Jump to content

knicks_fan

Members
 View Profile  See their activity

  • Posts

    28

  • Joined

  • Last visited

 Content Type 

Posts posted by knicks_fan

    ESET requires your attention (again?)

    in ESET NOD32 Antivirus

    Posted

    About six times today, the action center in Windows 10 (1703) keeps popping up "ESET NOD32 Requires Your Attention". I take a look and nothing appears to be happening to display this (defs up to date-16007 as of this writing, ESET is happy there), ditto for Windows Updates (just verified again with Control Panel). I went to NOD32 Version 10.1.219 when it was offered to me. This is more an annoyance then anything else. The action item disappears once it is displayed.

    Version 9.0.408.0

    in ESET NOD32 Antivirus

    Posted

    I have one machine at 9.0.408 that updated to that latest dot release a few weeks ago on top of the version which can be downloaded from the ESET website, which still pulls down 9.0.386.0 and has old virus definitions. I would love to go to version 10.1, but refer here as to why I can't: https://forum.eset.com/topic/11629-eset-and-cisco-vpn/

    - why won't my desktop machine install version 9.0.408? Am I really missing anything? Clicking "upgrate" with the app wants me to go to Version 10.0.390 (not 10.1 as now indicated is latest version)

    - why is the download page still showing 9.0.386 and old definitions?

     

    Both machines are running 64 bit Windows 10.

     

    Dial-up speeds downloading virus definition updates

    in ESET NOD32 Antivirus

    Posted

    I just reinstalled Version 9 from the website (see previous topic why). The definitions are not current, so ESET is trying to download 75Mb+ of updates. The progress looks like it is 1998 and I am back on a 56Kb dialup line. I have checked our network and there are no slowdowns.

    - why doesn't ESET keep the definitions file somewhat up to date when you download software?

    - I am in the USA, where is the download server I am using?

    ESET and Cisco VPN

    in ESET NOD32 Antivirus

    Posted

    Once again, I tried to go to the current (10) version of ESET. Once again, the Cisco VPN compliance software won't accept the current version, forcing me back to version 9. I am pretty certain the version of Cisco VPN and accompanying compliance module are a little downlevel at the agency where I work. In your defense, other current version anti-virus software will not be accepted by the VPN's checker. Does anyone at ESET know about this software and can tell me out of curiosity what versions of Cisco's software are needed? If this needs to go offline into some PM (probably better), I am ok with that.

    Thanks

    False positive?

    in Malware Finding and Cleaning

    Posted · Edited by knicks_fan

    Still getting the address blocked messages this morning. Again e-mailed the two websites that are in question. That domain appears to serve many websites as indicated above.

     

    Does ESET typically try to contact the domain in question to get them to fix what is wrong?

    False positive?

    in Malware Finding and Cleaning

    Posted · Edited by knicks_fan

    Version 7.0.325 (I can't upgrade any higher as the Cisco NAC client version we use does not accept V8 or V9). Current defs, Windows 7, Firefox.

     

    While on WTOP.com (radio station news site in Washington, DC, USA), I am getting "address blocked" messages visiting any story link, example follows from log:

    5/26/2016 12:13:21 PM hxxp://0smhezbyrqrjm51c30dkaasv6ralrn.eclampsialemontree.net/qIAk7pwY1w6BO7pOidseVNRVwCRF1NXFwBWgIPGUFYXWkQUVQNQFEBSxtYEVxWRE8WBwsKVF9XZENYFVsVUAFdUA9FSlBTVFZUVl8RSlBUHFsEFkMcQxFaY1wKYVcQSghXWRIJRgUcAU1RGkgXBlxMLQVKXkACFFdVBFUHA1FBT0FCSUIDGwhEVl4IAFgBGh8Bv8H46WupdsoijVHdsoijV8J Blocked by internal blacklist C:\Program Files\Mozilla Firefox\firefox.exe (domain/userid/IP address omitted.

     

    What is the deal with eclampsialemontree.net? This started this morning. Not sure which recent definitions file is triggering this. WTOP.com has been notified as well. I also sent a sample to the lab as a possible false positive.

     

    Edit: Same thing coming up on nydailynews.com.

    rdsrv.com takes over webpages

    in ESET NOD32 Antivirus

    Posted

    Numerous webpages such as htttx://wtop.com, httx://wjla.com and other media websites will not let me click on anything on the webpage. No hand icon cursor shows up. The cursor remains an arrow and the IE status bar at the bottom shows a rdsrv.com link with click.bidder in the URL and a long string after that. This behavior occurs in IE and Firefox. Most other webpages are working fine.

     

    ESET detected nothing real time or with a computer scan (running version 8 with defs 10806). Malwarebytes quarantined some registry entries and had me reboot the computer, but the odd behavior still exists. 

    ESET NOD32 Antivirus Version 8 Has Been Released Worldwide

    in ESET NOD32 Antivirus

    Posted · Edited by knicks_fan

    For the first time today, one of my machines allowed me to update to Version 8.0.304 from within ESET (PCU). The odd thing is, my other machine, a laptop, is still showing Version 7 as the latest version. Had no problems applying the update. Both machines are running Windows 7. Any reason why one install of ESET would see Version 8, and the other Version 7 as the latest version when "check for updates" is clicked. I flushed the update cache and rebooted with no luck on the laptop.

     

    Edit: Three hours later, the laptop install of ESET now sees Version 8!

    Microsoft Kb2982791 And Windows Update Error Code 80246002

    in General Discussion

    Posted

    This bit a lot of people, including my home PC. As usual the good folks at ESET posted the correct fix! I had tried several Microsoft tools they suggested with no luck.  Someone in a Microsoft forum also came up with the correct answer which is shown here. Users should not have had to go into their network settings to do this. Many people did not know the proper steps to get to the DNS dialog box.

    False Positive? adnxs.com

    in Malware Finding and Cleaning

    Posted · Edited by knicks_fan

    Thanks Marcos. If you do block this domain, can it be overridden by a whitelist entry on my end? I use the websites listed in the OP a lot. I have let several

    of the webmasters who replied to me know what's up. I NEVER click on ads. Even reputable websites like the ones I visit have some very

    strange ads on them.

    False Positive? adnxs.com

    in Malware Finding and Cleaning

    Posted

    I am getting multiple "address blocked" messages when hitting multiple websites, including www.wtop.com, www.wjla.com, www.wral.com,

    and Washington.cbslocal.com.  The messages are generally as follows:

     

    5/6/2014 1:46:12 PM      Blocked by PUA blacklist    C:\Program Files\Internet Explorer\iexplore.exe    <domain>\<userid>

     

    5/6/2014 1:46:10 PM    h xxp://lax1.ib.adnxs.com/ab?enc=nxpQ4zpf7D9i2sNDl2TpPwAAAAAAACBAYtrDQ5dk6T-eGlDjOl_sPyf7RAD1m880A8ohj_aY3QdQIGlTAAAAAC27BwDLAQAA6QMAAAIAAAC_Ct8AcgkBAAAAAQBVU0QAVVNEACwB-gBtNIkDzrsBAgUAAQMAAIwAuSQCbAAAAAA.&tt_code=12851&cnd=!viic5QjfvLUBEL-V_AYYACDykgQwADgAQABI6QdQrfYeWABgywRoAHAAeACAARyIAe74AZABAZgBAaABAagBA7ABALkBnhpQ4zpf7D_BAZ4aUOM6X-w_yQGeGlDjOl_cP9kBAAAAAAAA8D_gAQDqAQcxNDQ2NTYz9QGamUlA&ccd=!gAZxPgjfvLUBEL-V_AYY8pIEIAA.&udj=uf('a',+256674,+1399398480);uf('c',+2973279,+1399398480);uf('r',+14617279,+1399398480);ppv(146626,+'3805431686725172007',+1399398480,+1400608080,+2973279,+67954,+0,+0,+1209600);&vpid=533&apid=28456&referrer=hxxp://www.wral.com/&media_subtypes=1&ct=12&dlo=1&pp=49DE702336A8A8BA    Blocked by PUA blacklist    C:\Program Files\Internet Explorer\iexplore.exe   <domain>\<userid>

     

    I have sent samples to ESET to determine if this is a false positive or something the technical folks at these websites need to be

    made aware of.

     

    ESET 7.0.302.26

    Firefox 28

    IE 11

    Windows 7

     

    Used Malware Bytes and ESET to scan my system and nothing is found

    Reregistering e-ESET AV

    in ESET NOD32 Antivirus

    Posted

    Both my work PCs are running ESET Version 7.  They are currently running Windows XP and are to be upgraded to Win 7 (finally) next week.  The IT person wants to format the hard drives and then install the

    Win 7 image (he does not want to do the "Custom" install).

     

    Is it best to uninstall ESET before this is done or just reinstall/re-register ESET as they are the same 2

    computers currently running the product?

    False positive?

    in Malware Finding and Cleaning

    Posted

    While surfing WTOP.com, a legitimate website for an all news station located in Washington, DC, ESET is

    complainng about a blocked address from time to time when the page reloads.  The log records are all the

    same, a sample follows:

     

    9/25/2013 6:33:01 AM hxxp://delivery.globalcdnnode.com/7f01baa99716452bda5bba0572c58be9/afr-zone.php Blocked by internal blacklist C:\Program Files\Internet Explorer\iexplore.exe <company>\<userid>

     

    I have had no luck contacting the webmasters of WTOP.com.  Can someone at ESET doublecheck and see

    what is so offensive at the website listed in the log record above?

×
×
  • Create New...