not support.avast.com but the option in ADNM to make a supportticket

dont pull what i say out of context hey :)
i said: they dont always read the forum i assume  (big difference cuz its my assumption, maybe they do read it)

Logged

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: Managed Client don't detect virus
« Reply #4 on: September 28, 2009, 08:45:45 PM »
They do read it, they're just really busy on the new version, and the conference that was just held.
Logged
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

chav

  • Guest
Re: Managed Client don't detect virus
« Reply #5 on: September 29, 2009, 06:51:19 AM »
Quote from: wpn on September 28, 2009, 08:37:34 PM
not support.avast.com but the option in ADNM to make a supportticket
support@avast.com ?

Quote from: wpn on September 28, 2009, 08:37:34 PM
...i said: they dont always read the forum i assume...
Quote from: scythe944 on September 28, 2009, 08:45:45 PM
They do read it, they're just really busy ...
And where are they? I think that the support service is not here! While they're busy, I'll have to remove net-version and install pro on the 130 computers!

do you think, buy avast next year? ::)
Logged

chav

  • Guest
Re: Managed Client don't detect virus
« Reply #6 on: September 29, 2009, 07:13:48 AM »
Failed to deliver to 'support@avast.com'
SMTP module(domain avast.com) reports:
 lion.asw.cz: DNS server failure

 ;D :-X ;D :o ??? ::) :'(
Logged

wpn

  • Guest
Re: Managed Client don't detect virus
« Reply #7 on: September 29, 2009, 01:07:05 PM »
you mailserver apparently refuses to send mail to a server that has no reverse DNS. Therefor i did the following check:

Quote
smtp:91.213.143.55           smtp 
220 ****************************************************************************

Not an open relay.
 0 seconds - Good on Connection time
 0.640 seconds - Good on Transaction time
 Reverse DNS FAILED! This is a problem.
 OK - Reverse DNS matches SMTP Banner

Session Transcript:
HELO please-read-policy.mxtoolbox.com
250 lion.avast.com Hello recover.mxtoolbox.com [64.20.227.133] (may be forged), pleased to meet you [156 ms]
MAIL FROM: <supertool@mxtoolbox.com>
250 2.1.0 <supertool@mxtoolbox.com>... Sender ok [172 ms]
RCPT TO: <test@example.com>
550 5.7.1 <test@example.com>... Relaying denied. IP name possibly forged [64.20.227.133] [156 ms]
QUIT
221 2.0.0 lion.avast.com closing connection [156 ms]

This is a problem that the administrators from avast need to solve to get reverse dns working, probably a result of the recent move of building and thus internet connection?

Logged

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: Managed Client don't detect virus
« Reply #8 on: September 29, 2009, 03:48:12 PM »
That's no good...
Logged
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

kosov

  • Guest
Re: Managed Client don't detect virus
« Reply #9 on: October 20, 2009, 03:07:57 PM »
Well. I have the same problem. I can detect this virus (AutoIt:Balero-A2) only with the Prof. version of avast (program version - 4.8.1356) and my net client edition (program version - 4.8.1038) does not detect it. And I can not update my netclient edition to newer version because it says that I have the final one and I do not need to update it. So, what should I do??? I do not want to reinstall avast on all my client computers. Please help!!!! Where is support stuff???
Logged

chav

  • Guest
Re: Managed Client don't detect virus
« Reply #10 on: October 21, 2009, 06:04:22 AM »
Quote from: kosov on October 20, 2009, 03:07:57 PM
... So, what should I do???... Where is support stuff???
do nothing! and support will not come!
Here is my correspondence with them (note the date):
-------------------------------------------------------------------------
Ticket Details
Ticket ID:    RJS-487609    Department:    QA
Status:    Follow up    Priority:    High
Created On:    28.09.2009 14:13    Last Update:    01.10.2009 12:22
 
USER
Posted On: 28.09.2009 14:13
Managed Client does not detect the virus AutoIt: Balero-A / AutoIt: Balero-A2.
I run scan all drives with a maximum sensitivity. It gave no results. Next, I uninstall Managed Client and install avast Home. Virus was detected Standard Shield, Heuristic analysis Shocked Huh (not in logs) and Simple User Interface (after first reboot).

Warning.log:
24.09.2009 17:39:12 1253795952 SYSTEM 1700 Sign of "AutoIt:Balero-A2 [Wrm]" has been found in "C:\WINDOWS\system32\csrcs.exe\>>>AUTOIT SCRIPT<<>>AUTOIT SCRIPT<<>>AUTOIT SCRIPT<<<" file.
25.09.2009 9:36:45 1253853405 User 2960 Sign of "AutoIt:Balero-A [Wrm]" has been found in "c:\windows\system32\csrcs.exe\AutoIt.script" file.

configuration: 130 computers WinXPproSP3+Managed Client4.8.1038+latest virus database.

http://forum.avast.com/index.php?topic=49006.0

STAFF
Posted On: 01.10.2009 09:18
Hello

There is only one VPS (virus database update file)for avast! products. So the only reason why Netclient didn't detect the virus infection is old VPS.

Make sure, that avast! netclient is fully updated. Fully updated AMS Mirror is not enough.

Martin Kvid
2nd Level Technical Support & Quality Assurance
ALWIL Software a.s.

USER
Posted On: 01.10.2009 12:22
earlier:
Avast Home with VPS on 18/09/2009 (get from site) and 24/09/2009 - found
Avast NetClient with VPS on 24/09/2009 - not found

today:
check file A0004552.exe (attached; password - 1)
Avast Home with VPS on 30/09/2009 - found
Avast NetClient with VPS on 30/09/2009 - not found


Attachments  A0004552.rar (391.13 KB)
 home.JPG (48.71 KB)
 netclient.JPG (43.43 KB)
-------------------------------------------------------------------------

That's all!
But I still wrote the e-mail 30.09.2009. And that's what they answered 12.10.2009:
-------------------------------------------------------------------------
Hello

Detection for Netclient version will be added in the next update.

Martin Kvid
2nd Level Technical Support & Quality Assurance
ALWIL Software a.s.


Ticket Details
===================
Ticket ID: OKR-982050
Department: QA
Priority: Default
Status: On Hold
-------------------------------------------------------------------------
Today is 21.10.2009. They are silent a month!
But judging by the fact that the updates of netclent produced rarely, we will be happy only after 3 months.
« Last Edit: October 21, 2009, 06:09:35 AM by chav »
Logged

kosov

  • Guest
Re: Managed Client don't detect virus
« Reply #11 on: October 21, 2009, 07:08:41 AM »
Hello. Here is there answer. They promise to release new version of Net Client till the end of November. I am not satisfied with this quality service because of the speed of reaction.
I can thank them for the quick answer, but not for the quick new version release :(
"Hello, we are sorry we know about this issue, but this issue can be solve only with new NEt-client and there is no date for new Net-client release, we hope it will be till the end of November.
Best regards,
ALWIL Software a.s. support team "
Logged

chav

  • Guest
Re: Managed Client don't detect virus
« Reply #12 on: October 21, 2009, 08:09:50 AM »
Quote from: kosov on October 21, 2009, 07:08:41 AM
... the end of November.
Best regards,...
want to add: and be friends with viruses and they have not touched! ;D ;D ;D
Logged

kosov

  • Guest
Re: Managed Client don't detect virus
« Reply #13 on: October 21, 2009, 09:27:35 AM »
I have a feeling that the developers do not need corporate clients. Why do I need an apology and promise to solve the problem for months? What for I paid the money?
Logged

chav

  • Guest
Re: Managed Client don't detect virus
« Reply #14 on: October 21, 2009, 09:55:14 AM »
avast - the best FREE antivirus!  ;D ;D ;D
Logged
Pages: [1] 2   Go Up
« previous next »