Post subject: Backup Server stable and false positive virus scans Posted: Sun Mar 01, 2009 7:45 pm
Site Administrator
Joined Fri Aug 18, 2006 11:47 am
Posts 11467
Location Merseyside, United Kingdom
Favourite OS Microsoft Windows 7 Ultimate x64
Since the recent reinstall of Windows following the faulty 500GB SATA backup drive, there have been no more errors in the event log and no more random crashes or freezing. It was a tough time finding out what was wrong but thats the fun of running a server. Recently toshua123 has also had server issues which lasted a similar amount of time, but he got those sorted too! Everyone is a winner!
Now I'd like to talk about virus scan false positives. Everyone is bound to get them at some point in their computer using lives, and you probably won't realise at first until it deletes that valuable system file that stops Windows booting up... Well ReactOS seems to hold one of these in the system32 folder. I forget the file exactly but it was a dll and it was vital to the stable running of the system. Even though it is inside a RAR file, the antivirus still scans it and picks it up. Although the antivirus doesn't delete anything without permission, its easy to miss if you just hit "remove infections" as I almost did. Now I check each file and its location before I tell the software what to do with it. Sure in this case it was just a backup from the BA FTP and could have been replaced at the click of a button, but what if it was a valuable system file? Would you cope with your system not starting up next time you reboot? It would certainly annoy the hell out of me.
So, next time you do a virus scan, make sure you check the files its picked up as viruses before you tell it to heal or disinfect them. You never know, it could be a valuable system file just showing up as a false positive. If in doubt, use google to find out if the file is potentially a risk. And remember, always keep backups! As the saying goes, you can never have enough backups, and thats fact.
Post subject: Re: Backup Server stable and false positive virus scans Posted: Sun Mar 01, 2009 7:48 pm
Site Moderator
Joined Mon Jun 23, 2008 6:34 pm
Posts 610
Location Dorset, UK
Favourite OS 7 Professional 64-bit or 32-bit
Andy wrote:
*snip* Now I'd like to talk about virus scan false positives. Everyone is bound to get them at some point in their computer using lives, and you probably won't realise at first until it deletes that valuable system file that stops Windows booting up... *snip*
Yep, true. I just had to re format my hard-drives because it spread and had to install Windows again.
Post subject: Re: Backup Server stable and false positive virus scans Posted: Sun Mar 01, 2009 9:51 pm
Amateur Beta Collector
Joined Wed Sep 13, 2006 11:55 pm
Posts 69
...and that's one of the reasons why I stopped using AVG.
Along with the fact that they've taken it upon themselves to be the enforcers of copyright legislation by detecting cracks/keygens as malware and considering their LinkScanner fiasco last year, AVG has lost all of its credibility, if it had any to begin with.
Post subject: Re: Backup Server stable and false positive virus scans Posted: Sun Mar 01, 2009 10:30 pm
Noobus Maximus Site Moderator
Joined Thu Nov 30, 2006 6:10 pm
Posts 2260
Location Japan (Lol I wish...)
Favourite OS Windows 8
Andy wrote:
Since the recent reinstall of Windows following the faulty 500GB SATA backup drive, there have been no more errors in the event log and no more random crashes or freezing. It was a tough time finding out what was wrong but thats the fun of running a server. Recently toshua123 has also had server issues which lasted a similar amount of time, but he got those sorted too! Everyone is a winner!
Mine was actually a malware problem but booting a cd I got given I booted the mini XP that was on it and ran the command prompt Macafee and it was gone instantly.if you want Andy or anyone else ill ISO the CD And upload it some where it's a brill CD. But it can be fun being an administrator
Add: When I first got my server i had a graphics card witch cause the system to hang and crash daily, I then got one with a fan Followed by filling all the spare fan slots with fans
Post subject: Re: Backup Server stable and false positive virus scans Posted: Mon Mar 02, 2009 4:34 pm
Ex OSBA Member
Joined Thu Nov 08, 2007 6:08 am
Posts 828
Location Malaysia
DjRob wrote:
This reminds me of the AVG error, which deleted a very important file on the PC.
Glad to see that the servers works again (it's fun, repairing an server or computer).
I'm glad I never installed Avast on any of PCs that I've used. Last time someone used Avast, it detect winlogon.exe as a nasty, spreadable virus (forgot the virus name already). From that moment, I swear I won't let any of my customers/clients/friends uses Avast, ever! However, I don't have any problem with AVG though, in facts, it's one of the (free) AV that are capable of removing Brontok nasty infestation!
Post subject: Re: Backup Server stable and false positive virus scans Posted: Tue Mar 03, 2009 8:40 am
Pro Beta Collector
Joined Fri Jun 29, 2007 9:30 pm
Posts 309
FarCry3r wrote:
DjRob wrote:
This reminds me of the AVG error, which deleted a very important file on the PC.
Glad to see that the servers works again (it's fun, repairing an server or computer).
I'm glad I never installed Avast on any of PCs that I've used. Last time someone used Avast, it detect winlogon.exe as a nasty, spreadable virus (forgot the virus name already). From that moment, I swear I won't let any of my customers/clients/friends uses Avast, ever! However, I don't have any problem with AVG though, in facts, it's one of the (free) AV that are capable of removing Brontok nasty infestation!
There were at least two major trojans/virii that infected winlogon.exe (Sober/Netsky). I personally use Avast/Zone Alarm for a great free solution, and ESET Smart Security as a paid version (it has gotten a vb100 award for the past 10 years).
As for the situation at hand, glad you got it fixed Andy.
Post subject: Re: Backup Server stable and false positive virus scans Posted: Tue Mar 03, 2009 11:01 am
Ex OSBA Member
Joined Thu Nov 08, 2007 6:08 am
Posts 828
Location Malaysia
logicaL wrote:
There were at least two major trojans/virii that infected winlogon.exe (Sober/Netsky). I personally use Avast/Zone Alarm for a great free solution, and ESET Smart Security as a paid version (it has gotten a vb100 award for the past 10 years).
As for the situation at hand, glad you got it fixed Andy.
If it's really an infection, I wouldn't mind, I've taken the hard disk for scan on other working system, and no infection was found, upon running it in the original system, it kept appearing and won't go unless you "heal/fix" the problem, which in Avast world, means deleting the file...
Post subject: Re: Backup Server stable and false positive virus scans Posted: Tue Mar 17, 2009 5:07 pm
Site Moderator
Joined Thu Oct 23, 2008 3:25 am
Posts 2623
Location Earth.
Favourite OS Real Life
I had AVG on my laptop for about a month, and got fed up with it, It didn't protect from viruses the way that Avast! does, My old laptop got infected with about 30 trojans\malware\viruses thanks to a botched Logon.ui file... and it would kill my system because it would keep bringing up windows to erase certain files. 2 great features of Avast: Bootscans and Proactive Internet scanning, keeping files out of my system before they get there.
Post subject: Re: Backup Server stable and false positive virus scans Posted: Tue Mar 17, 2009 8:34 pm
Ex OSBA Member
Joined Thu Nov 08, 2007 6:08 am
Posts 828
Location Malaysia
pizzaboy192 wrote:
I had AVG on my laptop for about a month, and got fed up with it, It didn't protect from viruses the way that Avast! does, My old laptop got infected with about 30 trojans\malware\viruses thanks to a botched Logon.ui file... and it would kill my system because it would keep bringing up windows to erase certain files. 2 great features of Avast: Bootscans and Proactive Internet scanning, keeping files out of my system before they get there.
My experience with Avast is quite the opposite. It detect winlogon.exe as a virus. I tried plugging in the hard disk on other PC just to scan with other antivirus (Kaspersky, fully updated) to found nothing. When I select option to heal the file, Avast just delete it after reboot and rendering the system useless before I restore winlogon.exe back.
Post subject: Re: Backup Server stable and false positive virus scans Posted: Tue Mar 17, 2009 8:48 pm
Site Moderator
Joined Thu Oct 23, 2008 3:25 am
Posts 2623
Location Earth.
Favourite OS Real Life
you must remember that some trojans can attach themselves to an antivirus or a system file though. I had a nasty virus i was messing around with, and it was able to keep Norton Internet Security Suite 2006 and AVG 7.5 Free from updating properly, I didn't try with Kaspersky, because Kaspersky has angered me with some of the dumb security settings. I have also tested this old, outdated virus against Avast! and McAffee antivirus programs too, with the same result... all on a basic windows xp machine. good news is, this virus is useless on any NT6 system, seeing as it needs to attach itself to a set of files, most of which are found in windows xp and 2k, and another set that attached itself to win9x files. It wasn't designed to even detect a NT6, therefore it doesn't even see you running a copy of windows.
I don't remember the name of this virus, but It is probably somewhere in my file repositories. I do remember that it was smart enough to attach itself to any data transmitting on port 25 network wise, and can infect networked systems.
Users browsing this forum: No registered users and 2 guests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum
All views expressed in these forums are those of the author and do not necessarily represent the views of the BetaArchive site owner.