Marcos

Currently you can't avoid creating new rules or editing paths in existing rules but from a long-term perspective there should be a solution to this.

Do you mean that it works when real-time protection is paused? Because it is not possible to turn off protection unless you rename ekrn.exe in safe mode or uninstall ESET.

The config was ok. Please contact your local customer care to troubleshoot the issue further. To start off, provide them with logs gathered by ELC.

It is not possible. If we had to back up every file, e.g. when the user intentionally moves files to a password protected archive, the computer could become unuseable. Ransomware often encrypts media files and such files may be dozens of GBs in size. The rollback setting is in the advanced update setup.

I'm sorry but I have no clue what you mean by rolling back files.

Please follow the instructions at https://support.eset.com/kb141 to request a website re-check. It appears that malware has been removed, the website was unblocked.

If possible, please continue as follows: - temporarily uninstall EAV - install ESET Internet Security 11.2.49 and activate a trial version - under Help and support in the main gui, click Details for customer care and enable advanced logging - reboot the machine - stop logging - collect logs with ESET Log Collector and post the generated archive here. There is probably a problem with registration to BFE, e.g. the Base Filtering Engine service might not be running. After we get EIS work alright, you can uninstall EIS and install EAV which should then work alright.

It's been there for a couple of years already:

Please provide fresh ELC logs so that I can make sure the drivers are no longer loaded. Beforehand I'd suggest running the ESET Uninstall tool in safe mode and trying to install Endpoint v7 from scratch. Should the problem persist, also create a Procmon log from installation.

Please gather and provide ELC logs for perusal.

I think the following would work if the logical operator could be set to OR which is not currently possible. Maybe @MichalJ or @MartinK will be able to comment on it.

Older versions of installers can be found in this KB: https://support.eset.com/kb2885/ We will remove the installers from here as soon as they become available for download from ESET's download page to save disk space.

They are there now, I had to re-upload the installers because of issues with versioning in the Download feature that we've made accessible today for the first time.

I would run the msi installer manually with the "/lvx* install.log" parameter while capturing operations with Process Monitor. If installation fails, please provide: 1, Compressed Procmon log. 2, Install.log. 3, Logs gathered by ESET Log Collector.

Currently there is no no way to send a wake-up call to offline computers. We will consider and most likely come up with a solution since we fully understand your needs but currently it is not possible.

You have posted in the General forum. What ESET product and version do you have installed?

Please contact ESET UK. I have no clue if they sell subscriptions at all. I assume it's specific to the US and Canada.

Both the ESMC Server and Agent must be able to connect to epns.eset.com on port 8883. Is that condition fulfilled?

A solution was provided also immediately - to temporarily downgrade to v11.0. Some users were provided with a fixed driver but they will need either to remove the fixed driver or uninstall ESET before installing a hotfix. The hotfix 11.2.63.0 addressing the issue is currently downloadable from https://forum.eset.com/files/. If you haven't installed a fixed driver, you can download and install it on top. Otherwise we recommend uninstalling ESET so that all drivers are removed and installing the new version from scratch. The hotfix is going to be released for the public momentarily.

Please check the version of installed Translation support module:

V11.2 has been out for a quite long time and no other users have reported issues with BSOD. I'd rather expect another driver to be the culprit. Before making any conclusions, continue as follows: 1, Provide us with logs gathered by ESET Log Collector. 2, Configuring Windows to generate complete memory dumps as per https://support.eset.com/kb380/. When BSOD occurs, after a restart compress the memory dump and provide it to us for analysis.

Please clarify what you would like to achieve exactly. Ideally with a concrete example. Are you talking about firewall-enabled products ESET Internet Security and ESET Smart Security Premium?

Please install Endpoint locally via an msi installer until the EPI utilized by ERA/ESMC is updated with a fixed version in the repository.

Sending a wake-up call is not possible unless you upgrade agent to v7 as well.

Exactly, it's HIPS's job. Moreover, this is the ESET NOD32 Antivirus forum so I don't understand the connection with a firewall.