current version

[current version]

V12.2.30 is same as v12.2.31, the only difference is in the German upgrade message.

[ESET Password Manager. Lincenses expired.]

Please contact your local customer care on this matter.

[License Activation Errors]

You can drop me a private message with your license key enclosed, however, I'm afraid you fell a victim to fraud and the license belongs to somebody else who didn't intend to sell it. By the way, licenses are non-transferable according to EULA.

We strongly recommend purchasing licenses only from authorized sellers.

[Outlook stops receiving emails.]

If neither of the suggested options worked then it's unlikely that ESET would be the culprit.

[LiveGrid]

You can disable the alert in the Application statuses setup then:

By the way, how do you update the serves if they are completely offline?

[LiveGrid]

Are the servers completely offline, ie. they don't have access to a proxy server providing access to ESET's servers? I assume they are not completely isolated since they can access the ESMC server, are they?

You can disable LiveGrid on completely offline computers in the EFSW advanced setup -> Detection engine -> Cloud-based protection.

[ESET Dynamic Threat Defense: Reaction Time]

It should take 2 minutes at maximum for clients with EDTD to be informed about the malicious file.

[Activation]

You can retrieve your license information via https://www.eset.com/int/support/lost-license/ or contact your local customer care.

[EFS Questions]

24 minutes ago, Rami said:

It works I can open the GUI but before it used to open a GUI icon and never disappear when I close , so it used to stay when I open as Administrator , now when I close it closes ( it works fine ) I want it to stay just for me

This is not currently supported. The icon is either visible to all or nobody.

Quote

the other question is it possible for multiple admins to receive the notification?

I have no clue if it'd be technically possible to display notifications and alerts in the session of several users / administrators.

When you have any requirements, ideas, etc. I'd suggest reporting them via your local distributor who will subsequently pass them to ESET HQ for consideration.

[EFS Questions]

Haven't tested it myself but the help says:

Terminal - No notifications or alerts will be displayed. GUI can only be started by the Administrator. The user interface should be set to Terminal if graphical elements slow the performance of your computer or cause other problems. You may also want to turn off the GUI on a Terminal server. For more information about ESET File Security installed on Terminal server, see Disable GUI on Terminal Server topic.

That said, if gui cannot be started by administrators there must be some issue. It shouldn't be a global problem since this is something that should be covered by QA tests and other users would have already noticed and reported such bug. I'd recommend raising a support ticket with your local customer care.

 

[Outlook stops receiving emails.]

What version of MS Outlook do you use? Do you receive email via MAPI from a MS Exchange server? Does temporarily disabling integration with MS Outlook makes a difference? If not, what about temporarily disabling protocol filtering?

[False positives?]

It's not a false positive:

setup-lightshot.exe\INNO\{tmp}\downloader.exe    Win32/Bundled.Toolbar.Yandex potentially unsafe application

Other files in the installer also show that there's a Yandex toolbar bundled:

elements-eula-tr.rtf         
yandex_browser_setup_ru.bmp  
downloader.exe               
browser-page-ru.rtf          
yandex_logo_en.bmp           
elements-eula-ru.rtf         
browser-elements-eula-tr.rtf
browser-page-tr.rtf          
setupupdater.exe             
yandex_logo_ru.bmp           
browser-elements-eula-ru.rtf
browser-eula-tr.rtf          
browser-eula-ru.rtf          
yandex_browser_setup_tr.bmp  

PUsA detection is optional and is disabled by default. If one needs to use a particular application detected as PUsA, he or she should exclude it from detection by the detection name.

As for the CPU-Z driver, it's not detected at VT because VT doesn't use real-time protection but on-demand scanners to scan files. In this particular case it makes a difference.

[zippyshare.com - HTML/ScrInject.B Trojaner]

I assume it's related to a javascript that downloads ads and PUAs like this

[False positives?]

The detection is correct, the said drivers are detected as a potentially unsafe application which is an optional detection and is disabled by default. CPU-Z had vulnerable drivers.

[Unsecured wifi?]

It's weekend currently. It might be a bug but without discussing it with developers it's impossible to tell for sure. Have you already raised a support ticket and received a ticket ID?

[Not able to install EraAgentInstaller]

Have you upgraded to ESMC (v7) in the mean time and not using ERA v6.x?

[Unsecured wifi?]

Do you have ESET Mobile Security 5.2.11 installed?

[Managing ESET File Security for Linux (v7) with ESMC not possible]

I have newer modules but also have updates from the pre-release update channel enabled:

I would check the ESMC server trace log for possible update errors. You can also enforce update of modules by restarting the ESMC server service.

[site lock - Backlist]

Please read this before you post

Do not report blocked websites
After cleaning a website from malware and taking measures to prevent further re-infection, request a re-check as per the instructions in the FAQ. This forum does not serve as a channel for requesting website re-check or disputing blocks or detections.

 

According to your screen shot, it was taken 7 days ago. The url was unblocked several days ago. Before you report something, please make sure it's still valid and do not rely on old information.

[MSIL/Webshell.C False Detection on Exchange 2010 Servers]

It was a false positive of a detection from April. It's been already fixed.

[Red screen on Windows 10]

Please post a screen shot since it's not clear what red screen you mean.

[Newsmode.me not detected by eset]

It's been blocked just recently. However, the OP seems to have come here to propagate his cleaner; some links and stuff were removed from his post and profile.

[Newsmode.me not detected by eset]

There are not really many AVs that block the site:

[Password protected (777) email attachment]

It's impossible to tell what could have happened when you ran the file. The thing is the payload on servers may change in time, there may be no payload at times, connections to the server may fail, the downloaded payload may be undetected, etc. If running a full disk scan doesn't reveal any threat on the machine, I'd consider it clean.

[Password protected (777) email attachment]

Since the doc file is not detected only by ESET but also by other AVs, it's unlikely to be clean. However, after scanning the file with ESET the malicious macro should have been sanitized and the file should be no longer detected by us (some other AVs may still detect it though).