Marcos

We have come across numerous cases when issues began to manifest after installing ESET but the root of the problem was elsewhere. It used to be either a badly written 3rd party software, a bug in the software and at least 2-3 times it was a bug in Windows itself.

In a few weeks the firewall developers are going to pay visit to Microsoft and inquire them as to why they think the issue is caused by ESET. It's not obvious from the dumps that ESET is the culprit.

First of all, let's make sure you're using a correct product. You've mentioned ESET Internet Security but this is for home users and cannot be managed by ERA. If you have more than 5 licenses and want to manage ESET from ERA, make sure that you install ESET Endpoint Security. If you actually have EES installed, I'd suggest running the firewall troubleshooting wizard after a connection has been blocked. The wizard will allow you to create the appropriate allowing rule with a few clicks. You can subsequently update the ERA policy which is applied to Endpoint running on the workstations.

I would say the best course of action would be contacting Customer care in your country and explaining them the situation. They will probably change your password for updates so a subsequent re-activation of your ESET product with your license key (found only in the registration email you should have received after purchase) will download the new U/P and thus prevent other installations from updating.

Maybe you've created a blocking rule for the system disk. I would recommend removing all blocking rules, clicking Populate in the Device control rule editor, creating an allowing rule for the system disk, if detected, and keeping the rule on the top.

Endpoint does not install on servers. You should install ESET File Security instead.

I don't understand. It's not an issue those records in the log as it seems to be how ELAM works according to our investigation. Don't see problems where there aren't any What I wrote is that we would look into it deeper and try to find a way how to minimize the number of records that are logged. Since this is not any real issue and the feature correctly works as it's supposed to, the task isn't treated with priority and we continue working on high priority tasks.

What error do you get when you attempt to install EIS? Please drop me a pm with the output archive generated by ESET Log Collector attached. For instructions, see my signature.

First of all, please uninstall v9 and download and install v10.0.386 from ESET's website. In the advanced update setup - update section, you can switch to pre-release updates to see if the problem persists with the latest version and modules. I assume it's a kind of archive which causes issues while unpacking so we'll have to narrow it down to the troublesome file then.

137.135.12.16 is the IP address of the EDF server according to http://support.eset.com/kb332/. Please generate a Wireshark log so that at least two subsequent connection attempts are captured. When done, upload it to a safe location and pm me a download link. Also include the output from ESET Log Collector (see my signature for instructions).

If it's not possible to uninstall ESET in a standard way, run the ESET Uninstall tool in safe mode.

Please drop me a pm with ELC logs attached. For instructions, see my signature.

Probably something's wrong with the WMI repository. You can try the following: 1, Run "ecmd.exe /registeravsoft" in the ESET install folder with elevated administrator rights and restart the computer. 2, Rebuild the WMI repository as per the instructions at https://blogs.technet.microsoft.com/askperf/2009/04/13/wmi-rebuilding-the-wmi-repository/

It indicates settings different from default values.

A reboot is required when drivers are updated. Without a reboot, old drivers are loaded which may cause issues with newer version of the program.

Parental Control blocks access to websites by categories set by parents. It does not control applications.

The latest version is v10. It's downloadable from ESET's website and features several improvements to better protect you from malware, such as Ransomware protection, Script scanner, Antimalware Scan Interface support and Home network protection (ESS/EIS). It also contains many bugfixes and improvements under the hood.

You can download and install ESS v10 but not ESS Premium which also includes Data encryption and Password manager features. As of v10, ESS was replaced by ESET Internet Security, however, existing users of ESS can still renew their license and use ESS if they want to take advantage of Anti-Theft but don't need the new additional features.

I've asked developers to look into it. In the meantime, temporarily enable advanced personal firewall logging in the advanced setup -> Tools -> Diagnostics, restart the computer and wait until the mentioned communication occurs. After allowing it, stop logging and collect logs with ELC (see my signature for instructions). When done, drop me a pm with the generated zip file attached.

Does the problem persist after a computer restart? If so, drop me a pm with logs from ELC attached (see my signature for a link to instructions).

Do you have the latest version of EFSW 6.4.12004 installed which has support for Windows Server 2016 added?

The same problem as above. Your v10 attempts to download v9 updates. Please try switching to pre-release updates in the advanced setup and click OK. You can then switch back to regular updates. Should the problem persist, uninstall v10 and install it from scratch.

Couldn't it be that you have HIPS set to Smart mode? It's not suitable for environments where you don't want to make decisions about suspicious operations and manually select an action. Switch it to Automatic mode.

ESET File Security protects the file system on servers. To scan email on MS Exchange, you need to install ESET Mail Security for Microsoft Exchange.

Please generate a Process Monitor log from the time when the issue occurs for further analysis. When done, compress it and send it to me via a pm together with the output from ELC. See my signature for links to the appropriate KBs with instructions.