knicks_fan

Gamer mode has been off (ESET says paused). I have nothing running in a fullscreen mode (Firefox is maximized, but that doesn't count). I found the other settings and disabled. This is my work computer, so needless to say I am not playing games. Thanks Marcos.

About six times today, the action center in Windows 10 (1703) keeps popping up "ESET NOD32 Requires Your Attention". I take a look and nothing appears to be happening to display this (defs up to date-16007 as of this writing, ESET is happy there), ditto for Windows Updates (just verified again with Control Panel). I went to NOD32 Version 10.1.219 when it was offered to me. This is more an annoyance then anything else. The action item disappears once it is displayed.

This morning, ESET did an upgrade to Version 9.0.408. I'll check those Cisco forums out, Marcos. I suspect my agency is downlevel. Thanks!

I have one machine at 9.0.408 that updated to that latest dot release a few weeks ago on top of the version which can be downloaded from the ESET website, which still pulls down 9.0.386.0 and has old virus definitions. I would love to go to version 10.1, but refer here as to why I can't: https://forum.eset.com/topic/11629-eset-and-cisco-vpn/ - why won't my desktop machine install version 9.0.408? Am I really missing anything? Clicking "upgrate" with the app wants me to go to Version 10.0.390 (not 10.1 as now indicated is latest version) - why is the download page still showing 9.0.386 and old definitions? Both machines are running 64 bit Windows 10.

Thanks, Marcos. Unfortunately, I can't run ESET Version 10 because of issues with a product called Cisco VPN (see separate topic).

I just reinstalled Version 9 from the website (see previous topic why). The definitions are not current, so ESET is trying to download 75Mb+ of updates. The progress looks like it is 1998 and I am back on a 56Kb dialup line. I have checked our network and there are no slowdowns. - why doesn't ESET keep the definitions file somewhat up to date when you download software? - I am in the USA, where is the download server I am using?

Once again, I tried to go to the current (10) version of ESET. Once again, the Cisco VPN compliance software won't accept the current version, forcing me back to version 9. I am pretty certain the version of Cisco VPN and accompanying compliance module are a little downlevel at the agency where I work. In your defense, other current version anti-virus software will not be accepted by the VPN's checker. Does anyone at ESET know about this software and can tell me out of curiosity what versions of Cisco's software are needed? If this needs to go offline into some PM (probably better), I am ok with that. Thanks

Still nagging the websites to block that domain's junk. Still getting the messages from ESET. Thanks for the info.

Still getting the address blocked messages this morning. Again e-mailed the two websites that are in question. That domain appears to serve many websites as indicated above. Does ESET typically try to contact the domain in question to get them to fix what is wrong?

Wonderful. I have sent a bunch of e-mails to WTOP.com and nothing has been done to block the domain. Perhaps you could try webmaster@wtop.com. I can read the stories, and just ignore the messages, Marcos, or should I stay way until it is resolved one way or another?

Version 7.0.325 (I can't upgrade any higher as the Cisco NAC client version we use does not accept V8 or V9). Current defs, Windows 7, Firefox. While on WTOP.com (radio station news site in Washington, DC, USA), I am getting "address blocked" messages visiting any story link, example follows from log: 5/26/2016 12:13:21 PM hxxp://0smhezbyrqrjm51c30dkaasv6ralrn.eclampsialemontree.net/qIAk7pwY1w6BO7pOidseVNRVwCRF1NXFwBWgIPGUFYXWkQUVQNQFEBSxtYEVxWRE8WBwsKVF9XZENYFVsVUAFdUA9FSlBTVFZUVl8RSlBUHFsEFkMcQxFaY1wKYVcQSghXWRIJRgUcAU1RGkgXBlxMLQVKXkACFFdVBFUHA1FBT0FCSUIDGwhEVl4IAFgBGh8Bv8H46WupdsoijVHdsoijV8J Blocked by internal blacklist C:\Program Files\Mozilla Firefox\firefox.exe (domain/userid/IP address omitted. What is the deal with eclampsialemontree.net? This started this morning. Not sure which recent definitions file is triggering this. WTOP.com has been notified as well. I also sent a sample to the lab as a possible false positive. Edit: Same thing coming up on nydailynews.com.

UPDATE: Solved - bad wi-fi network redirecting things. Back on office wi-fi, which is working fine. My bad and I have learned my lesson.

Numerous webpages such as htttx://wtop.com, httx://wjla.com and other media websites will not let me click on anything on the webpage. No hand icon cursor shows up. The cursor remains an arrow and the IE status bar at the bottom shows a rdsrv.com link with click.bidder in the URL and a long string after that. This behavior occurs in IE and Firefox. Most other webpages are working fine. ESET detected nothing real time or with a computer scan (running version 8 with defs 10806). Malwarebytes quarantined some registry entries and had me reboot the computer, but the odd behavior still exists.

For the first time today, one of my machines allowed me to update to Version 8.0.304 from within ESET (PCU). The odd thing is, my other machine, a laptop, is still showing Version 7 as the latest version. Had no problems applying the update. Both machines are running Windows 7. Any reason why one install of ESET would see Version 8, and the other Version 7 as the latest version when "check for updates" is clicked. I flushed the update cache and rebooted with no luck on the laptop. Edit: Three hours later, the laptop install of ESET now sees Version 8!

This bit a lot of people, including my home PC. As usual the good folks at ESET posted the correct fix! I had tried several Microsoft tools they suggested with no luck. Someone in a Microsoft forum also came up with the correct answer which is shown here. Users should not have had to go into their network settings to do this. Many people did not know the proper steps to get to the DNS dialog box.

You need to get off Windows XP, you aren't even current with service packs and fixes.

Thanks Marcos. If you do block this domain, can it be overridden by a whitelist entry on my end? I use the websites listed in the OP a lot. I have let several of the webmasters who replied to me know what's up. I NEVER click on ads. Even reputable websites like the ones I visit have some very strange ads on them.

Done yesterday - false positive report sent to the e-mail address listed - I have not heard back. And I went to one of the websites listed above today and nothing came up. (defs 9767). Weird. I'll see what happens. Thanks

I am getting multiple "address blocked" messages when hitting multiple websites, including www.wtop.com, www.wjla.com, www.wral.com, and Washington.cbslocal.com. The messages are generally as follows: 5/6/2014 1:46:12 PM Blocked by PUA blacklist C:\Program Files\Internet Explorer\iexplore.exe <domain>\<userid> 5/6/2014 1:46:10 PM h xxp://lax1.ib.adnxs.com/ab?enc=nxpQ4zpf7D9i2sNDl2TpPwAAAAAAACBAYtrDQ5dk6T-eGlDjOl_sPyf7RAD1m880A8ohj_aY3QdQIGlTAAAAAC27BwDLAQAA6QMAAAIAAAC_Ct8AcgkBAAAAAQBVU0QAVVNEACwB-gBtNIkDzrsBAgUAAQMAAIwAuSQCbAAAAAA.&tt_code=12851&cnd=!viic5QjfvLUBEL-V_AYYACDykgQwADgAQABI6QdQrfYeWABgywRoAHAAeACAARyIAe74AZABAZgBAaABAagBA7ABALkBnhpQ4zpf7D_BAZ4aUOM6X-w_yQGeGlDjOl_cP9kBAAAAAAAA8D_gAQDqAQcxNDQ2NTYz9QGamUlA&ccd=!gAZxPgjfvLUBEL-V_AYY8pIEIAA.&udj=uf('a',+256674,+1399398480);uf('c',+2973279,+1399398480);uf('r',+14617279,+1399398480);ppv(146626,+'3805431686725172007',+1399398480,+1400608080,+2973279,+67954,+0,+0,+1209600);&vpid=533&apid=28456&referrer=hxxp://www.wral.com/&media_subtypes=1&ct=12&dlo=1&pp=49DE702336A8A8BA Blocked by PUA blacklist C:\Program Files\Internet Explorer\iexplore.exe <domain>\<userid> I have sent samples to ESET to determine if this is a false positive or something the technical folks at these websites need to be made aware of. ESET 7.0.302.26 Firefox 28 IE 11 Windows 7 Used Malware Bytes and ESET to scan my system and nothing is found

Keep an eye out for "The program modules have been updated" message boxes from ESET. There have been several in the last week or so.

Any chance this can be translated into English? Always curious as to what is going on with ESET.

Both my work PCs are running ESET Version 7. They are currently running Windows XP and are to be upgraded to Win 7 (finally) next week. The IT person wants to format the hard drives and then install the Win 7 image (he does not want to do the "Custom" install). Is it best to uninstall ESET before this is done or just reinstall/re-register ESET as they are the same 2 computers currently running the product?

Been using Version 6 on XP for over a year with no issues (one of these days, the boss is going to give me a new computer).

Thanks. I switched to Firefox to visit the news website and have not gotten any alerts. I have e-mailed WTOP's webmasters again to look into this. Probably won't hear from them.

While surfing WTOP.com, a legitimate website for an all news station located in Washington, DC, ESET is complainng about a blocked address from time to time when the page reloads. The log records are all the same, a sample follows: 9/25/2013 6:33:01 AM hxxp://delivery.globalcdnnode.com/7f01baa99716452bda5bba0572c58be9/afr-zone.php Blocked by internal blacklist C:\Program Files\Internet Explorer\iexplore.exe <company>\<userid> I have had no luck contacting the webmasters of WTOP.com. Can someone at ESET doublecheck and see what is so offensive at the website listed in the log record above?