Good day and thank in advance for any help.

As object, I've disabled vBuster from my FPE, both updates and scans.

I have also set "update once" on the scheduling for it (even if it's disabled). Sadly It still keeps sending me an email every our telling me vBuster is unable to update! When I call for an "Engine Summary " it correctely reports that Updates are disabled and scans too. 

I have also restarted fpe services and it is at last rollup. 

If anyone has an idea on how to solve It would be greatley appreciated.

Thanks again and kind regards

Francesco

Hi,

can you please run the following commands in a FSE management shell and post the results here:

Get-FseEngineManagement

and

Get-FseSignatureUpdate | fl engine,enableschedule

Greetings

Christian

The first command output is:

OverrideAutomaticManagement : True

OnDemandEngines : <Microsoft, Karspersky, Norman, Authentium>

RealtimeEngines     : <Microsoft, Karspersky, Norman, Authentium>

ScheduledEngines  : <Microsoft, Karspersky, Norman, Authentium>

TransportEngines   : <Microsoft, Karspersky, Norman, Authentium>

The second one has all engines set to TRUE on EnableSchedule BUT VirusBuster which is:

Engine: VirusBuster

EnableSchedule: False 

It seems correctely disabled but It kept sending emails all night .

 

• Edited by Francesco Giampaolo Tuesday, December 11, 2012 9:07 AM

The first command output is:

OverrideAutomaticManagement : True

OnDemandEngines : <Microsoft, Karspersky, Norman, Authentium>

RealtimeEngines     : <Microsoft, Karspersky, Norman, Authentium>

ScheduledEngines  : <Microsoft, Karspersky, Norman, Authentium>

TransportEngines   : <Microsoft, Karspersky, Norman, Authentium>

The second one has all engines set to TRUE on EnableSchedule BUT VirusBuster which is:

Engine: VirusBuster

EnableSchedule: False 

It seems correctely disabled but It kept sending emails all night .

 

• Edited by Francesco Giampaolo Tuesday, December 11, 2012 9:07 AM

Hi,

ok the output looks fine and the VirusBuster engine is disabled for the scanjobs and updates. That's strange.

I would try to restart the whole server to make sure that there is no old configuration stuck in one service.

If this doesn't help you should open a case with Microsoft to fix this.

Greetings

Christian

I ve also restarted the services. Same old story.

Hey , 

I Suggest You to Check updates schedule job  - Signature Redistribution Jobs :

Please Notify Me if you allready check it 

It seems that restarting the whole server solved the problem.

A great thank you to everyone !

Francesco

I am seeing this exact issue on 16 different servers accross 2 different customers

I have had the enginge disable since December 2012 and have never had an issue and then all of a sudden this week VBuster has started trying to get updates on all of our servers

I have tried the above steps and cant find any issues, cant really see rebooting all of the servers as a viable solution!

Anyone got any ideas?

Hi,

check the configuration with the Powershell commands given in the following article:

http://www.groeby.net/?page_id=92

Greetings