Technical Support

Need help?

 

AMSI detection technology issues with Adaptive Defense products

Information applies to:

Products
Panda Adaptive Defense 360 on Aether PlatformPanda Adaptive Defense on Aether Platform
Panda Endpoint Protection on Aether PlatformPanda Endpoint Protection Plus on Aether Platform

Issue Status
Tracking ID: WGUA 2246
Status: Resolved
Type of solution: Hotfix


Symptoms
AMSI detection technology is disabled and not working properly with Adaptive Defense products. If you want to verify that the AMSI technology is working properly, open a Powershell window and type in this command:

Write-Output "PANDA AMSI TEST FILE.

Solution
Apply the available hotfix on the affected endpoint.

  1. Download and save the hotfix file to the endpoint:
    hf-wgua-2243-2246-waconf-amsi-wsc.exe
  2. Double-click the downloaded file.
  3. The hotfix installation does not require restarting the computer. However, under certain circumstances, you may be prompted to restart for the hotfix to be fully applied. If you cannot restart the computer right away, select No when prompted. This postpones the application of the hotfix until the next system restart.

    Note: To download an unattended or silent version of the hotfix, click here. The hotfix is applied after the next system restart.

Release Notes
Next, find all the changes the hotfix includes.

Affected Versions

  • v8.00.21.X.
  • From v8.00.22.0010 to v8.00.22.0022.
To see your Adaptive Defense product version, see this article.

File Details
The hotfix updates the following file:

File nameLocationFile VersionModified DateHotfix to be included in future versions?
WAConf.dllC:\Program Files (x86)\Panda Security\WAC\WAConf.dll (8.00.21.X Protections)4.6.17.4November 15th, 2023Yes v8.00.22.0023
WAConf.dllC:\Program Files (x86)\Panda Security\WAC\WAConf.dll (8.00.22.X Protections)4.6.18.3November 14th, 2023Yes v8.00.22.0023


Verify Hotfix Application
To confirm the correct application of the hotfix, check the file version (in File Details section) or else, verify the values of these Registry keys:

32 bits Architecture64 bits Architecture
Registry KeyValueRegistry KeyValue
HKEY_LOCAL_MACHINE\SOFTWARE \Panda Software\Setup\Hotfix history\HF_WAConf_AMSI_WSCRevision [REG_DWORD] 1HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_WAConf_AMSI_WSC

[REG_DWORD]

1

HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_WAConf_AMSI_WSC

Result [REG_DWORD]

0 = Success
1 = Not Applied 2 = Error
9 = On Reboot Operation

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_WAConf_AMSI_WSC

[REG_DWORD]

0 = Success
1 = Not Applied 2 = Error
9 = On Reboot Operation

Help nº- 20231229 700176 EN
ALWAYS ONLINE TO HELP YOU TWITTER FORUM
ALWAYS ONLINE TO HELP YOU TWITTER FORUM