[Task "Product Activation" Failed!!!]

Hi there,

Recently, our customer often get error while activate for Eset products. We have check network is okay, not using any Proxy server, can connect to IP address ESET Server licensing,.. but still error activated for both from "CLient Tasks" and manually, please help us if anyone have solutions.

Besides, I did not find the error information with code ECP.20009 as below. 

Thank you so much!

[Can install SAMBA on ERA Appliance?]

@karlisi thanks for you information!

[Can install SAMBA on ERA Appliance?]

Hi there,

I have installed ERA v6.5 appliance, it works fine and My ERA Appliance join into windows domain.

But I'm wondering, Can I create the SAMBA file sharing is standalone in this ERA server Appliance?

Has anyone tried it yet? Please for me some advice..

Thank you so much!

[CREATE A USER WITH NEW PERMISSION SET ON ERA]

Hi all,

I have create new permission set and add functionality access full access then assign it to new user but when I use new user login  show don’t have license that I have added before.

NOTE: If I login by user in administrator permission set will show got license.

After finished, login with new user: (Nothing to show the license)

Then I want to add license is show No Access.

Am i doing wrong? Please help..

Thank you so much!

[UNINSTALL on Mobile Device but Still show on ERA Web Console?]

Hi @Marcos,

Thanks for your reply, let me try with Client task "Stop Managing Uninstall" on mobile device.

And How about case 2 i mentioned? As i see, EESA version 2.5.12.0 still unsolved this issue

[UNINSTALL on Mobile Device but Still show on ERA Web Console?]

Hi there, 

I am facing 2 problems with ESET Endpoint Security for Android as below:

1. As mentioned in the title, i have perform uninstall on the mobile device (deactivate, uninstall,..), follow the link: https://help.eset.com/eesa/2/en-US/?uninstallation.html and make sure that the mobile device uninstall successfully. But ERA Server still shows this device although removed many times! I don't know why and how to resolved about this?

2. After installed EESA on mobile, It shows as Status "OK" but under details old status is mark as RED and do not go away, also not up to date massage.

As i know, "The hotfix has been released", but it seems it still does not work.

Android version: 6.0

Eset Endpoint Security for Android version: 2.5.12.0

Please help to solve 2 problems!!! Thanks so much

 

[CAN'T MANAGE LICENSE!!!]

Any ideas what help me about this? Thanks a lot!

[CAN'T MANAGE LICENSE!!!]

Hi there,

I have try enter the key license on website https://ela.eset.com to manage this license, or generate license offline files, but it can't not with this license, i get something wrong like this:

There is no place for me to fill in an ELA password. Please help me about this!

License Info: 

Product: ESET Endpoint Protection Standard
License Public ID: 33B-FTH-PJ7 

Thanks so much!

[[URGENT]_ESET CAN NOT CLEAN WIN32/AGENT.TXV Trojan?]

Hi there, 

I'm from VietNam, today many, many our customer are using ESET File Security on Windows Server, Endpoint Antivirus ver 6.6 but can not Cleaning this trojan "WIN32/Agent.TXV". Make sure that they are always up to date Signature!

Please let me know how to ESET can detect and permanently remove this malicious? Thanks in advance.

Some info about this:

 

 

[A variant of Trojan WIN32/GenKryptik.BSJG]

15 hours ago, Marcos said:

Unfortunately, the Procmon log was not from a boot. Please refer to the section "Gather boot log files" in the above mentioned KB article. Before you start logging, enable also advanced output in the Filter menu.

Hi @Marcos

This is new "Gather boot log files" i have just collected, please help us: hxxp://fsend.vn/download/Kjv5tb08BQTLaPawYzKIOZ-xfv1Aelfq

[A variant of Trojan WIN32/GenKryptik.BSJG]

1 hour ago, Marcos said:

Please provide:
- ELC logs
- A Procmon boot log created as per the instructions at https://support.eset.com/kb6308/

Upload both archives to a safe location and drop me a message with download links and a link to this topic.

@Marcos

Please help me with logs details as link below

hxxp://fsend.vn/download/AbXuimyHyUMT0W3exh2ajV1-Lwf-jEUS 

[A variant of Trojan WIN32/GenKryptik.BSJG]

Hi guys,

My customer is using ESET File Security on Window Server 2008 R2, with Real-time file system protection feature, it can be found and Cleaned by deleting this variant

, but after cleaned, the process "explorer.exe" will be killed also, so nothing on desktop! Then must to click File -> New Task "explorer" for show up!

This situation is still occurring many times, so please help us how to permanently remove the type of variant without killed the process "explorer"?

Thanks in advance!

 

[FAILED TO ADD LICENSE]

On 1/25/2018 at 1:49 AM, MartinK said:

In addition, please check SERVER's trace log for more detailed error description -> it will at least help to identify source of problem, which will be either network problem (network configuration, certificate validation, HTTP proxy issue) or it will be failure in ESET infrastructure.

Trace logs should be located in:

C:\ProgramData\ESET\RemoteAdministrator\Server\EraServerApplicationData\Logs\trace.log

There should be "Error" entry from time license synchronization failed.

Hi @MartinK,

Please help us with trace log details in attached file. Thanks so much!

tracelog.log

[FAILED TO ADD LICENSE]

Hi guys,

I receive an error when i try to add license key into ERA webconsole, just checked firewall, network,... but still can't added!

As the picture details below:

Please give me some advice that what should I do to continue?

Thanks so much!

 

[SYNC AD FAILED ON ERA SERVER LINUX]

Hi there,

My client have Server linux running AD Samba, and they just installed ERA SErver on linux, then they need to synchronization with Active Directory but it's wrong, as details error below:

Can someone give me some advice on this error, please? thanks in advance!
 

[Web and Email Non functional]

@Shafiq

As Perter Randziak said in topic i was created before: "I got a hit directly from the Dev team, that the latest ESET Endpoint Security 6.6.2052.0 might help in such cases as multiple causes of  firewall startup issues has been fixed there"... But until today my customers sometime encounters the same error!! And i don't know why@@!

 

 

[TROJAN WARNING CONSTANTLY]

Hello everyone,

My customers are using File Security version 6.5.12013 on Windows Server 2012 R2 Standard. Last week, they detected a malware warning constantly on this. When i was logon and checked, log file details as below:

<RECORD>

<COLUMN NAME="Time">28/12/2017 3:45:38 PM</COLUMN>

<COLUMN NAME="Scanner">Real-time file system protection</COLUMN>

<COLUMN NAME="Object type">file</COLUMN>

<COLUMN NAME="Object">

C:\Program Files (x86)\Common Files\sys\SystemRunDll3.exe

</COLUMN>

<COLUMN NAME="Threat">Win64/CoinMiner.J trojan</COLUMN>

<COLUMN NAME="Action">cleaned by deleting</COLUMN>

<COLUMN NAME="User">NT AUTHORITY\SYSTEM</COLUMN>

<COLUMN NAME="Information">

Event occurred on a new file created by the application: C:\Program Files (x86)\Common Files\sys\Service4.exe (1C5778306AA81EEB2E2B1DA57DD1E6FEAEEBD757).

</COLUMN>

<COLUMN NAME="Hash">A645B3F5956ABA168437ED7368C6584DB130B6BB</COLUMN>

<COLUMN NAME="First seen here">28/12/2017 3:45:36 PM</COLUMN>

 

I know, the malware was detected on Jun 23, 2014 hxxp://www.virusradar.com/en/Win64_CoinMiner.J/description. Maybe pop-up warning created by the application above "Service4.exe". I have directed to the path, stop services and delete related it... but I'm not sure that it will spawn an application with a different name (example: sa.exe, service2.exe,...).. I have seen this!

So, i don't know How can I solve this situation completely? Please give me some advice if you have any ideas?
Thanks in advance!

More detail you can see..

[After UNASSIGN Client(s) in Policies]

27 minutes ago, MichalJ said:

We will change this behavior to Endpoint 7, where values set by policy will return to the previously set value.

Thanks so much!

[After UNASSIGN Client(s) in Policies]

13 minutes ago, Marcos said:

Also I wonder what is your use  case for disabling this setting. Automatic start of real-time protection should be enabled.

I know, I am just an example of any change on Policy..

[After UNASSIGN Client(s) in Policies]

Hi there,

I'm having a problem like the following:

- Firstly, I create New policy on ERA Webconsole -> SETTINGS <ESET Endpoint for Windows> -->  DISABLE Real-time file system (for example). Then Assign to any Client(s).

The client will be assigned and GUI Endpoint show that this feature is DISABLE and just View --> Okay!

- Secondly, I want to test by Unassign this policy on the client mentioned above.. and after policy unassigned completely, the client still DISABLE Feature Real-time file system....

I wonder that, so how can it (feature Real-Time protection) return to the original automatically, after removing the policy?

Please let me know if you have any ideas?

Thanks in advance!

[Can ESET detect Trojan.InstallMonster.1852?]

@Marcos It's helpful, thanks a lot

[Can ESET detect Trojan.InstallMonster.1852?]

2 minutes ago, Marcos said:

InstallMonster is not a trojan but potentially unwanted application. They have been actively trying to avoid detection by AVs for a long time.

Thanks for your response, it means if we check with customer that the feature "Detection PUA" is enable, so this InstallMonster will be can cleaned?

[Can ESET detect Trojan.InstallMonster.1852?]

Hi there,

As the title of the article, today, my customer get some information about trojans with name details below on their security system, but Eset not detect or notify!

Malware

aag.teenplusa.com

Malware Trojan.InstallMonster.1852

aa.akgn.com.

 So i search on many resource but no information related, i wonder if ESET can be detect this malwarre or not?

If yes, please send me some evidence or link reference! 

Thanks a lot

[Non-Functional in NETWORK (Endpoint)]

Is there something new? Pls let me know why is it so! 

[endpoint antiviurs 6 and signatures via usb stick (no LAN/Internet there)]

Hello,

Firstly, you can try with create mirror folder as link below on the computer can access internet

https://support.eset.com/kb3641/?viewlocale=en_US 

Then, copy all of files into usb and don't forget enable configure mode "Update from removable media" on another computers.. I think so