Pars

Problem by BD Engine

Recommended Posts

Hello

Thank You for new version of EAM,

I update EAM to beta 7 and download 120MB BD database, but I think BD engine does not run! my signatures is 2.662.693

I scan more than 400 malware files, no any detect by BD!

Share this post


Link to post
Share on other sites

Hello ;)

I also have this problem already restarted the computer and still the same.

I did a test with 24 in the previous version files and everything was detected, but in version 7 only 7 infected files were detected.

Share this post


Link to post
Share on other sites

Yes. but no any changes.

my system is: Win XP 32 bit

Yes, no any changes.

But my system is Windows 8 Pro RTM 32 bits

Share this post


Link to post
Share on other sites

Again: Do you have the BD folder in your EAM\Signatures directory? How many files does it contain?

901 files (about 118mb)

Share this post


Link to post
Share on other sites
901 files (about 118mb)
That seems normal, its exactly the amount of files/space I have on XP, and the BD engine runs/detects just fine.

Share this post


Link to post
Share on other sites

Do you have a bdcore.dll and avxdisk.dll in your EAM directory? What version does the a2engine.dll have?

Yes,

bdcore.dll: 11.0.1.6 (111kb)

avxdisk.dll: 1.4.0.0 (55kb)

a2engine.dll: 3.0.0.561 (982kb)

Share this post


Link to post
Share on other sites

Do you have a bdcore.dll and avxdisk.dll in your EAM directory? What version does the a2engine.dll have?

bdcore.dll: 11.0.1.6 (111kb):

di-2HKS.png

avxdisk.dll: 1.4.0.0 (55kb):

di-2RWF.png

a2engine.dll: 3.0.0.561 (982kb):

di-WFM6.png

Share this post


Link to post
Share on other sites

OK guys. What have you done? :D I just got an update and all seems to be fine.

General Information:
Start update: 29-08-2012 15:02:28
End update: 29-08-2012 15:02:38
Elapsed time: 0:00:10
Update successful
Detailed Information:
1 module, 5936 bytes
Signatures\BD\xlmrd.cvd (5936 bytes) - updated

Share this post


Link to post
Share on other sites

But detection remains low compared with version 6. :(

PS: In version 6 the 24 detects harmful files.

Perhaps they were FP by Ikarus! Do you send your files for Analysis?

Share this post


Link to post
Share on other sites

False positives can not be. I check in VirusTotal 3 files undetected by EAM 7:

https://www.virustot...8c0e8/analysis/

https://www.virustot...bfc90/analysis/

https://www.virustot...ae22e/analysis/

Kaspersky and Bitdefender are 2 AVs with Minimum FP.

I see that "punheta mp4.exe" and "best flash games.exe" do not detect by them but "Adele BAIXE AQUI! É GRÁTIS - Não Você Remember.mp4.exe.exe" detected by BD too.

To ensure, quarantine them and send them for analysis team

Share this post


Link to post
Share on other sites

Kaspersky and Bitdefender are 2 AVs with Minimum FP.

I see that "punheta mp4.exe" and "best flash games.exe" do not detect by them but "Adele BAIXE AQUI! É GRÁTIS - Não Você Remember.mp4.exe.exe" detected by BD too.

To ensure, quarantine them and send them for analysis team

I just sent the files to the Emsisoft.

Thanks Pars ;)

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.