Problem by BD Engine

[Pars 5]

Hello

Thank You for new version of EAM,

I update EAM to beta 7 and download 120MB BD database, but I think BD engine does not run! my signatures is 2.662.693

I scan more than 400 malware files, no any detect by BD!

[Fabian Wosar 390]

Do you have a BD directory in your EAM\Signatures directory? Have you tried to restart your computer?

[ptup 0]

Hello

I also have this problem already restarted the computer and still the same.

I did a test with 24 in the previous version files and everything was detected, but in version 7 only 7 infected files were detected.

[Pars 5]

Yes. but no any changes.

my system is: Win XP 32 bit

[ptup 0]

Yes. but no any changes.

my system is: Win XP 32 bit

Yes, no any changes.

But my system is Windows 8 Pro RTM 32 bits

[Pawel Smotrys 4]

Same here. Windows 7 x86.

[Fabian Wosar 390]

Again: Do you have the BD folder in your EAM\Signatures directory? How many files does it contain?

[Pars 5]

Again: Do you have the BD folder in your EAM\Signatures directory? How many files does it contain?

901 files (about 118mb)

[ELWIS4745 1]

Ye. I have the same problem. I have folder BD in EAM\Signatures. 901 files, 118 MB.

Windows Xp, SP3. (32 bit).

[Pawel Smotrys 4]

Fabian, this is my BD folder:

OA Premium is present in the system but it doesn't block anything realted to BD or EAM.

No other security software working in RT is installed.

[Fabian Wosar 390]

Do you have a bdcore.dll and avxdisk.dll in your EAM directory? What version does the a2engine.dll have?

[Elise 276]

901 files (about 118mb)

That seems normal, its exactly the amount of files/space I have on XP, and the BD engine runs/detects just fine.

[Pawel Smotrys 4]

bdcore.dll (11.0.1.6) and avxdisk.dll (1.4.0.0) are present, a2engine.dll in in version 3.0.0.561

[ELWIS4745 1]

a2engine - 3.0.0.561

bdcore.dll - 11.0.1.6

avxdisk.dll - 1.4.0.0

[Pars 5]

Do you have a bdcore.dll and avxdisk.dll in your EAM directory? What version does the a2engine.dll have?

Yes,

bdcore.dll: 11.0.1.6 (111kb)

avxdisk.dll: 1.4.0.0 (55kb)

a2engine.dll: 3.0.0.561 (982kb)

[ptup 0]

Do you have a bdcore.dll and avxdisk.dll in your EAM directory? What version does the a2engine.dll have?

bdcore.dll: 11.0.1.6 (111kb):

avxdisk.dll: 1.4.0.0 (55kb):

a2engine.dll: 3.0.0.561 (982kb):

[Pars 5]

by new update is fixed (Signatures\BD\xlmrd.cvd (5936 b)

Databas is 10.207.795

[Pawel Smotrys 4]

OK guys. What have you done? I just got an update and all seems to be fine.

General Information:
Start update: 29-08-2012 15:02:28
End update: 29-08-2012 15:02:38
Elapsed time: 0:00:10
Update successful
Detailed Information:
1 module, 5936 bytes
Signatures\BD\xlmrd.cvd (5936 bytes) - updated

[ptup 0]

But detection remains low compared with version 6.

PS: In version 6 the 24 detects harmful files.

[ELWIS4745 1]

Excellent. Great Support.

[Pars 5]

But detection remains low compared with version 6.

PS: In version 6 the 24 detects harmful files.

Perhaps they were FP by Ikarus! Do you send your files for Analysis?

[ptup 0]

Perhaps they were FP by Ikarus! Do you send your files for Analysis?

False positives can not be. I check in VirusTotal 3 files undetected by EAM 7:

https://www.virustot...8c0e8/analysis/

https://www.virustot...bfc90/analysis/

https://www.virustot...ae22e/analysis/

[Pars 5]

False positives can not be. I check in VirusTotal 3 files undetected by EAM 7:

https://www.virustot...8c0e8/analysis/

https://www.virustot...bfc90/analysis/

https://www.virustot...ae22e/analysis/

Kaspersky and Bitdefender are 2 AVs with Minimum FP.

I see that "punheta mp4.exe" and "best flash games.exe" do not detect by them but "Adele BAIXE AQUI! É GRÁTIS - Não Você Remember.mp4.exe.exe" detected by BD too.

To ensure, quarantine them and send them for analysis team

[ptup 0]

Kaspersky and Bitdefender are 2 AVs with Minimum FP.

I see that "punheta mp4.exe" and "best flash games.exe" do not detect by them but "Adele BAIXE AQUI! É GRÁTIS - Não Você Remember.mp4.exe.exe" detected by BD too.

To ensure, quarantine them and send them for analysis team

I just sent the files to the Emsisoft.

Thanks Pars