AaaS (Antivirus as a service/ Virustotal) in Process Explorer and Autoruns from Microsoft Sysinternals suite is not functioning for 2-3 days !!! Kindly resolve this issue please.

Aneeq Ahmad 6 Reputation points
2020-12-21T13:15:23.073+00:00

49935-zoomit1.png

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,087 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michael Taylor 48,046 Reputation points
    2020-12-21T15:23:21.673+00:00

    Sounds like a firewall issue on your side or perhaps a TLS-related issue. Virus scanning is working for me and unless you've updated the executables then it clearly isn't a software change. I would recommend you have your network team monitor traffic to see if it is being blocked. Could also be a change to TLS 1.2 for the remote site.

  2. Tomasz Z 1 Reputation point
    2020-12-23T14:28:29.33+00:00

    @Michael Taylor It is not a firewall issue as scan results for some processes are retrieved from virustotal.com correctly. It looks as if Process Explorer was trying first to send whole files to virustotal instead of sending hashes first. I can see 'scanning file' action on the files which, when you click on them, were sent hours or days before. And then, after a while, I see the 'Operation timed out result' or I see the scan result which was done seconds ago. That, I believe, proves my hunch that Process Explorer is sending whole files first instead of sending hashes.