Marcos
-
Posts
36,133 -
Joined
-
Last visited
-
Days Won
1,439
Posts posted by Marcos
-
-
First, we would like to thank the user Daren for spotting and reporting this unusual communication to LiveGrid, as well as for reporting it to this forum. We can confirm that anonymized domain statistics (statistics about domain and their IP addresses performed by the client) were indeed sent to us despite the fact that this functionality had been switched off. This was due to a flaw in an update on 2019.3.25 at 10:25 CET.
The user report triggered an immediate investigation by ESET, and on the afternoon of March 26th at 15:03 CET, LiveGrid servers were adjusted to no longer receive the statistics. Two hours later, with the release of update 1549.3 of the Antivirus and Anti-Spyware scanner module, the issue was fixed.
We would like to apologize for the behavior of the scanner and respect the wishes and options our users make in the settings of our products. Although the statistics sent were anonymized at all times, we immediately removed any and all data that may have been collected in error. The users’ privacy was not affected.
-
Please report such PDF files as per the instructions in the FAQ section on the right-hand side of this forum.
-
Please contact the partner / seller from whom you purchased your license. Since you are from Argentina, you probably made the purchase through https://www.eset.com/ar/.
I was able to find only a trial license for ESET Smart Security Premium registered to your forum's registration email address so please check if you were actually charged for the license.
-
Does EFSW connect directly to the Internet or through a proxy server? Make sure that access to the LiveGrid and other ESET servers is allowed as per https://support.eset.com/kb332/.
Regarding email client protection, do you have protocol filtering and web and email protection enabled? You can gather logs with ESET Log Collector for me to check.
-
2 minutes ago, cesareset said:
hello, I still have the same problem
Please answer the above questions that MartinK asked.
-
Also are you able to reproduce it after uninstalling ESET completely and installing v12.1 from scratch without changing any default settings?
-
You can refer to the FAQ section at the right-hand side of this forum:
-
If you are able to reproduce it easily, please carry on as follows:
- enable advanced logging under Help and support -> Details for technical support
- reboot the machine
- start recording a demonstration video
- reproduce the issue (avoid unnecessary network communication to keep logs as small as possible)
- disable advanced logging and stop recording the video
- gather logs with ESET Log Collector and supply us with the generated archive and video for perusal. -
In order to prevent multiple topics on the subject, we'll draw this one to a close. Please continue with the discussion in the other topic https://forum.eset.com/topic/19007-main-you-are-protected-screen-keeps-popping-up-every-few-minutes/.
-
Please refer to https://forum.eset.com/topic/19024-error-code-0x847695d7-when-opening-firefox-for-banking/. A computer restart should fix it.
To prevent multiple topics on the subject, we'll draw this one to a close.
-
This forum is not meant to be a channel for requesting a website re-check. Please follow the instructions in the FAQ section at the right-hand side of this forum.
-
This forum is not meant to be a channel for requesting a website re-check. Please follow the instructions in the FAQ section at the right-hand side of this forum.
-
This forum is not meant to be a channel for requesting a website re-check. Please follow the instructions in the FAQ section at the right-hand side of this forum.
-
For me cdn-edge-dynamic-1-bhs-ca-ovh.gogcdn.net doesn't resolve at all.
-
What ESET product / version do you use? When exactly does the error pop up? Please post a screen shot for clarification.
-
It merely shows the last file scanned by real-time protection. Real-time protection scans files locally, not in the cloud. With the LiveGrid feedback system enabled, suspicious files are submitted for automatic replication and analysis and in case a file turns out to be malicious, it will be detected and blocked also for other users with the LiveGrid reputation system enabled.
The LiveGrid reputation system not only improves protection (detection) but also substantially improves performance and cleaning of threats.
-
There are also update servers in the above mentioned ranges (pico.eset.com). Haven't seen any communication with ts.eset.com yet while trying to reproduce the issue with the LiveGrid feedback system disabled.
-
If uninstalling EAV and installing the latest version 12.1 from scratch doesn't make any difference, I'd suggest raising a support ticket for customer care.
-
The security report is not a frequently accessed feature, there's no shortcut to it in the tray icon menu:
-
The security report is not a frequently accessed feature, there's no shortcut to it in the tray icon menu:
-
As long as the LiveGrid feedback system and submission of statistical information is disabled, the product should not connect to ts.eset.com. Please gather logs with ESET Log Collector and supply me with the generated archive for perusal.
-
Does rebooting the system resolve the issue?
-
I assume that flagging any executable built with PyBuilder as PUA would cause false positives. If PyBuilder was a tool to evade AV detection, then the tool itself would have to be detected.
-
If a script is recognized as malicious or PUA, it will be detected upon access. Not sure if a compiled executable is extracted to a disk upon execution; if not then it might not be detected without AMSI. It'd need to be tested to tell for sure.
ESET SMC "Run Log Collector" Client Task Fails
in ESET PROTECT On-prem (Remote Management)
Posted
I don't think it's possible. The generated archive can be even several gigabytes in size if a lot of memory dumps or extremely big logs were generated for some reason.
You can remote in to the machine and run ESET Log Collector as per https://support.eset.com/kb3466.