Jump to content

kapela86

Members
  • Posts

    190
  • Joined

  • Last visited

Posts posted by kapela86

  1. It didn't create duplicate entity in "Computers" list. And I found this in audit log.

    image.thumb.png.699f5cccafac630f90d457192c5c2563.png

    11:21 is me running reboot from console

    12:17 is me accepting that notification about hardware change.

     

    And we don't have tasks that are run on new computers automatically.

    I used Macrium Reflect from pendrive. Cloned SATA SSD to NVMe SSD, turned off pc, disconected SATA SSD and just turned it on.

  2. PC with Win 10 Pro and SATA SSD. I upgraded it to 11 Pro, then used Macrium Reflect to clone it to NVMe SSD. Everything was working fine. After that I noticed in ESET Protect blue notification in "Status Overview -> Questions -> Some decisions cannot be handled automatically...blablabla. -> Computer connection questions: 1". So i clicked it and there was a notification about that PC because of hardware change. So I selected that option that said the hardware was changed and clicked ok. And in a moment a co-worker calls to me and says that it had a notification that ESET will restart a PC in 30 seconds and he couldn't cancel it and his pc restared!! What the f***! How could you program it like this? With no mention in eset protect that it will reboot client PC!

  3. Nothing is returned by running that command. I used yum to check:

    [root@esetprotect ~]# yum list installed | grep apache
    apache-commons-collections.noarch     3.2.1-22.el7_2                   @updates
    apache-commons-daemon.x86_64          1.0.13-7.el7                     @base
    apache-commons-dbcp.noarch            1.4-17.el7                       @base
    apache-commons-logging.noarch         1.1.2-7.el7                      @base
    apache-commons-pool.noarch            1.6-9.el7                        @base
    

     

  4. Today I noticed this notification

    image.png.dd21f34905314e5db990b5674982adb0.png

    I then went to update, same information was displayed there, below those two standard green "panes" (I didn't screenshot it), I then manually clicked on "check for updates" and it downloaded something, updated and that notification was gone. I then checked eset log and found out that from time to time this happens, but usually when I'm not working (my PC i running 24/7).

    image.thumb.png.150b0f18e31e2d65b4dd930a6a957b44.png

    Other that that, ESET works fine. But it's not just my PC, I checked few PCs in my company and each one had these errors in log. We use Endpoint Security, currently version 10.1.2050.00. This doesn't happen on our two servers with Server Security 10.0.12012.0. We don't use any proxy etc, updates are directly downloaded from Eset servers.

  5. I've experienced this problem some time ago. Server 2016 with RDS role & Eset 10.0.12010.0. Users suddenly couldn't copy files to/from remote desktop and when they tried logging out it stayed stuck at waiting for System Event Notification Service to shut down. I tried restarting the server and it coudn't shut down so I had to reset it (powercycle), after that it was working ok and I didn't investigate it . And now today it happened again and after reset I did some checking and found out many entries in event viewer that explorer.exe was not responding because of ekrn.exe. After that I looked here and found this topic. I don't have any memory dumps etc (and even If I did, that VM has 90GB of ram). I can only provide you with this.

    Pakiet błędów 2194417022129290342, typ 5
    Nazwa zdarzenia: AppHangXProcB1
    Odpowiedź: Niedostępny
    Identyfikator pliku Cab: 0
    
    Sygnatura problemu:
    P1: explorer.exe
    P2: 10.0.14393.5648
    P3: 63b792d6
    P4: d642
    P5: 134217856
    P6: ekrn.exe
    P7: 0.0.0.0
    P8: 
    P9: 
    P10: 
    
    Dołączone pliki: 
    
    Te pliki mogą być dostępne tutaj:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_explorer.exe_c3235ec849cb1bb83f36349d51f02ab2c0f54ee7_2bda4280_c73c947d
    
    Symbol analizy: 
    Ponowne sprawdzanie rozwiązania: 0
    Identyfikator raportu: 8749a4a8-effa-11ed-85a1-00155d01dd07
    Stan raportu: 0
    Skrócony pakiet: f031ea1e2ec292664e7422a7b5163c66

     

  6. Office 2019, POP3 account, ESET Endpoint Security 10.0.2045.0

    I wanted to remove 40000+ e-mail messages from one of our account in Outlook. I selected them, Shift+Del, confirmed, Outlook started to remove them but after a moment it just canceled and ESET displayed that it found a virus (it was probably some old e-mail that was not detected at the time we received it). So I selected those remaining messages, Shift+Del, confirm, Outlook started to remove them, and again after a moment it found another virus and canceled removal.

    Honestly it's driving me nuts. I'm PERMANENTLY REMOVING these messages, why is ESET even scanning them. Sure, I can just do it again and again and again untill I remove everything, but for me it looks like a bug in ESET.

×
×
  • Create New...