8 Replies Latest reply on Jun 17, 2009 12:38 PM by rbeaudry

    Virus Name Blank

      :confused:

      Hi,

      Can anyone help me out with this.

      I have an ePO 4.0 server installed and is configured as per my requirement. when i generate a report for Virus threat i can see a virus name [BLANK] .The hit rate is very high for this virus. When i drill down to see the description of this virus i can see only Category as Malware.

      Is this is Virus (it is been displayed in the ePO server report). How to fix this issue if this is problem with reporting function in ePO server

      Thanks In advance
      ANDY
        • 1. RE: Virus Name Blank
          tonyb99
          browse down from the dashboard into an event instance and check what the event id is.

          this could be time outs, or unable to scan password protected files or similar, once you know the id you can check this in the filtering and see if you want to report on it or not
          • 2. RE: Virus Name Blank
            Yes its showing Event ID 1059 scan timed out. Could you please ellaborate what does this means . Is this a virus or just that the ePO server was unable to scan and has detected this as a threat with BLANK name.
            :o

            Thanks in Advance
            • 3. RE: Virus Name Blank
              tonyb99
              not a virus just scan timed out

              I have these switched off (lots of people do) as you get a lot over time

              to switch off

              configuration tab
              server settings
              event filtering
              edit button (hidden down on bottom right)
              only selected events option
              remove 1059 tick
              save

              NOTE: this will eventually filter down to agents but you will still get them for a while and new workstations may report these before they receive the policy change. You can edit reports to exclude this event ID aswell in the meantime
              • 4. RE: Virus Name Blank
                Hi Toni,

                Yes it indeed worked when i removed the 1059 events from the server settings i can now see the count is being reducing.

                Thanks a ton
                • 5. RE: Virus Name Blank
                  eobiont
                  I have a lot of these too. They come on files that are very small that VirusScan should not have any trouble scanning in the time provided. Isn't disabling of reporting scan timed out events just sweeping the problem under the rug?

                  Why not ask McAfee why the AV scan is timing out so much on such tiny files.
                  • 6. RE: Virus Name Blank
                    Laszlo G


                    If these files are in use you will receive a time out even if it's 1KB
                    • 7. RE: Virus Name Blank
                      I get the same exact thing. You would think it would be listed as a bug or something by now with all the people who have to go in and turn this alert off.
                      • 8. RE: Virus Name Blank
                        I have adjusted the filters on the canned VSE reports from mcafee to not include events 1059 and 1051. The problem is the filter is not working.
                        The “threat type” for these events is “virus’ and because that is selected in the canned report it seams to be overriding the filter to exclude 1059 and 1051.

                        Has anyone else experienced this and know of a way to get the filter working?