Marcos

Please clarify what exactly you mean by "browser automation tests".

I've asked a guy from ESET DE about your ticket. Allegedly it was about detecting malware at jaloucity.de. The website has been hacked recently and serving JS/Spy.Banker trojan. Since the website appears to have been cleaned in the mean time, we've removed it from the PUA blacklist.

A nice screen shot from the prehistoric era Please uninstall ESS v4 and install ESET Internet Security v12 from scratch.

Please provide the dump for analysis so that we can determine the cause of the crash. Although it seems to have been caused by the firewall, there's a chance it was caused by stack exhaustion because of another driver.

Perhaps this behavior occurs because: - The client's OS starts - Everything is ok when ekrn starts so no problem with EDTD is reported to the ESMC server - It takes 2 minutes until EDTD connection is checked. A problem is reported to ESMC the next time agent connects to the ESMC server.

Please reproduce it.Beforehand, enable advanced operating system logging in the advanced setup -> tools -> diagnostics and start logging with Procmon as well. After the cpu utilization drops down after cleaning, stop logging. Then gather logs with ESET Log Collector and together with a compressed Procmon log provide it to us for perusal.

Dana web stranka nie je na blackliste a ani po jej otvoreni v prehliadaci sa nedetegoval malware. Poslite, prosim, snimku obrazovky s varovanim od ESETu, ked sa Vam stranka blokuje. PS: Nakolko ste na nasom slovenskom fore, mozete komunikovat po slovensky.

Dobry den, O aku webovu stranku sa jedna? Je pristup na stranku zablokovany, alebo na nej ESET deteguje malware? Aky je nazov detekcie? Ste vlastnikom daneho webu?

I'd suggest raising a support ticket for your local customer care that should provide you with a logging version of the Outlook plug-in. Based on the logs we should be able to confirm that the issue should be solved by the new plug-in and possibly suggest a workaround too.

I'd better check ELC logs since the warning from the ESMC console doesn't ring a bell. For instructions how to gather ELC logs, please refer to http://support.eset.com/kb3466/.

I was unable to briefly find a related bug or other reports of issues with duplicate emails. Does disabling checking upon inbox content change or scanning of read email make a difference? It is possible that it's a design issue and a new Outlook plug-in that is due to be ready in H2/2019 will ultimately solve the issue.

Currently there's no easy way to accomplish that. Parental control can also block specific urls so you don't need to know the exact category in order to block it. In order to determine the category a website falls into, I recall it's logged if you temporarily enable diagnostic logging verbosity in the advanced setup and access the website. Remember to change the logging verbosity back to informative to prevent huge logs from being generated.

If there are any publicly available changes, they are enclosed in the announcement post.

Let's start off by gathering logs with ESET Log Collector. It could be that ekrn.exe and egui.exe processes are running but the gui is not showing up for some reason. You can also check if the eicar test file is detected / blocked.

As expected, it's not an executable but has the exe extensions which triggers heuristics on it. The file is not currently detected.

If you check the file fcsrv.exe I assume it's not an executable despite it has the exe extension. You can submit it as per the instructions as per https://support.eset.com/kb141/. However, such "FP's" may happen since the exe extension is deceptive in this case.

If you want to use another firewall, disable it in ESET Internet Security. Even then Network protection will continue to check network communication for exploits and protect your machine. ESET NOD32 Antivirus doesn't have a firewall but doesn't have Network protection either.

We've recently made 12.1.30.0 available for users in the ESET Insider program. Also it is not clear what you meant by " I miss the success of ESET 2002 - 2007". Please clarify as to what you meant because ESET is a successful company with products being enriched with new protection and technology features on a regular basis.

Have you already updated ERA to ESMC via an ERA component upgrade task? Remember not to upgrade agent to v7 first since it won't be able to communicate with the ERA Server then. After upgrading the server, a good practice is to upgrade only one or a few agents for the start, make sure there is no problem with communication with the ESMC server and only then continue with upgrading the agent via an ESMC component upgrade task on other machines. If the client currently uses an ERA Proxy, please follow the instructions at https://help.eset.com/esmc_install/70/en-US/upgrade_infrastructure_proxy.html.

We don't have currently a solution but upgrade to the latest version. For users of Windows XP, we recommend upgrading to the latest version. The fact that v8 has already reached EOL also means that it can stop updating at any time without a prior notice or an update can cause issues that won't be solved since the product is not supported any more. Moreover, v8 misses a lot of new features that ensure protection from emerging threats and therefore users get infected easier than with the latest version.

What parameters did you run mirrortool.exe with?

We strongly recommend always using the latest version of an ESET security product, especially when using Windows 10. For instance, v10 will be blocked by Microsoft as of the next version (aka Windows 10 19H1).

Please clarify what portal you mean. Until now, I've been under the impression that it was a specific ESET UK portal or page that was under control of ESET UK. Please post the url and possibly a screen shot as well.

Are you using Windows XP that you don't want to upgrade from v8? Even then, the latest version with official support of Windows XP is version 9.

I think it should work, at least it's possible to manually submit any file from Endpoint's gui. Will try to test it myself.