Marcos

Added in engine 25352, via streamed (pico) updates on May 30, 15:30 CEST.

Win32/Exploit.CVE-2022-30190 trojan

We've been working on adding support for Ubuntu 22.04 LTS since its beta version. Unfortunately due to bigger changes affecting our products, it takes some time to adapt to it. Support is planned for Endpoint v9.1 later this year.

It doesn't matter. There are thousands of websites and even videos with leaked keys. The point is such license keys don't last for long.

We've already released an engine which addresses the issues related to processing mui files. Please check if the issue had been resolved and remove the mui extension from the list of extensions excluded from scanning, if applicable.

We've already released an engine which addresses the issues related to processing mui files. Please check if the issue had been resolved and remove the mui extension from the list of extensions excluded from scanning, if applicable.

Correct. The sample had been detected as @ApplicUnwnt.Win32/Packed.FlyStudio.AA for years. The problem is that FlyStudio is a very popular scripting language in China so flagging every FlyStudio file would generate a huge number of false positives there.

So what are the reasons why you keep using ESET? I guess it's personal experience and not just test results.

Since tests are quite costly, it's at vendor's discretion to decide in which paid test they will participate.

Correct. The sample had been detected as @ApplicUnwnt.Win32/Packed.FlyStudio.AA for years. The problem is that FlyStudio is a very popular scripting language in China so flagging every FlyStudio file would generate a huge number of false positives there.

The plan is to have one theme and make it possible to toggle between the light and dark mode (equal to the current dark theme) via a button, however, it will require some further fine tuning on our part. As of now the dark theme can be selected at the bottom but we'll experiment with it during weekends when not many users come to the forum.

The GUI of antivirus program is not as important as the detection and protection capabilities under the hood. Normally one should not notice antivirus running unless a threat is detected or an action must be selected by the user. Nevertheless, it's possible that dark mode will be supported in future versions of ESET desktop products.

It didn't. The url is in the script but was not accessed when the script was run in the sandbox.

It does. I've just tested it with the above js file:

Reported as a possible bug to developers. Thanks for the heads-up.
P_PWMSP-1172

When did you test it? According to VT it was detected yesterday at 13:54 UTC already.

Also I've tried to run the msi on a machine disconnected from the Internet and with a 2-week old engine and the threat was detected and blocked upon execution:

I wonder if your opinion changed if the 3 detected files turned out to be actually clean or grey, such as benign cracks or whatever. In that case ESET would be better than the said AV. However, without getting the samples and checking them we can't tell what they are.

Yes, this will be implemented as of v15.2.

Internet protection module 1440.2 that restores the counter settings is now on the pre-release update channel with the regular channel to follow in the next days.

The GUI of antivirus program is not as important as the detection and protection capabilities under the hood. Normally one should not notice antivirus running unless a threat is detected or an action must be selected by the user. Nevertheless, it's possible that dark mode will be supported in future versions of ESET desktop products.

The GUI of antivirus program is not as important as the detection and protection capabilities under the hood. Normally one should not notice antivirus running unless a threat is detected or an action must be selected by the user. Nevertheless, it's possible that dark mode will be supported in future versions of ESET desktop products.

The GUI of antivirus program is not as important as the detection and protection capabilities under the hood. Normally one should not notice antivirus running unless a threat is detected or an action must be selected by the user. Nevertheless, it's possible that dark mode will be supported in future versions of ESET desktop products.

I've discussed this with developers and we've agreed on using credentials received during activation for updates from update.eset.com even when server auto-selection is disabled. That said, you will not need to enter a U/P in future versions if updating via https.

Adding Information technology -> Personal storage to the "WHI Standard" category group should do the trick.

You can update to a newer version at any time without waiting for ESET to release automatic product updates by sending a software install task. Since possible bugs could negatively impact business, there will always be a delay of 1-2 months after the release before automatic updates become available. However, we understand that some administrators might prefer updating to the latest version as soon as possible at all cost and we try to find ways how to make it easier for them. For instance, we've been considering providing automatic updates immediately as of the day of the product release to those updating from the pre-release update channel.