Marcos

It doesn't matter if ekrn is 32 or 64-bit, you wouldn't notice any difference at all if it was 64-bit.

It was a reference to a server known to have recently hosted malware which was blocked. The block has been adjusted slightly so that it's not triggered in this particular case.

Hello, clients in a corporate environment should update from a local mirror without having the username and password entered. Your username and password for update should only be entered in the ERAS update setup provided that clients update from a mirror created by ERA.

When you first connect to a network and choose Home network (ie. a network with sharing and some other services enabled), an authenticated zone will be generated automatically based on certain network parameters (e.g. DHCP or DNS server IP, gateway's IP, SSID,etc). If this parameter changes and the zone cannot be authenticated, you'll be presented the dialog with network type selection.

Since this topic has gone astray, we'll draw it to a close. Everything has been said and explained in this or other related topics.

Does the problem actually go away after temporarily disabling firewall via gui?

It should be just an informative message not causing a communication to be blocked. Resolve the IP address conflict by making sure that each device in the network has a unique IP address assigned.

Make sure HomeGroup support is enabled in the IDS setup and that the other computer's IP address is within the Trusted zone range.

Couldn't it be that your Endpoint was configured to append a tag to all scanned email? By default, this feature is enabled only for infected email but it's possible to enable it for all email which, however, may sometimes cause issues with improperly formatted html email.

For how long did you wait for SysInspector to finish creation of the log? Sometimes it may take several minutes to create it, depending on how many items are parsed.

Upgrade via ERA was first supported by version 4.2.4x. To upgrade older clients, use the Install feature to push a new install package to clients.

Of course, no prestigious antivirus vendor includes malicious files in their products. Doing so would badly damage their reputation and it would be the end of business for such a company.

Ecls doesn't support wildcards.

Yes, that's normal. The necessary modules are 64-bit, however.

Please convey a memory dump from BSOD to ESET for analysis.

This is not an executable but a small data file. I think it shouldn't be a problem to delete it completely.

I'll provide you with a logging version of a module shortly which should shed more light into the issue.

It's a potentially unwanted application, it's not FP. PUA detection is fully optional and it's up to the user whether he or she wants to have this kind of applications detected or not. Having said that, we'll draw this topic to a close. Note: the only communication channel for disputing detections is email as described in the KB article hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

Win32/Urlbot.NAG is a detection from 2011. I'll drop you a pm with further instructions.

Property conflicts do not cause a message to be open from the Draft folder instead of Inbox. If a message is concurrently modified by ESET on a client (e.g. by appending a tag with the scan result) and on the server, the message should appear in the Sync issues / Conflicts folder.

I've installed this package and it was French. The language is dependent on the system language as system dialogs are used in the program.

Would connecting a USB keyboard be an option?

If you use a firewall, make sure communication with ESET's activation servers is allowed. For a list of ESET's servers, refer to this KB article.

Just to make sure, do you have the latest version (1406) of the Antivirus and antispyware module installed and LiveGrid enabled ?

What version of ESET Endpoint Antivirus, MS Outlook and Windows are you using? Does disabling integration with MS Outlook in the advanced setup make a difference?