Missing Toems-Service.dll

Frigyes06

Hello!

Could someone send me a Toems-Service.dll?
My install is disfunctional as Windows Defender disappeared that DLL, and the repair option in the installer does not reinstall this file.

Thanks!

Mitri

Anyone else can send that file to me too?

Same thing here! also recently finally figured that's why its not working and Bitdefender deleted it, is there a reason why it kept flagging the file in C:\Windows\MS.NET few 3 days in a row but I guess MS was replacing the file somehow!? but on the 23rd it deteceted and wiped it from the TOEC and TOEMS folders!

will be trying to exclude those folders from the scan, but intresting, its been running great for a while!

AV Logs

July 23rd:
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\d69bde16\bb4fc68a\assembly\dl3\07abaa67\00dd69d6_064bda01\Toems-Service.DLL=>(Embedded 0) Trojan.Generic.38278279 Deleted
C:\Program Files\Theopenem\Toems-API\bin\Toems-Service.dll Trojan.Generic.38278279 Deleted
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\29f2ee37\b754a538\assembly\dl3\a1e70fd8\00dd69d6_064bda01\Toems-Service.DLL=>(Embedded 0) Trojan.Generic.38278279 Deleted after reboot
C:\Program Files\Theopenem\Toec-API\bin\Toems-Service.dll Trojan.Generic.38278279 Deleted

July 21st :
C:\Windows\microsoft.net\framework64\v4.0.30319\temporary asp.net files\root\29f2ee37\b754a538\assembly\dl3\a1e70fd8\00dd69d6_064bda01\toems-service.dll Trojan.Generic.38278279 Deleted after reboot
C:\Windows\microsoft.net\framework64\v4.0.30319\temporary asp.net files\root\d69bde16\bb4fc68a\assembly\dl3\07abaa67\00dd69d6_064bda01\toems-service.dll Trojan.Generic.38278279 Deleted after reboot

July 19: THE SAME as 21
July 18: THE SAME as 21

any suggestions?!

Dserafini

I had this same thing happen and also utilize Bitdefender Gravityzone. Toems-service.dll was flagged as Trojan and deleted from about 100 of my 2000 endpoints. They lost communication. Also had a bunch of files deleted on my toems server unfortunately, I believe they were .net temp directories or something where temporary signature files or stored or something to that effect. I restored my server from a backup after adding some wildcards for files and folders. The server seems fine now but have not been able to successfully check in or communicate with endpoints/agents that were effected. I even tried to replace the toems-services/services.dll on the endpoints and rebooted. No change. @theopenem_admin any advice on restoring those endpoints without touching every one of them to reinstall the agent? Thanks!

theopenem_admin

There isn't much I can do about this right now. The 1.5.7 client should not be flagged as a virus as I have removed the code that was triggering it. However, it is still in the server code until I can find a way around it. Just replacing the Toec-Services.dll on the endpoints should enable them to start communicating again as long as it's the same version.

Dserafini

I appreciate your reply. I will give it another go. Thanks!