Marcos

Administrators
 View Profile  See their activity

  • Content count

    11,057

  • Joined

  • Last visited

  • Days Won

    498

Marcos last won the day on April 19

Marcos had the most liked content!

Kudos

2,225 Master

See kudos

Profile Information

  • Gender
    Not Telling

Recent Profile Visitors

9,101 profile views
  1. The FP has been fixed and update resumed.
  2. voLwy liked a post in a topic: JS/Retefe.T trojan from SkypeBrowserHost.exe
  3. Unfortunately without a proof we cannot comment on it. Of course, no antivirus detects 100% of all threats, especially when it comes to scripts. And blocking all powershell scripts just because they could be misused is not a good solution either.
  4. Please see my comment above. Updates were stopped and the detection will be removed momentarily.
  5. There are several layers that could detect such threat: 1, Detection by a signature. 2, Web access protection if the powershell script is downloaded from the Internet. 3, AMSI scanner upon execution of powershell. 4, Advanced memory scanner if the payload is a file that is executed. The question is if the payload does something really malicious. Please contact samples[at]eset.com and provide details.
  6. Thanks but it's not needed. We have got some examples from the LiveGrid feedback system.
  7. Appears to be FP. We've stopped offering the latest update for now.

  8. Device Control Whitelist

    Marcos replied to Christian Stück's topic in ESET Remote Administrator

    Does the page https://help.eset.com/era_admin/65/en-US/index.html?admin_pol_how_policies_are_applied.htm help understand how policies are applied?

  9. Can I use my License after reinstalling Windows?

    Marcos replied to Classifier_66's topic in ESET NOD32 Antivirus

    You can remove the license from unused device(s) via the License manager and then use to activate ESET after you reinstall the OS and install ESET.

  10. Can I use my License after reinstalling Windows?

    Marcos replied to Classifier_66's topic in ESET NOD32 Antivirus

    Yes, you can use your license key to activate ESET. You can then remove the license from the former computer via the license manager at my.eset.com.
  11. Christian Stück liked a post in a topic: Device Control Whitelist
  12. I assume that creating a filter for Active threats -> Count >= 1 should do the trick and only active threats (ie. those that could not be cleaned / deleted for whatever reason) should be included in the report then.
  13. Please gather logs with ELC and provide me with the generated archive if you would like me to check your ESET's configuration. The log you've provided was generated by Process Monitor.
  14. If you can't evaluate if a particular communication is good or bad, I'd strongly suggest using automatic mode without any custom rules. Otherwise it could happen that you block a legitimate communication which will cause issues with the operating system or some applications.
  15. Peter Randziak liked a post in a topic: Eset Internet Security v11.0.159.9 update to v11.1.42
  16. Peter Randziak liked a post in a topic: Eset Internet Security v11.0.159.9 update to v11.1.42
  17. Peter Randziak liked a post in a topic: In- depth scans v 11.0.59.9
  18. Peter Randziak liked a post in a topic: Apache http proxy
  19. badzydy007 started following Marcos
  20. badzydy007 liked a post in a topic: Malware? As.eu.angsrvr.com
  21. I don't see anything wrong with that. As long as the LiveGrid feedback is enabled, it is normal that nfi files may be created in the charon folder. Please provide me with the nfi file for perusal.
  22. In-depth scans doesn't use Smart optimization by default and scans every file you have on a disk. Try enabling Smart optimization in the In-depth scan profile; the scan time should be reduced quite a lot.

  23. Malware? As.eu.angsrvr.com

    Marcos replied to Antonh's topic in Malware Finding and Cleaning

    Are you getting the pop-up only when launching IE or other browsers as well? Please provide me with logs collected by ELC to start off.