Antivirus software and DrivePool with WSE2012

[Slug]

Hello,

 

Is DrivePool compatible with antivirus software on Windows Server 2012 Essentials?  Specifically wondering about AVG Fileserver Edition as it seems reasonably priced, but I am also curious about AV software in general.  This is for my home server with one large 12.7TB pool with duplication enabled.

 

Thanks

[dbailey75]

Hello,

 

Is DrivePool compatible with antivirus software on Windows Server 2012 Essentials?  Specifically wondering about AVG Fileserver Edition as it seems reasonably priced, but I am also curious about AV software in general.  This is for my home server with one large 12.7TB pool with duplication enabled.

 

Thanks

A lot of us are running Eset NOD32 antivirus (not the security suite),  it's one of the few that actually lists WHS 2011 as a supported OS, WSE 2012 is not listed, but I believe Christopher, one of the mod's for this site is running it on his box with WSE 2012. I know he'll respond as soon as he see's the post, and check newegg's weekly emails, you can get it for as low as $10.   

 

Edit-Ok, here's a link to an earlier post, he is using the Eset file Server edition.

 

http://community.covecube.com/index.php?/topic/207-software-i-use-and-recommend/&do=findComment&comment=1559

 

On other thing to mention I tried using Comodo AV, when I first built my WHS 2011 server, and had some issues with drive pool, seems every time I would highlight a file in windows explorer, the file modification date would change, very funky.  Was killing my backup's, lol.  didn't bother trouble shooting, just switch to  ESET.

[Christopher (Drashna)]

Most of the antivirus solutions should works fine with DrivePool. We haven't tested them for compatibility. But the way that DrivePool works should not trigger any issues with any virus scanner.

 

And yes, the AV I run is ESET File Security. Certified for Server 2012(r2) and works great with DrivePool.

 

And the Comodo AV, I remember that... Like I said, *shouldn't*. but the more moving parts you have, the higher the possibility that something weird will happen.

 

 

 

If you want, I can test out AVG File Server Edition, and let you know if I have any issues with it.

[Slug]

Thanks a bunch. I'll look into ESET.

[glugglug]

I am using DrivePool and Stablebit Scanner on Windows 7 Home Premium x64.

 

After reading some recent threads on CryptoLocker, I tried installing Avast instead of MSSE on both my media center machines.  On one it is working OK, On the other (the one with DrivePool), near constant freezes until I uninstalled Avast (and even that required safe mode!).

 

I am thinking maybe it is messing with the underlying pooled drives?  They don't show up in the interface for adding paths to exclude since I removed drive letters from them.  I read that the only AV currently known to block CryptoLocker before it does any damage are Avast and MBAM Pro.  MBAM gives me a lot of false positives though, for example it thinks that several utilities in cygwin, ShowAnalyzer, and anything with keygen in the name are malware.  (You can try renaming any file to have keygen in the name and MalwareBytes will tell you it is a trojan!)

 

 

Is anyone successfully using the latest Avast with DrivePool?  Any special settings required?

[Christopher (Drashna)]

Excluding the entire DrivePool drive may help.

 

As for the cryptolocker info, could you provide links for that?

 

Also, anything that does URL filtering will at least help prevent those from infecting your computers.

ESET works great with DrivePool, and does the URL filtering, infact.

 

 

However, we'll see about testing out Avast, and see if we can fix or work around the issue.

 

Regards

[glugglug]

The first place I read about CryptoLocker was here: http://www.reddit.com/r/talesfromtechsupport/comments/1p5n67/why_the_local_stores_are_out_of_moneypaks/

 

There is a link to this thread with more info in the comments there: http://www.reddit.com/r/sysadmin/comments/1mizfx/proper_care_feeding_of_your_cryptolocker/

 

Yeah, I know it is only confirmed to be spread through e-mail attachments and Zeus botnet.  After receiving spam e-mails from several family members including my wife who fell for fake oauth phishing scams to collect their e-mail login info, I am not fully trusting that no one will run e-mail attachments, or that there won't be copycats with more clever propagation mechanisms.

 

For now I am running MSE + MalwareBytes Pro, with exclusions added for the false positives.  And locked most directories to only allow administrators write access.

Surprisingly both AV apps seem to work OK together, and if I disable MSE, the action center complains there is no antivirus.

 

I saw in another thread that you mount the drives making up your pool in an empty folder, and went and did that to add exclusions for MalwareBytes & MSE that way.  Haven't tried the same idea with Avast to see if that stabilizes it.   The PC is also the whole-home DVR, so the opportunities to try that kind of thing are limited.

[Christopher (Drashna)]

Well, I'm not sure how reliably Reddit is... To be blunt, I'd never site them as anything more than less than reliable...

 

As for the cryptolocker stuff...

http://msmvps.com/blogs/bradley/archive/2013/10/24/so-is-cryptolocker-really-that-bad.aspx

http://msmvps.com/blogs/bradley/archive/2013/10/28/what-rules-would-you-like-to-be-added.aspx

 

The group policies should work on non-domain computers too.

 

And eset definitely seems to block at least some of the URLs for the virus exe.

 

 

 

And as for Security center, it should let you "say" that you have an AV solution running and disable that warning.

 

 

As for the folder thing, you can keep the drive letter and do the folder mount thing at the same time. it's not "one or the other" at all.

http://wiki.covecube.com/StableBit_DrivePool_Q4822624

[Slug]

Well, I got ESET NOD32 ver 6 2013 edition from newegg onsale.  Says it's compatible with windows 8 and home server.   Won't install on server 2012.  Gives message that not intended for server operating systems or some such nonsense.  Anyone know how to force an install?

 

Thanks

[Christopher (Drashna)]

Edit the MSI file is the only way that may work....

 

But if this is for 2012... I'd recommend getting a refund (or install it on another machine), and look at ESET File Security. It's certified for Server 2012, and "extensively tested" by me. And it's a bit cheaper (or at least around the same price as NOD32).

 

http://www.eset.com/us/business/products/file-windows/

[dslabbekoorn]

Been using Symantec Endpoint Protection on my WSE2012 box with a 12 TB pool, no problems in over 3 weeks.  Media streaming works great and access to all drives and the pool is normal.  I have turned off the Symantec firewall to prevent network problems as some members of the Symantec forums have suggested.  Didn't have issues before, but didn't want to take any unessisary chances and I don't need another firewall behind my hardware one.  Fully supports Windows Server 2012 and installs without problems, if a bit long install (took about 5 minutes).  Updates and scans automatically, you can get it for server only or use it for all your clients as well (of course at additional cost)  relativly reasonable pricing for one machine if you shop around.

 

Info link: http://www.symantec.com/business/support/index?page=content&id=HOWTO81091