-
Posts
37,944 -
Joined
-
Last visited
-
Days Won
1,504
Everything posted by Marcos
-
ESET Windows home products versions 10.1.204 have been released
Marcos replied to Samoréen's topic in ESET NOD32 Antivirus
This has been already fixed in newer versions v10.1. An update to a newer version will be downloaded automatically soon. -
ESET wouldn't protect you against WannaCry before May12
Marcos replied to novice's topic in ESET NOD32 Antivirus
Did you also read https://www.mrg-effitas.com/eternalblue-vs-internet-security-suites-and-nextgen-protections/? You would have found out that ESET was one of 3 products to have proactively protected against malware exploiting the EternalBlue vulnerability. WannaCryptor files were gradually blacklisted in LiveGrid on May 12 so running a test with an older engine on an offline computer would not reflect real-world protection of users. Also the fact that we've been reported only 2 cases of files encrypted by WannaCryptor, one of which was from a user with an old Endpoint v5, says something. -
Unable to Update Clients RA
Marcos replied to Tim IV's topic in ESET PROTECT On-prem (Remote Management)
Do you mean that if you navigate to Admin -> Installers -> Create all-in-one installer and select Product, there are only products for Linux listed even if no filter is enabled? , -
Check OS Patch Level
Marcos replied to dgillespie's topic in ESET PROTECT On-prem (Remote Management)
I don't think it's possible. Plus there are several updates (I reckon different ones for certain OS) and the fix is part of rollup updates too. Haven't checked them out but the following updates are said to be related to MS-2017-0144: KB3205409 KB3210720 KB3210721 KB3212646 KB3213986 KB4012212 KB4012213 KB4012214 KB4012215 KB4012216 KB4012217 KB4012218 KB4012220 KB4012598 KB4012606 KB4013198 KB4013389 KB4013429 KB4015217 KB4015438 KB4015546 KB4015547 KB4015548 KB4015549 KB4015550 KB4015551 KB4015552 KB4015553 KB4015554 KB4016635 KB4019213 KB4019214 KB4019215 KB4019216 KB4019263 KB4019264 KB4019472 KB4015221 KB4019474 KB4015219 KB4019473 -
Unable to Update Clients RA
Marcos replied to Tim IV's topic in ESET PROTECT On-prem (Remote Management)
What version of ERA server do you have installed? Please check the About window and post the version number. -
ESET wouldn't protect you against WannaCry before May12
Marcos replied to novice's topic in ESET NOD32 Antivirus
V10 is indeed much better. However, including antiransomware does not make it the first perfect solution that would detect 100% of threats and ransomware. If there was a security solution that would detect all threats while keeping the number of false positives very low, it would make no sense to updating security software on a regular basis. Also see https://www.mrg-effitas.com/eternalblue-vs-internet-security-suites-and-nextgen-protections/. -
This is unlikely to be FP. Please continue as follows: - enable advanced firewall logging in the advanced setup -> Tools -> Diagnostics - restart the computer - reproduce the detection - stop logging - collect logs with ELC as per the instructions linked in my signature. When done, upload the generated zip archive to a safe location and pm me a download link.
-
ESET wouldn't protect you against WannaCry before May12
Marcos replied to novice's topic in ESET NOD32 Antivirus
ESET has protected unpatched systems from exploiting the CVE-2017-0144 vulnerability since approx. April 25. As for detection of malware samples, we reacted quickly to it and the detection was added in a morning update 15403 (in-memory detection) with file detection following in update 15404. -
Unfortunately, the description of the issue is quite vague so we have no clue what the issue is. Please elaborate more.
-
What do you mean by disabling the device?
-
No. Both we and Dropbox must make changes in our apps. We're in touch with Dropbox developers regarding the issue.
-
Offline Repository, why all languages
Marcos replied to Philipp's topic in ESET PROTECT On-prem (Remote Management)
As I wrote, currently only the whole repository can be mirrored. If possible, use ESET's repository with an HTTP Proxy for caching downloaded files. -
Agent can't connect to ERA
Marcos replied to LukaSolone's topic in ESET PROTECT On-prem (Remote Management)
Could you please attach C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html ? -
Offline Repository, why all languages
Marcos replied to Philipp's topic in ESET PROTECT On-prem (Remote Management)
There are plans to improve this but the required changes are not trivial. Currently only a complete repository can be created. However, you can use an HTTP proxy through which clients would download updates and installers. Once a particular file has been downloaded, it will be served from cache for other clients requesting it. -
ESET Webcontrol - Blocking Exchange and Webservers
Marcos replied to schuetzdentalCB's topic in ESET Endpoint Products
Please provide an unfiltered Wireshark log from an attempt to open a not recently visited website (to avoid using cached results). There might be an issue receiving TXT DNS responses in your environment. -
Please create and provide us with logs for perusal as follows: 1, Open the advanced ESET setup, navigate to Tools -> Diagnostics and enable advanced update engine logging. 2, Run manual update. 3, Collect logs with ELC as per the instructions linked in my signature. 4, Upload the generated zip file to a safe location and pm me a download link. If the zip file is smaller than 2 MB, you can attach it directly to a pm.