Jump to content


  • Content Count

  • Joined

  • Last visited

  • Days Won


Everything posted by Marcos

  1. Please create a Procmon log from time when the issue manifests as per https://support.eset.com/kb6308/.
  2. It sounds like various parts of the video are downloaded from a domain that resolves to different IP addresses. Since the DNS cache poisoning detection is disabled by default and enabling it causes FPs for you, I'd suggest keeping it disabled.
  3. Please contact customer care. It's necessary to narrow it down to read or sent email and then use a logging version of the Outlook plug-in to generate logs for perusal.
  4. If you have issues uninstalling ESET, try running the ESET Uninstall tool in safe mode: https://support.eset.com/kb2289/ However, I'd strongly recommend keeping ESET and uninstalling the other AVs.
  5. Problem: Signature validation failing with error 0x800B010C. Solution: Download and run Rootsupd from: http://download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/rootsupd_afc57447f7caadd3253333e35777fcd.exe
  6. If you don't get any advise here, please raise a support ticket with your local customer care.
  7. First of all, make sure that you have ESET File Security 7.1 installed on the server. ESET Endpoint Antivirus is intended for endpoints (desktop machines). Also did you try to delete the scan scan task and create it from scratch directly in the EFSW Scheduler, ie. not via ESMC? If that doesn't make any difference, please raise a support ticket with your local customer care.
  8. Probably import of the root certificate is failing every time it's attempted. Let's wait for a resolution of your support ticket.
  9. Does temporarily pausing real-time protection actually make these warnings go away?
  10. Most likely it happens while attempting to import the ESET root certificate to the trusted root CA certificate store. We'll try to make a tiny change in the code to do it completely silently. You could temporarily disable this option for a test and see if the behavior is gone (don't forget to re-enable it):
  11. Are the machines completely offline or there's a chance to connect them to the Internet through a proxy server with restrictions to ESET's servers only? If the former, you can use the Mirror tool to create a local mirror (https://help.eset.com/era_install/65/en-US/mirror_tool_linux.html) Otherwise use the ESET HTTP Proxy which can be installed either stand-alone or with the ESMC All-In-One intaller. Using an http proxy will save a lot of network traffic and will enable the endpoints to take advantage of streamed updates for instance.
  12. If you have a personal experience with that, we'd be interested in looking into it. Have you personally come across malware that was detected by the said AVs and could be sucessfully executed with ESET installed and the computer fully patched and RDP secured?
  13. I'm afraid this would cause bigger delays when opening the Log files window as all records would have to be counted in all logs. Also if the number of records changed, it would require a re-click on Log files to update the counts.
  14. I can't test it personally since I've been on a mobile phone and limited connectivity. Do you have SSL filtering enabled in Endpoint?
  15. In order for Web Control log records to be reported to ESMC, you need to set warning severity for the appropriate rule. However, make sure that not too many records are reported (e.g. by enabling logging all opened websites), otherwise the enormous amount of data from clients could render the ESMC server unusable.
  16. If you come across unrecognized spam, you can report it to ESET. Blocking IP addrresses is possible only in mail server products, e.g. in the ESET transport agent for MS Exchange.
  17. The firewall troubleshooting wizard can be used only on clients. Before one runs it, the problem should be clearly defined so that the user knows what communication should be allowed.
  18. Did you purchase the license from an authorized seller or from Amazon, ebay, etc.? Please provide your public license ID.
  19. You'd need to uninstall v12.2 and install the v13 beta from the appropriate link received from ESET Centercode.
  20. I would also try disconnecting the machine from network to rule out that somebody else is controlling your machine from a remote pc,e.g. using a legitimate remote admin tool. As itman wrote, we need to know what threat or application was detected in order to advise further.
  21. Does the issue manifest all the time or only sometimes? Does temporarily pausing real-time protection make a difference? If so, please provide a Procmon log time when the issue is manifesting.
  22. We are not aware of any VPN related issues. If you know of any, please post links or describe the issue(s) in detail. Also make sure to report them to your local customer care with step-by-step instructions how to reproduce them. We are not a VPN provider so the problems could easily lie in the VPN you use. Therefore each issue has to reproduced and analyzed before concluding that it's issue on ESET's end. Moreover, we nowhere declared compatibility with particular VPNs. Basically there should be no issues; we too have used VPN in tandem with ESET for years.
  23. ESET should have no effect on displaying icons.
  24. Basically there shouldn't be issues except that ESET will not be able to detect untrusted certificates and this will need to be handled by the firewall. Also my understanding is that you won't be able to make SSL exclusions based on the certificate used.
  25. What ESET product / version and email client does the user use? What protocol is used to download email from the mail server? Does temporarily disabling protocol filtering or integration with the email client make a difference?
  • Create New...