CIS virus database fails to update

[Guest]

[captainsticks]

Virus Database updater was working ok until this morning [18th April] now I'm getting the message:

"Failed to update the virus signature database. Please check your internet connection and try again later".

There is nothing wrong with my internet connection.  Is there a fault with the CIS virus database updater service today?

I'm based in the UK.

Hi Fastflys,
There have been some recent update issues in the UK.
Please see Kails post here.
Thanks.

[sabre999uk]

Hi,
Same problem here, a ping to download.comodo.com drops no packets, a tracert gives a result of 32ms & visiting http://download.comodo.com in a browser results in a page with 404 Not Found and the letters nginx on it, I'm using CIS 5.10.228257.2253 Virus signature database 12071 on Windows 7 Professional in the UK & my ISP is Plusnet.

I still get the 404 if I click on the link on the manual update page at http://www.comodo.com/home/internet-security/updates/vdp/database.php

Steve
Addition: I've read the posts in the thread quoted by captainsticks, unfortunatly it doesn't name the ISP's affected.

[kail]

.. I've read the posts in the thread quoted by captainsticks, unfortunatly it doesn't name the ISP's affected.

Be (O2) Broadband (for the members that posted in that cited topic).

[kail]

However.. I just had a quick look at this & I don't believe it's the same issue.

[kail]

Yes, this is something different. I'm also getting 404 on both CAV databases. My ISP is Sky.

GET /av/updates58/sigs/bases/bases.cav?key5sk1=.. ..Fdatabase.php HTTP/1.1
Host: download.comodo.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:11.0) Gecko/20100101 Firefox/11.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en,en-..
Accept-Encoding: gzip, deflate
Referer: http://www.comodo.com/home/internet-security/updates/vdp/database.php
Cookie: key5=..
DNT: 1
Connection: keep-alive

HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 18 Apr 2012 11:33:43 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=1

Code:

C:\Users\kail>tracert download.comodo.com

Tracing route to download.comodo.com [91.199.212.171]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  ROUTER [192.168.0.1]
  2    34 ms    29 ms    29 ms  dr0.hobir.isp.sky.com [89.200.128.38]
  3    80 ms   121 ms    74 ms  vl190.ar8.hobir.isp.sky.com [89.200.135.176]
  4   153 ms    41 ms   157 ms  ge1-0.ar2.lon2.gblx.net [195.66.224.112]
  5    34 ms    34 ms    34 ms  comodo-group-inc.gigabitethernet3-36.ar4.lon3.gblx.net [64.214.145.66]
  6    38 ms    39 ms    45 ms  ae0-164.h6edccsg.hex67.lon.edge.ccanet.co.uk [178.255.81.164]
  7    43 ms     *       44 ms  gr-0-0-0-2012.rmdcccjs2.reyn.mcr.colo.ccanet.co.uk [178.255.81.175]
  8    41 ms    41 ms    40 ms  ae0-252.rmdcccrt2.reyn.mcr.colo.ccanet.co.uk [178.255.81.250]
  9    40 ms    40 ms    39 ms  download.comodo.com [91.199.212.171]

Trace complete.

[grafcom]

Same problem here in the Netherlands!

Any idea?

[Ronny]

Staff is working on it.

[Fastflys]

Virus Database updater was working ok until this morning [18th April] now I'm getting the message:

"Failed to update the virus signature database. Please check your internet connection and try again later".

There is nothing wrong with my internet connection.  Is there a fault with the CIS virus database updater service today?

I'm based in the UK.

Update: My ISP is BT [British Telecom]
As of 13.27 UK time the CIS Virus Updater is still not working.

[WxMan1]

As long as the integrity of your system is unimpeachable and unassailable, CIS is THE best thing since the invention of the ice-cube as it pertains to significance respecting security.

See: http://docking.cis.udel.edu/community/forum/thread.php?id=651

Once I put 2004 mfg'd Crucial PC-133 2-2-2-5 SDRAM into slot 1 and the other two sticks - mfg'd 2008 - into slots 2 & 3 - CIS has worked flawlesly.

I had to work through some corrupted files but CIS works absolutely fine with Win2003 R2.

CIS 5.10.228275.2253 is the BEST.

The ONLY thing one has to watch out for is: those CIS program updates.  They have a tendancy to turn ON anti-Viral scans & re-establish SVCHost back into the 'Windows System Applications' group.

[WxMan1]

I downloaded CIS AV v12061 and installed it in 'Safe Mode'; CIS updated to "current" AV defs updated w/out a prollem.

I did that TWICE because of issues speciific to my machine.

That notwithstanding, each time CIS AV defs updated w/out ANY issue whatsoever by CIS (after restoring from CIS AV v12061.

I just did the CIS AV update to v12105 - CIS AV def were previously not up to date - and I'm good to go.

If one can not downlod the latest CIS AV .Z file there MUST be at the very least a RAM problem.

[Fastflys]

Update: My ISP is BT [British Telecom]
As of 13.27 UK time the CIS Virus Updater is still not working.

Update: CIS techs must have repaired the fault.  Logged in at 08.15 UK time [19th April] and Virus Updater now working correctly.

[Ronny]

Hee is the copy of the Log file from the Tasks tab. On 2-26-12, the return code was DIFFERENT than any other date, and the problem ensued from then on. Hope this helps. HELP!

The issue is solved, by troubleshooting cmdagent.exe and procmon from sysinternals we figured out that the system was generating a 'File Corrupt' message on the downloaded versioninfo.ini
This file resides in \Program Files\Comodo\Comodo Internet Security\Quarantine\Temp\Baseupd

Booting to safe-mode and deleting the \Temp folder of the said location and running a new scan disk resolved the issue.

[Tags:]