Author Topic: IBM Acces For Windows  (Read 19357 times)

0 Members and 1 Guest are viewing this topic.

pachovski

  • Guest
IBM Acces For Windows
« on: January 30, 2010, 02:25:21 PM »
Hi all,

After update of avast. he detect virus in "pcsws.exe". This "exe" is part of "eServer iSeries Access For Windows by IBM"
This software by IBM is installed on all computers in my network.
please chek this problem! without this "pcsws.exe program does not work.
If you have questions about debugging the problem I am available.

Can I tell ADNM, that exe is not a virus?

Thanks!

Best regards,
Bojidar Pachovski
Mobel Ludwig Bulgaria GmbH

starmag

  • Guest
Re: IBM Acces For Windows
« Reply #1 on: January 30, 2010, 04:51:27 PM »
I confirm that pcsws.exe is not a virus

I hope that avast quickly repair this error because many many societies have this software to permit emulation beetween Iseries (AS400,IBM) and PC !!!

Perhaps the cause is PCSWS.EXE is and old program (for Windows 98)  but it worked before the update today
« Last Edit: January 30, 2010, 04:54:45 PM by starmag »

pachovski

  • Guest
Re: IBM Acces For Windows
« Reply #2 on: January 30, 2010, 05:12:04 PM »
I confirm that pcsws.exe is not a virus

I hope that avast quickly repair this error because many many societies have this software to permit emulation beetween Iseries (AS400,IBM) and PC !!!

Perhaps the cause is PCSWS.EXE is and old program (for Windows 98)  but it worked before the update today

Yes starmag!
it worked before the update today

to work with the program were forced to kill "aswServ.exe"
hopefully sooner than avast! to make adjustments for this use of IBM

Sorry for my bad english !

––––––––--
I hope I'm useful. will upload the file in question.
I put a ticket in it I put the file

Ticket ID:     LRG-663923

Sorry for my bad english !
« Last Edit: January 30, 2010, 05:19:46 PM by pachovski »

starmag

  • Guest
Re: IBM Acces For Windows
« Reply #3 on: January 30, 2010, 06:14:22 PM »
The solution is like every "false positive" to do the "File System Shield, Expert Settings, Exclusions, Add" job with c:\program files\ibm\client access\emulator\pcsws.exe"  but it's a shame that happened with a program perfectly harmless and so current !

ps:sorry for my english too! i'm french   ;)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86935
  • No support PMs thanks
Re: IBM Acces For Windows
« Reply #4 on: January 30, 2010, 06:23:49 PM »
The solution for any false positive is to confirm it is an FP before excluding the file:

You could check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\* That will stop the File System Shield scanning any file you put in that folder.

If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection  and almost certainly an FP.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.9.6034 (build 22.9.7554.734) UI 1.0.728/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

oso777

  • Guest
Re: IBM Acces For Windows
« Reply #5 on: January 30, 2010, 08:10:39 PM »
La solucion del problema es cambiar de version de Iseries. de la version V5R3 en adelante no tiene ese problema. el pcsws.exe no lo detecta como virus..

Saludos espero les sirva

starmag

  • Guest
Re: IBM Acces For Windows
« Reply #6 on: January 30, 2010, 08:50:42 PM »
yes you're right; my as400 is in V5R2

the problem is that how to change OS400 version in a weekend?

my users will need their pcs400 Monday!

i'm not alone in that case ;  few people work here today, it's saturday
tomorrow, sunday, nobody work here in france

But monday, the problem will be very important for many business (well those who use avast)
« Last Edit: January 30, 2010, 08:54:03 PM by starmag »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86935
  • No support PMs thanks
Re: IBM Acces For Windows
« Reply #7 on: January 30, 2010, 09:15:10 PM »
The sample needs to be confirmed as an FP using VirusTotal as I mentioned above and reported/sent to avast.

avast4 - Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and false positive/undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.
- In the meantime, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions (right click the avast ' a ' icon)
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

avast5 - Send the sample to avast as a False Positive:
Open the chest and right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.
- In the meantime, add it to the exclusions lists:
File System Shield, Expert Settings, Exclusions, Add and
avast Settings, Exclusions
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.

I don't use the ADNM version so I hope the above settings, etc are correct or you can adapt them to it or the client systems.
« Last Edit: January 30, 2010, 09:16:52 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.9.6034 (build 22.9.7554.734) UI 1.0.728/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

oso777

  • Guest
Re: IBM Acces For Windows
« Reply #8 on: January 30, 2010, 09:33:11 PM »
el pcsws.exe lo usas solo para el emulator. Copia solo la carpeta emulator de una version V5R3 a la actual con eso funciona.
es por si no soluciona pronto avast el problema

asi solucionamos nosotros el problema...

 :-\

Saludos.

pachovski

  • Guest
Re: IBM Acces For Windows
« Reply #9 on: January 30, 2010, 09:45:30 PM »
hi DavidR,

thanks for you help.
I did a few things from the elections of you:
this: (select the file, right click, email to Alwil Software).
or this: You could check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner
Reports here it is: http://dox.abv.bg/files/fdw?eid=53525641

and more... and more... but...

Аfter update of a VPS 100130-0 to 100130-1 already have no problem with "pcsws.exe"
not detect it as virus!


if the problem had occurred during working hours from Monday to Friday colleagues would probably make me embark on the gallows  ;D

Thank you all for your help!
« Last Edit: February 01, 2010, 09:43:43 AM by pachovski »

pachovski

  • Guest
Re: IBM Acces For Windows
« Reply #10 on: January 30, 2010, 10:03:30 PM »
el pcsws.exe lo usas solo para el emulator. Copia solo la carpeta emulator de una version V5R3 a la actual con eso funciona.
es por si no soluciona pronto avast el problema

asi solucionamos nosotros el problema...

 :-\

Saludos.


Where can I download a new version V5R3 ... V5R4 maybe? I have one page of IBM and I do not know if you can not download from there a new version of the client.

Any ideas?
Thank you!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86935
  • No support PMs thanks
Re: IBM Acces For Windows
« Reply #11 on: January 30, 2010, 11:06:31 PM »
thanks for you help.
I did a few things from the elections of you:
this: (select the file, right click, email to Alwil Software).
or this: You could check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner
Reports here it is: http://dox.abv.bg/files/fdw?eid=53525641

and more... and more... but...

Аfter update of a VPS 100130-0 to 100130-1 already have no problem with "pcsws.exe"
not detect it as virus!
if the problem had occurred during working hours from Monday to Friday colleagues would probably make me embark on the gallows  ;D

Thank you all for your help!

You're welcome.

It looks like you weren't alone in this detection and it had already been submitted to avast and the signature corrected. They usually are quick to correct when a detection is acknowledged as a false positive.

So no gallows today then ;D
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.9.6034 (build 22.9.7554.734) UI 1.0.728/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

pachovski

  • Guest
Re: IBM Acces For Windows
« Reply #12 on: January 31, 2010, 09:53:18 PM »
version of avast returned from 100130-1 to 100130-0; now everything is normal and no problem with the application of IBM.  ;)

starmag

  • Guest
Re: IBM Acces For Windows
« Reply #13 on: February 01, 2010, 09:18:10 AM »
I confirm it works now

Thank you ALWIL, you're great professionals! Very reactive !  :D

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86935
  • No support PMs thanks
Re: IBM Acces For Windows
« Reply #14 on: February 01, 2010, 05:52:19 PM »
Thanks for the feedback guys.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.9.6034 (build 22.9.7554.734) UI 1.0.728/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security