Now antivirus is found HEUR:Backdoor.MSIL.Agent.gen on server Exchange2013 we need to fixed [moved]

[Binlie]

hi we need to you help? Now antivirus is found HEUR:Backdoor.MSIL.Agent.gen on server Exchange2013 we need to fixed ,

 need to you help solution for fixed it , now the problem session to clean many log on server maybe to future problem event to clean before broken o

n server 

[Binlie]

after we update version kespersky endpoint security 11.4 up to 11.6 we found on server,

and the license is corporate  total 1200 license , please to solve and how to fixe this

[Nico Strauch]

first please don’t install KES on Servers - use Kaspersky for Windows Servers instead - espeacially terminal servers (performance and stability reasons)

second check this: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/

third update your exchange to a supported version

 

[Binlie]

what happen, now no way solution, because this case if don’t install KES the server is not protect anything of virus , and now we install already KES has remove to log all time and have many. 

[Nico Strauch]

KES is designed for desktop systems, not servers - it works on servers, but it’s not a good idea

always use the correct / intended solution for your problem

https://support.kaspersky.com/ksws11#downloads 

 

did you do a full scan on your server?

did you remove found files?

did you check the microsoft article and checked your server for indicatrors of being hacked?

is your server patched completely?

 

for further / better qualified help i suggest opening a support ticket with kaspersky