Security Compliance

Anti-virus detected a malicious file in the Patch Manager Synchronizations folder

AV detected a possibly malicious file in Patch Manager Synchronizations folder

First published date

10/23/2018 1:20 PM

Last published date

10/23/2018 1:20 PM

Overview

On the SolarWinds Patch Manager Primary Application Server, the anti-virus software detects a virus and displays the following message: 

The file was found in a folder location on the primary patch manager machine....\synchronizations\XXXXXXXX.xxx.zip.

Product section

Patch Manager

Cause

The virus detection may be a false positive detection. The anti-virus software may have identified the ZIP file as a malicious file due to the file name. 

Resolution

Submit a ticket to SolarWinds Technical Support. In the description, include the following information: 

  • A copy of the file saved in a password-protected zipped folder.
  • Print screens of the anti-virus logs that include:
    • Detection time and date
    • Threat detection name
    • File name
    • The hash of the file (if possible, most cases this will be in the av logs as well)
  • Print screens showing the anti-virus About page for the  that is in use, with information of: 
    • Anti-virus software name and version
    • Engine version
    • Pattern version

Additionally, contact the anti-virus vendor technical support to verify if the ZIP file contains a virus.