Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
1272 Views 1 Reply Latest reply: Jan 27, 2013 6:41 PM by btlyric RSS
apellepa Apprentice 109 posts since
Feb 5, 2009
Currently Being Moderated

Jan 24, 2013 10:01 AM

Strange error

How to debug such incident

 

An internal error occured while processing your request.             

      URL: http://ftp.hp.com/pub/softlib/software2/COL1463/dj-6371-3/3820-rus-win2k_xp.exe
        URL Categories: Business, Software/Hardware
      Current Rule ID: 958983948400417
      Current Rule Name: Anti-Malware: Quarantine IPRange
      Error Message: (14002) Internal antivirus filter error.
   

 

Affected rule

mwg_av_rule.PNG

Trace

 

<node id="958983948400417" string="Anti-Malware: Quarantine IPRange" duration="0" enterTime="1359026013.525" node_type="rule" />

 

- <!--

rule 'Anti-Malware: Quarantine IPRange'

-->

 

 

mwg-core.errors.log:

 

[AV] [AVError] Error in AntivirusFilter: 'Call to external Anti-Malware engine provided error: kExFuResError (http://ftp.hp.com/pub/softlib/software2/COL1463/dj-6371-3/3820-rus-win2k_xp.exe)'.

  • btlyric Apprentice 184 posts since
    Aug 1, 2012
    Currently Being Moderated
    1. Jan 27, 2013 6:41 PM (in response to apellepa)
    Re: Strange error

    Looks like the Avira engine is having problems handling the file referenced in the mwg-core.errors.log.

     

    Do you have a corresponding entry in the mwg-antimalware.errors log file? If so, it should have an error ID that comes from the Avira engine itself.

     

    In Error Handler -> Default -> Block on Anti-Malware Engine errors, do you have a rule that handles Error.ID equals 14002?

     

    You could whitelist the destination site, configure MWG to fail open for Error.ID equals 14002, ask support to verify that the download isn't infected, etc.

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points