stackz

I can reliably reproduce one bug, where I can perform some task that should trigger an ask dialog but doesn't (e.g process launch) as soon as I log in.

I've had this happen on multiple occasions prior to going back to beta testing. I'm currently beta testing and this has occured 4 times that I'm aware of in the last 5 days (I've reported it in the beta forum and through beta support). Reloading the saved settings seems to wake the HIPS ask rules up for me. To say I'm unimpressed is an understatement.

Are you running Process Explorer as administrator? Post an example screenshot of the processes you are concerned about.

EIS 14.1.20.0 Win10x64 I have a HIPs rule configured to ask for user space execution. The rule works as expected, but all allowed operations are erroneously logged as blocked.

I know that here in Australia, I hadn't had an update from 23048 to 23049 for around six hours when I turned my PC off for the night. At that stage, 23049 had been listed at Virus Radar for quite some time. So I definitely think this was more wide spread than ESET realized.

Microsoft seems to auto install the monthly .NET optional preview for all my installations and also for many other people (judging by the complaints on https://answers.microsoft.com/). If you're observing similar, then this has nothing to do with ESET.

Would you prefer ESET to block you from logging on? As advised previously, turn off debug logging of blocked operations in the advanced HIPS setup. I suggest you submit a support request if you really think you are infected. Open the ESET GUI, click Help and support -> Submit support request.

1. no idea as I use ESET Internet Security which has web access protection 2. A scan is automatically run when installing the product 3. There's no password manager in ESET AntiVirus only in ESET Smart Security Premium.

22864 came through about 5 minutes ago for me.

Win 10 version upgrade logs. Every Win 10 installation has the same unknown user.

Yes, every user session the services will be created with a different hex number suffix.

All those services are fine, they are just Windows 10 Per-user services: Per-user services in Windows 10 and Windows Server - Windows Application Management | Microsoft Docs

Which browser is being used? I tested with Edge Chromium downloading a statement from my bank with no problems. Banking & payment protection module: 1206 (20201202)

It uses the Cyren AMP engine and has an interface on par with a fakeav.

Looks like ESET will be busy as Edge Chromium is also broken with the latest 87.0.664.41 release.