Jump to content

Joe-ESET2016

Members
  • Posts

    39
  • Joined

  • Last visited

Everything posted by Joe-ESET2016

  1. Hello, trying to install / update the newer ESET Mail Security 7 on Win2012 / 2008 claims to fail based on too old Exchange 2013 CU Version. Do you know whether there is some Information how this depends? thx in advance! I know there are articles about EOL, not Updating older Version to newer Version.... We have severall Exchange 2013 on premise Servicers running with older ESET Mail Security 4.5 Due to Newsletter older Products are off cause out of support. Retrieving Antivirus+Antispam Signatures still works and based on Log detection of dangerrous mails works.
  2. Hello, sorry for this trash post - I noticed some customers Windows Servers without "realtime virus events" = virus detected since 20.12.2018 Based on ESET Eventlog Signature Download works fine. They have File Security Version 4+5 (and also Windows 2003 Server...) It is okay to delete this post, because I understand I don´t have much "input"... A Smart Scan didn´t found also Virus... Best Regards
  3. Hello, I saw in recent ESET Newsletter that e.g. Mail Security 4 / 4.5 is EOL. How can I convince the smaller companies / customers which running an own older exchange server with older ESET Mail Security? Do you think I see in the ESET-Logs last successfull download of "Antispam Signatures"? I heard that still ESET NOD Version 3.0 can obtain "successfully antivirus signatures" ? I need reasons to convince customers about updating to latest Version. I heard that the Anti Ransomware Module is a good cause about Endpoint Antivirus? I know that this Articles are in connection with that topic: kb2289 Uninstall ESET manually using the ESET uninstaller tool kb3595 ....looks like another article not in connection with this topc
  4. Hello, is it possible to "prevent" CEO FRAUD"Mails? I mean incoming Mails to the finance department with Sender-Adress *@own-customer-domain.com ... Thx in Advance! Best Regards
  5. thx but our mail system is file based. every mail in mailclient is on file system two pieces of files. the function "shared local cache" is for vmware servers and not for our needs right?
  6. Hello, here in germany many small companies use TOBIT DAVID as Unified Messaging System since 25 Years. (mainly for Email & Co) https://en.tobit.software/david This software / email datenbase is file based. ESED File Security Real Time protection catches many but not all Malware. A scheduled scan of the email archive takes approx. arround 0,30-2 hours. Do you have a Idea about a faster scan? (but not all Mails Servers are VM and can do shared local cache...?) As far as I know, realtime Scan didn´t check every new incomfing file = mail" Email Receiving is possible via SMTP a25 or POP3 Grabbing. Thx in advance!
  7. Hello, the Client have some PCs which have no internet and no LAN. Only one Master-PC has internet and LAN. Draft Action Plan: a) try to install & active ESET Endpoint 6 offline b) try to make a batch file which can copy/paste eset-antivirus-signatures via USB Stick c) I saw this article, but we have no ERA https://support.eset.com/kb3131/?viewlocale=en_US d) do you know which folder we need to copy from the "master-internet-eset-pc" to the USB Stick? (we need to active ESET Mirrow on the ESET Master PC - I know) best regards, thx
  8. Hello, I am looking for new security software for our VM. We have 250 Windows Server VMs and 30 Windows 10 Vms. (no sharepoint, no exchange, no linux) What product should we choose? Thx in advance! Best Regards
  9. Hello, I would like to know which of my ESET Mail Security Mail Transport Rules are effective and which attachment types were blocked. I can see only "blocked object" in the log windows, but I don´t know which rule was active.../ which attachement... do you have a Idea how to solve this? thx in advance
  10. Hello, we have to install endpoint security on each windows pc 7 remote offices / each with ten windows workgroups pcs we have low speed internet and need to safe traffic we want only one ESET Update distributor in each office in my opinion it is easy: simple install era6 on one windows 7/10 PC as update distributor/mirrow and install eset agent / endpoint security on every office workgroup pc I have to install ERA 6 right? best regards john
  11. Hello, do you know a blog/knowledge base/ forum thread / checklist about best practice settings after new Mail Security Installation? From my knowledge so far: a) Spam Mails should have a Mark in the reference line with [SPAM ESET] instead of only [SPAM] b) activating ESET Transport rules and delete *.js and *.docm, *.xlsm and many more c) I wish ESET can add a "SUSPICIOUS" Tag in the reference line if a *.doc File is attached d) Setting up the Quarantine Configuration I don´t know more. As far as I know, all the other Settings are per Default OK? Thx in advance
  12. Hello, is this critical? Do you think its a fault that I didn´t exclude Exchange folders in ESET? (automatic exclusions aren´t activated) (exchange 2013 server with eset mail security 4.5) Exchange Folders/Processes are´t excluded. Settings are on default. Parserserver.exe = microsoft exchange search index I checked this, but the mentioned entries are´t in the registry: hxxp://www.virusradar.com/en/Win32_PSW.Fareit.A/description Thx, best regards 06.2017 10:49:15 Real-time file protection file C: \ Windows \ TEMP \ O .................. tmp Win32 / PSW.Fareit.A Trojan Cleaned by deleting NT- AUTORITY \ SYSTEM Event when editing a file by the application: \ Device \ HarddiskVolume2 \ Program Files \ Microsoft \ ExchangeServer \ V15 \ Bin \ Search \ Ceres \ ParserServer \ ParserServer.exe. 5394 .................... 02.06.2017 10:49:14 C: \ Windows \ TEMP \ OICE _ tmp Win32 / PSW.Fareit.A Trojan Cleaned by deleting NT AUTHORITY \ SYSTEM Event at Edit A file through the application: \ Device \ HarddiskVolume2 \ Program Files \ Microsoft \ ExchangeServer \ V15 \ Bin \ Search \ Ceres \ ParserServer \ ParserServer.exe. 5394 ................ 02.06.2017 10:49:12 02.06.2017 10:49:12 Real-time file protection file C: \ Windows \ TEMP \ OICE tmp variant of MSIL / Injector.MWQ Trojans cleaned by Delete NT AUTHORITY \ SYSTEM Event when editing a file by the application: \ Device \ HarddiskVolume2 \ Program Files \ Microsoft \ ExchangeServer \ V15 \ Bin \ Search \ Ceres \ ParserServer \ ParserServer.exe. B5394 ..................... 02.06.2017 10:49:11 02.06.2017 10:49:09 Real-time file protection file C: \ Windows \ TEMP \ OICE _.............. tmp Variant of MSIL / Injector.MVR Trojans Cleaned by deleting NT AUTHORITY \ SYSTEM Event when editing a file by the application: \ Device \ HarddiskVolume2 \ Program Files \ Microsoft \ ExchangeServer \ V15 \ Bin \ Search \ Ceres \ ParserServer \ ParserServer.exe. 6186 ...................... 02.06.2017 10:49:07
×
×
  • Create New...