Marcos

Why the path ends with a backslash and slash? Use either a relative path, e.g. mirror or an absolute path in the form c:\mirror.

Please follow these instructions for submitting suspicious files to ESET for analysis.

Hello, the only issues with Malwarebytes Pro were observed on Windows XP when the system hung after connecting a USB disk. We provided Malwarebytes with more information about the issue and informed them what they should fix but until now we haven't heard from them whether or when they are going to fix it. There's at least one vendor of such troublesome software who already issued a fix several months ago.

The website no longer contains the malware detected in the past. It will be unblocked in the next update. Next time, we recommend reporting blocked websites to ESET as per the instructions here.

Dump files are generated when ekrn crashes. If a computer crashes with BSOD, you need to look for the dump created by Windows, ie. by default c:\windows\memory.dmp.

Installation via the above mentioned batch file worked fine on Windows XP. Couldn't it be a problem of rights / UAC as administrator rights are required for installation?

To date, the following drivers have been identified to cause lockup issues on Windows XP when used concurrently with ESET products: %windir%\system32\drivers\wavxdmgr.sys 06.06.00.066 (WAVE EMBASSY® Security Center) %windir%\system32\drivers\InCDfs.sys 5.9.10.0 (Nero) %windir%\system32\drivers\sandbox.sys 15/6/2011 (Agnitum Outpost Firewall) %windir%\system32\drivers\mbam.sys (Malwarebytes paid version) %windir%\system32\drivers\PDFsFilter.sys (PerfectDisk OptiWrite Filter Driver) %windir%\system32\DRIVERS\YahooStorage.sys %windir%\system32\DRIVERS\xlkfs.sys (Easy File Locker) %windir%\system32\DRIVERS\PCTCore.sys (PC Tools Kernel Driver Suite) %windir%\system32\DRIVERS\FSPFltd.sys (FSPro Labs My LockBox 2) If you experience lockup issues after installing ESET NOD32 Antivirus or ESET Smart Security on Windows XP, check for the presence of the aforementioned drivers. If found, rename the driver in safe mode or uninstall the troublesome software to see if it resolves the issue. Should the problem persist, generate a complete memory dump from the point the issue occurs as per the instructions here. To enable manual generation of memory dumps, right-click this link, save the file on the disk and run it with administrator privileges. Once you have generated a memory dump, contact Customer care or an ESET moderator for further instructions.

This option will be added in the next v7 beta build that should be available for testing soon.

No probs here. Make sure real-time protection is enabled and v7 reports to Action Center fine.

There's no server displayed because no client has connected to the ERA Server yet. If you install a client locally and configure it to report to ERAS on localhost, will it appear in ERAC?

Yes, it works that way for security reasons. If it was possible to import configuration from xml files from the command line, malware could easily misuse it to disable the protection modules.

Passwords are not stored within the configuration xml for security reasons; this is a deliberate behavior.

The command line switches control the behavior of the msi installer, not the program itself. After upgrading to a newer version, a notification suggesting a computer restart is always displayed in the main window. Until the computer is restarted, old binaries will be used, hence a restart should be performed as soon as possible.

This is not a bug but a feature. Missing Windows updates are not supposed to change protection status, it's indicated by an tray icon with an exclamation mark.

ESET Endpoint Antivirus does not intervene in network communication as it doesn't contain an NDIS driver at all. Only HTTP and POP3 protocols are checked at WFP level.

If you go to Setup -> Network -> View temporary IP address blacklist, are there any IP addresses in the list?

Try downloading the latest installer from ESET's website and installing it over the current version to see if it ends with an error, too.

Please post a few records from your firewall log here. As for the ICMP flood attack, v7 should allow you to add the router's IP address to the exception list upon detection of the attack.

If there are resources available for developing a plug-in for other than Microsoft email clients, we'll first focus on Mozilla Thunderbird ESR. Of course, it also depends on the demand; if only a few users were to benefit from a particular plug-in, it wouldn't be worth spending months on research and coding.

If files are not locked by the OS or another application and you have read permissions, they would be scanned fine.

Isn't the tablet running Windows RT for ARM processors?

The recommended mode is standard cleaning used by default.

Please reproduce the problem while capturing operations using Process Monitor. Then rename / move local.db in safe mode and repeat the same (with the same app). Next compress the 2 logs and local.db, upload the archive to a safe location and PM me the download link. If necessary, I can provide you with access to our ftp server.

You can use strict cleaning mode if you want to have any files cleaned automatically without asking, regardless of whether it's a system file, archive also containing clean files or a file infected with a virus for which cleaning is not supported yet.

ESET provides only quality solutions to users. Yeah, we could develop a simple sandbox within a few months and many people would be excited, but what would it be good for if every other malware could circumvent it. Developing a quality feature requires a lot of time for research, coding and testing. Although there are quite many sandbox solutions available, you could count the really good ones on one hand. On the other hand, Advanced memory scanner significantly improves protection against new born malware and so does another new feature to be introduced in future v7 builds.