Marcos
-
Posts
36,328 -
Joined
-
Last visited
-
Days Won
1,445
Posts posted by Marcos
-
-
First of all, it is a fundamental functionality of an antivirus to scan files that are accessed or executed. Please elaborate more on what kind of scan you mean. Is it that you see an on-demand scan being run under Computer scan in the main gui?
Note that it's vital to keep automatic startup scan in scheduler enabled. Otherwise it could happen that malware could run undetected, or malware in certain locations, such as the WMI repository, will not be detected and cleaned.
-
5 hours ago, persian-boy said:
When you disable the HIPS you have to restart the windows to see the effects(it decrease the usability) otherwise it keeps showing alerts.
This is not a bug but a security feature which is there intentionally. We won't allow disabling HIPS without the need to restart the computer.
-
Please post a screen shot of the warning.
-
The best would be if you could install Endpoint Security v7 to troubleshoot the issue. With EES v7 installed, carry on as follows:
- enable both Network protection and Licensing advanced logging in the advanced setup -> Tools -> Diagnostics
- try to activate the product
- disable logging
- collect logs with ESET Log Collector and upload the generated archive here. -
15 minutes ago, ELPIDOFOROS GKIKAS said:
after malware and other uninstall , do new installation of eset?
Yes, try installing ESET with default settings and check if the problem persists.
-
zippyshare.com is a legitimate file sharing service. Please elaborate more on why you think that your computer was infected.
-
The current design enables computers to be autonomous without connection to ERA. E.g. if a user takes a notebook outside the corporate network, if an active malware has been detected and a policy disconnects the machine from network, etc.
-
A v11.2 hotfix addressing several bugs should be available within 1-2 weeks from now.
-
You have Malwarebytes 3.5 installed. Try uninstalling it. Also I've found two suspicious applications with the name commencing with "Po.." installed. Not sure if that's something what you have installed intentionally.
-
Thanks. Since the issue with Web Control is most likely related to Endpoint and to avoid discussing different issues in this topic, please create a new topic in the Endpoint forum and provide a screen shot or two with the errors that you are getting. I've checked the logs you've supplied and there was no mention of an error neither in ESET's event log nor the system log.
-
In this case it's the PR_TRANSPORT_MESSAGE_HEADERS_W property which is in conflict. The property contains transport-specific message envelope information for email and this modification cannot be avoided. If email is scanned on the mail server, disable integration with MS Outlook.
As of Enpoint 7.1, processing email messages will be completely revamped and will ultimately prevent sync issues from occurring.
-
Try uploading it here, it should be possible now. Nobody but moderators will see the uploaded file.
-
I reckon I've mentioned elsewhere that this will be addressed in the next v11.2 hotfix.
-
If disabled, ESET should not continue detecting it AFAIK.
-
What do you mean by page with ESET name? Do you have a screen shot? Does it look like as follows?
-
-
If it's a pre-installed application which is detected, you can only disable it in the system setup.
-
ESET continually updates malware, botnet and spam detections, provides institutions (typically banks) with insight into threat intelligence data via the ESET Threat Intelligence service, performs research and co-operates with the police and other institutions to disrupt botnets (e.g. https://www.welivesecurity.com/2017/12/04/eset-helps-law-enforcement-worldwide-to-disrupt-gamarue-botnet/), etc.
-
Actually SysInspector is the most important log that I wanted to check.
-
Please refer to https://support.eset.com/kb3466 for instructions.
-
Please provide me with logs collected by ESET Log Collector. I'd like to check what software is installed on the machine and find applications that might possibly clash with ESET.
-
30 minutes ago, Trooper311 said:
So for the Windows 7 clients stating that Web Control is not functional is that a false positive basically?
It can be either an issue registering a WFP callout (e.g. due to issues with BFE or registry permissions), or you disabled protocol filtering which is now indicated by a change of the protection status. Please provide me with logs collected with ESET Log Collector from such machine so that I can check the configuration.
-
Please refer to https://support.eset.com/KB6925/
Agent can be upgraded by sending a component upgrade task. If you are using an ERA Proxy, the computers on which you are going to upgrade Agent to v7 must be able to connect to ESMC directly or through an http proxy.
-
It is necessary to upgrade the server from ERA 6.5 to ESMC. As stated in the documentation, Agent v7 cannot communicate with an ERA Server do to changes in the communication protocol.
Agent can be upgraded by sending an ESMC component upgrade task to clients.
As for the notifications that the firewall is disabled, you can suppress them via a policy -> User interface -> Application statuses.
Internet Security keeps scanning my files at startup
in ESET Internet Security & ESET Smart Security Premium
Posted
Please post a screen shot. Isn't the scan called Initial scan? It's run automatically after installation but it can be stopped and it won't run again next time. Please provide me with logs collected with ESET Log Collector so that I can check what tasks you have in Scheduler.