Jump to content

Rob.Turner

Administrators
  • Content Count

    255
  • Joined

  • Last visited

  • Days Won

    15

Rob.Turner last won the day on March 9

Rob.Turner had the most liked content!

Community Reputation

45 Excellent

About Rob.Turner

  • Rank
    Advanced Member

Profile Information

  • Gender
    Not Telling

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Looks like a fix went out sometime yesterday
  2. Thanks Richie, I've passed this on to the clam team for a fix.
  3. Thank you very much for reporting this Jon. I've successfully reproduced it, and at this point my only advice is to steer clear of win 10 1809. as far as I can MS pulled it after release due to driver incompatibilities and potentially deleting user data when upgrading from previous versions. I was able to obtain a 1809 iso through MSDN and it ended up bootlooping during install of both home& pro win 10 versions (installing to vmware workstation). I had to use a workaround just to complete the OS install: https://luyentap.blogspot.com/2017/10/windows-installation-cannot-proceed.html. After that I was able to install Immunet and repro your bug.
  4. the The FP'ing sig was fixed late yesterday and it's safe to to turn the Clam engine back on, and but please ensure you start a manual clam definitions update too; by clicking he update now button in immunet gui. And that will ensure the sig is updated asap.
  5. confirmed, is defiantly a Clam false positive. Thanks to everyone who reported this. we're reprod it internally and are working on a fix. In the mean time, if you turn off the clam AV engine in Immunet's settings that'll prevent the constant FP notifications and still keep your computer protected with the immunet cloud engine. We'll notify the thread to turn clam back on as soon as the fp is fixed.
  6. Richie is correct - the internet connection icon is a standard windows thing. the Bing image search told your browser to show an image from neilrosenthl.com and your browser went to grab it from 104.27.175.64. According to https://dnslytics.com/ip/104.27.175.64 that ip is hosting 290 domains/websites. likely one of them at one point was hosting something malicious. Though currently neilrosental.com appears to be safe. Looks like a false positive to me. Sorry, our bad on that one. I do have one concern here though. It's common to first notice the internet connection icon after having a random router/modem reboot. I The internet stops working, so you go to your network connections to check your ip/network status and while your poking around the internet connection icon appears out of nowhere when the router/modem comes back online. There are lots of good reasons for a router to reboot itself, but it should be noted that not all vpn connections can survive a router reboot. Some can, some will notify you the vpn closed unexpectedly, and some will just fail silently and your internet activity will automatically re-route over non encrypted public internet. Thanks, RobT
  7. The bios bug Wookiee mentions is usually found with brand name manufactured computers, ie Dell / EMachines/etc. and otherwise we have seen installation issues where users have special characters characters in their Windows user names. e.g ' " , <> ]!@$%^&*()_ Any chance either of those apply?
  8. I think what's your probably seeing is the Immunet *UI* only supports 1 user at a time. The real time virus protection component does protect all simultaneously connected users, but only the first user to launch the UI ( system tray icon / application with the scan now & settings) will appear to be connected. All other users will have Immunet UI's that appear disconnected. Further if the user who has the connected UI logs off or manually closes the Immunet tray icon, the UI connection will be go to the next user who has had the Immunet UI running the longest; and their disconnected UI will switch to connected. Note when a rdp user disconnects their programs are all left in a running state. Including leaving the the immunet UI running, potentially holding the Immunet UI connection. Given the above limitations, what we usually see when the UI appears disconnected in in multi-user environment is that the one Immunet UI connection has passed to an unknown user who disconnected when they were done without actually logging off. If you think this has happened to you The least disruptive way to reclaim the Immunet UI connection is to: 1) login as an admin user 2)start -> run -> "Services" -> stop the Immunet Service 3) open task manger & enable show processes from all users. Then task kill all the sfc.exe processes ( sfc.exe is Immunet's UI process). Note if you get a message from task manager saying sfc.exe could not be terminated it's probably because the Immunet service hasn't been fully stopped yet. 4) Once all the Immunet UI's are closed restart the Immunet Service and then UI and it should appear connected within 30 seconds after both are started. Another approach is to use the task manager to force log off other users who have the Immunet UI / sfc.exe open and then restart the UI on your own session. This approach doesn't require stopping the immunet service. Note though if you log off someone who is actively using he system you can expect them to immediately re-logon and potentially take the Immunet UI connection token again. The last and easiest approach is to restart the machine and be the first to login - note if the machine is set to auto logon at startup then the auto-login user will be the first to login and get the working Immunet UI session.
  9. it sounds like you might have turned on Verbose Tray Notifications. Open the immunet interface and check Settings -> Notification Settings -> Verbose Tray Notifications. When turned on Immunet will popup the message you're seeing whenever it detects a new file on the system, regardless of if the file is clean or malicious.
  10. The last time I tested them together they were compatible (i.e. no bluescreens), but I found the performance of the virtual machine I was testing on unacceptable even after adding exclusions to each AV for the other. At any rte You can safely install both and always then remove one if it doesn't work out. Please let us know your experiences running the two together.
  11. Hi all we traced the original install issue Art started this thread for back to having an apostrophe ' in the computers logon username. Thank you much Art for the install log, it was really helpful in figuring out this bug.
  12. My Win 2k8 was able to update to 6.0.6 successfully through both the Gui interface and by downloading the latest installer from www.immunet.com - However the installer warned me I needed to install windows hotfix https://www.microsoft.com/en-us/download/details.aspx?id=46083 that eventually lead me to: https://technet.microsoft.com/en-us/library/security/3033929.aspx?f=255&MSPPError=-2147217396 It took me a bit to figure out that the hotfix required 2K8 service pack 1 or sp2 installed, which wern't downloading through windows update. After manually installing the service packs, the hotfix successfully installed and I was able to complete the update to 6.0.6
  13. Hi Tim, thank you for the bug report, the CompMgmtLauncher.exe - Ordinal Not Found is a known issue in Immunet 6.0.6 on fully (windows updated) Windows 7 platforms. We are working on a fix.
  14. Sorry, Immunet version updates have to be done manually. Our Fireamp enterprise solution gives you much more control around updates, including version updates that don't require manual intervention.
  15. Tor Browser 7.0.5 and immunet 6.0.2.10582 with default install options for work fine for me. No exclusions required. No issues starting up or browsing with tor. Are you running a tor relay /bridge/etc? I wouldn't be surprised if they needed additional exclusions other than just the tor browser directory
×
×
  • Create New...