Advanced Threat Detection Windows Virtual Machine Validation Tool

[Troja]

Hi all,

has anyone get this work? I downloaded the tool described in KB81094. When starting the file i get an error message and the tools does not start.

First Start validate-vm.bin

root@ATDValidate:/home/admin# ./validate-vm.bin

Net::Telnet not found. Will attempt to install it.

The make command not found. Please install it so that we may install Net::Telnet.

Installed Make

root@ATDValidate:/home/atdadmin# apt-get install make

Reading package lists... Done

Building dependency tree      

Reading state information... Done

Suggested packages:

  make-doc

The following NEW packages will be installed:

  make

0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.

Need to get 396 kB of archives.

After this operation, 1,172 kB of additional disk space will be used.

Get:1 http://ftp.at.debian.org/debian/ wheezy/main make amd64 3.81-8.2 [396 kB]

Fetched 396 kB in 0s (3,288 kB/s)

Selecting previously unselected package make.

(Reading database ... 125081 files and directories currently installed.)

Unpacking make (from .../make_3.81-8.2_amd64.deb) ...

Processing triggers for man-db ...

Setting up make (3.81-8.2) ...

Second start validate-vm.bin

root@ATDValidate:/home/admin# ./validate-vm.bin

Net::Telnet not found. Will attempt to install it.

Net-Telnet-3.04/

Net-Telnet-3.04/MANIFEST

Net-Telnet-3.04/ChangeLog

Net-Telnet-3.04/t/

Net-Telnet-3.04/t/select.t

Net-Telnet-3.04/lib/

Net-Telnet-3.04/lib/Net/

Net-Telnet-3.04/lib/Net/Telnet.pm

Net-Telnet-3.04/README

Net-Telnet-3.04/Makefile.PL

Net-Telnet-3.04/META.yml

Checking if your kit is complete...

Looks good

Writing Makefile for Net::Telnet

Writing MYMETA.yml

cp lib/Net/Telnet.pm blib/lib/Net/Telnet.pm

Manifying blib/man3/Net::Telnet.3pm

Installing /usr/local/share/perl/5.14.2/Net/Telnet.pm

Installing /usr/local/man/man3/Net::Telnet.3pm

Appending installation info to /usr/local/lib/perl/5.14.2/perllocal.pod

./validate-vm.bin: line 48: [: missing `]'

Can't open perl script "validate-vm.pl": No such file or directory

root@ATDValidate:/home/admin#

Third start validate-vm.bin

root@ATDValidate:/home/admin# ./validate-vm.bin

Enter VM IP address: 192.168.x.x

ATD Windows VM validation tool. Version: 2.42807

Testing FTP access...

1a. FTP connect to 192.168.x.x OK

2a. FTP login OK

Can't use an undefined value as a symbol reference at /usr/share/perl/5.14/Net/FTP/dataconn.pm line 54, <> line 1.

root@ATDValidate:/home/admin#

Has anyone a hint for me?

Cheers

[mdnramos]

Hello,

A newer version of the validation tool has been posted to the KB article - McAfee KnowledgeBase - Advanced Threat Detection Windows Virtual Machine Validation Tool - please try this newer version and let us know if it helped.

[Troja]

Hi ,

thanks for the info, i already used this version. :-|

Cheers

[mdnramos]

Hi,

Can you post the output of the following commands:

# uname -a

# perl --version

# perldoc perllocal (if the perl-doc package is not present please install it)

If you can please try and upgrade Perl to version 5.20, I can confirm the validation script you are testing works on my test box with no issues.

[Troja · Accepted solution]

Hi ,

i think that was the missing link. :-)

1) installed Ubuntu desktop 14.x

2) installed perlbrew

sudo apt-get install perlbrew

perlbrew init

perlbrew install perl-5.20.1

3) started the binary file using perl validate.bin

Second option:
chmod 777 validate.bin

./validate.bin

I think installing never versions of perl fixes the problem.

Btw, perhaps updating KB81094 is useful.

Cheers

[mdnramos]

Hi ,

Glad to hear you were able to get it working, I will make sure the KB is updated.

Kind regards,

Marcelo