Jump to content

stackz

ESET Insiders
  • Posts

    408
  • Joined

  • Last visited

  • Days Won

    19

Posts posted by stackz

  1. I've attached a batch file to do the job. Just unzip it and right click 'Run as Administrator'.

    I'll include the code below for anyone's perusal.

    @echo off
    for /F "tokens=1,2*" %%x in ('bcdedit') do set adminTest=%%x
    if (%adminTest%)==(Access) goto not_admin
    
    NET STOP WINMGMT /Y
    REN %WINDIR%\SYSTEM32\WBEM\REPOSITORY REPOSITORY.OLD
    echo.
    echo Reboot the PC to complete the process
    echo.
    echo Press any key to exit.
    pause>nul
    goto finish
    
    :not_admin
    echo You must run this file as administrator!
    echo.
    echo Press any key to exit.
    pause>nul
    
    :finish

    ACFix.zip

  2. I just downloaded Chrome portable and tested with your bank URL and it opened in a secured browser.

    hxxp://www.chrome-portable.com/index.php/google-chrome-offline-installer- perhaps you could try with the portable app, that way you can rule in or out any possible problem with your current Chrome installation.

    BTW, you can use 7-zip or similar to extract everything from the portable installer. (There's no need to run the installer.)

  3. Assuming you mean GiveAwayoftheDay:

    I just checked the download with Virus signature db: 12442 and ESET didn't detect anything.

    Ran the installer in a VM and all it did was ask to change the browser homepage to giveawayoftheday.com

    Also a registry key HKCU\Software\GiveAwayofTheDay.com was created.

     

    oops...ninja post - Marcos beat me to it.

  4. The major reason for the change is that the firewall rules for an application are evaluated in order, top to bottom.

    For example:

    Allow communication for someProgram
    Allow communication for someProgram[2]
    Allow communication for someProgram[3]
    Block communication for someProgram    // Block all other communication for someProgram.
    

    That way you can create specific allow and ask rules for a program, followed by a global block for any other communication.

  5. I just reproduced the alert that pavilion_alex is seeing.

    When the initial notification is displayed, 'Copy to Quarantine' is the only option that can be unchecked or checked, but if you click 'Ignore'

    you'll get another notification where 'Copy to Quarantine', 'Exclude from detection' and 'Exclude signature from detection' are all available to select.

    :unsure:

  6. Win 7 x64 - Screen resolution 1440 x 900 - standard DPI

     

    On further investigation - When I plug in for example a flash drive, the device popup notification position gets saved in the registry to DesktopAlertPosition2.

    If I position the alert in the bottom RHS, DesktopAlertPosition2 always gets set to zero. Plugging the device in again results in DesktopAlertPosition2 being set to 0x00140014.

     

    I've tested in a virtual machine running XP and the position is saved correctly.

    So this is definitely a bug.

  7. Windows 7x64 up to date

    ESS v9.0.318.0

     

    When I plug in a device, the closest I can position the desktop notification to the bottom RHS corner (that ESS will remember) is approximately the width of the taskbar above the taskbar and 3 times taskbar width from the right.

     

    Note: Update notifications can be placed and are remembered in the bottom rhs.

     

    Is this by design or a bug?

  8. I have live grid enabled with submit statistics and files disabled. Does this lower detection via reputation significantly or at all?

    If I enable submission of files, is there any way to exclude my development project executables from being submitted.

    1. I would prefer that they not be submitted.
    2. Every time I compile a project with some modifications, would there the possibility of many variants of the same file being submitted?
×
×
  • Create New...