Nightowl
-
Posts
1,848 -
Joined
-
Days Won
17
Kudos
-
Nightowl received kudos from New_Style_xd in antivirus version 15.0.6
I wonder what you guys meaning of all of this, LiveGuard was introduced probably because there was need for 0-day protection and also Smart Security lacked something special that differs it from Internet Security
The complaint here is that LiveGuard does take 1-10 minutes inorder to process what has been sent to Cloud and with that time it's blocked till it gets approved by ESET, even also as been reported that Signed files are even reported and uploaded, Let's not forget that before a while there was an article about Microsoft signing drivers which in the end was a malware
LiveGuard is a kind of sandbox analysis server that is available for Smart Security products, which is normal thing for a sandbox to take time to process and analyze and send back information, there was a complaint before that LiveGrid doesn't block/prevent because it didn't have an update for a kind of file/threat , now that what LiveGuard is doing , it's blocking a file that it never seen before , which what people requested in order to prevent never seen before Ransomware files
For sure a new feature , it would contain bugs and need to be fixed and optimized more and so the servers are , even if one will go and have EDTD and one endpoint for it , it would take the same amount of time for analysis
And probably LiveGuard is powered by EDTD so would be same same.
LiveGuard is very nice addition by ESET , it can be fixed and optimized more for sure and I believe by the time passes it's database will be bigger and better, it's still the first public version for it , but for the question to use it or not , well Internet Security is still there if answer is not.
-
Nightowl received kudos from Peter Randziak in antivirus version 15.0.6
I wonder what you guys meaning of all of this, LiveGuard was introduced probably because there was need for 0-day protection and also Smart Security lacked something special that differs it from Internet Security
The complaint here is that LiveGuard does take 1-10 minutes inorder to process what has been sent to Cloud and with that time it's blocked till it gets approved by ESET, even also as been reported that Signed files are even reported and uploaded, Let's not forget that before a while there was an article about Microsoft signing drivers which in the end was a malware
LiveGuard is a kind of sandbox analysis server that is available for Smart Security products, which is normal thing for a sandbox to take time to process and analyze and send back information, there was a complaint before that LiveGrid doesn't block/prevent because it didn't have an update for a kind of file/threat , now that what LiveGuard is doing , it's blocking a file that it never seen before , which what people requested in order to prevent never seen before Ransomware files
For sure a new feature , it would contain bugs and need to be fixed and optimized more and so the servers are , even if one will go and have EDTD and one endpoint for it , it would take the same amount of time for analysis
And probably LiveGuard is powered by EDTD so would be same same.
LiveGuard is very nice addition by ESET , it can be fixed and optimized more for sure and I believe by the time passes it's database will be bigger and better, it's still the first public version for it , but for the question to use it or not , well Internet Security is still there if answer is not.
-
Nightowl gave kudos to Marcos in Xiaomi Mi 9T Pro constantly losing browser protection.
ESET is likely being killed by the aggressive Xiaomi battery optimizer.
Please see https://dontkillmyapp.com/xiaomi for instructions how to create an exception.
-
Nightowl received kudos from kurco in ESET Endpoint Linux Version: 8.1.4.0 on-demand scan using 100% CPU
Hello Peter,
I've sent you the logs as a Private Message
Please check
Thank you.
-
Nightowl received kudos from FranceBB in ESET 8 for Linux has a totally useless User Interface
I would like to reply here as a request for more better GUI for the Linux edition and support for MATE desktop as still I cannot see or use the GUI
Please ESET! , I have around multiple Linux devices that I don't want them to be managed by cloud or ESET center/protect
Thanks.
-
Nightowl gave kudos to Marcos in Web access protection Issue
I'm not angry about you reporting it. Quite the contrary, we are happy if you report us possible malicious samples or urls.
I just wanted you to point in the right direction, ie. to report stuff directly to samples[at]eset.com according to the KB if you want the submission to receive better attention.
Also I wanted to point out that even if a particular website is not blocked (ie. it may be a completely legitimate one with just somebody posting links to cracks), the point is to detect possible threat in the end no matter how it is achieved, ie. by blocking access to the malicious website or by detecting the malware upon download or execution at latest.
-
Nightowl gave kudos to Aryeh Goretsky in CVE-2021-40444 are ESET user protected?
Hello,
Just to follow up since I've been out of the office, CVE-2021-40444 is currently detected as DOC/TrojanDownloader.Agent.DIC and DOC/TrojanDownloader.Agent.DHY.
For more information, please see ESET Knowledgebase Article # 8122, Does ESET protect me from the Microsoft Windows remote code execution vulnerability CVE-2021-40444?
Regards,
Aryeh Goretsky
-
Nightowl received kudos from Crystal_Lake_Camper in Need some help please
Here you can find most of the needed information about configurations :
https://help.eset.com/eis/14/en-US/?beginner.html
-
Nightowl gave kudos to Minimalist in Reputation of Programs.
Thank you for suggestion. I've tried both in past but prefer using uTorrent. My comment was just meant to show that even non-malicious processes can sometimes be shown in red.
-
Nightowl gave kudos to itman in Infected? Undetected Script wscript.exe loading from startup folder
The free version of ZoneAlarm definitely has been using the Kaspersky engine for a while: https://www.pcmag.com/reviews/check-point-zonealarm-free-antivirus-plus .
The paid consumer and enterprise versions use more Kaspersky components: http://svendsen.me/worried-checkpoints-use-kaspersky-products-heres-disable-remove/
-
Nightowl received kudos from Tzatz in Infected? Undetected Script wscript.exe loading from startup folder
Just to note , Checkpoint uses Kaspersky engine hence why they both detect it.
-
Nightowl gave kudos to Marcos in U/P for ESET NOD32 Linux
Yes but only existing holders of a NOD32 AV for Linux desktop will be eligible to get it. That said, it won't be possible to use an EAV/EIS/ESSP for Windows license for activation.
-
Nightowl received kudos from camelia in Why WaasMedic_Agent.exe download in my desktop?
You can upload your version to virustotal for more checking by AV engines to be more sure
It seems that this WaasMedic is related to Windows Update.
-
Nightowl received kudos from cwong in ESET Endpoint Antivirus for Linux version 8.0.3.0 consumes /dev/shm
Version 8.1.3.0
Added: ESET Dynamic Threat Defense support Added: SecureBoot support Added: Process Exclusions Added: Ability to check for update in GUI Added: Ability to copy support-related information from GUI Improved: Warning when product is being activated with an overused license Fixed: Update doesn't work from a mirror created by ESET Mirror Tool Fixed: Device control could block the keyboard and mouse required to log into the system Other bug fixes and minor optimizations New version was released but there is no mention of supporting new kernels , so I doubt your issues are fixed sadly.
-
Nightowl received kudos from daylon in JS/Agent.OZD
Try to clean the browser's data , like cache and stuff, you can also remove that JS manually by removing it from the folder path , or by running a scan ESET should pick it up and remove it
And also try to refrain from using IE , Microsoft is killing that browser and soon will retire and go out.
-
Nightowl received kudos from Prayer1 in ESSP Password manger
I believe they are both safe , but ESET would be more safer.
Normally malicious software will target Password Managers of Firefox and Chrome because normally that what everyone uses, ESET could be more protected against this type of attacks and more safer to use.
-
Nightowl gave kudos to Peter Randziak in Deep Behavioral Inspection blocks threads of .NET process after loading a golang DLL
Hello @Alex C,
you are welcome, credit does to our dev team as the whole analysis was done by them.
Keeping thing up to date is for sure recommended...
Peter
-
Nightowl received kudos from Ricky Martin in Upgrading to ESET Protect server?
It's still same ESMC but with a different name and a new version.
About reverting back , I don't know an ESET Staff could help more in this , but you can backup the server incase something wrong happens.
-
Nightowl gave kudos to ujeng in ESET Endpoint Antivirus for Linux User interface Cannot display
Thank for reply.
May got to switch to GNOME to show the user interface.
-
Nightowl received kudos from camelia in Am I having too many Edge connections?
Thanks for that itman , I was trying to remember the name of O&O software , I completely forgot about it and Cortana drove me crazy recently , trying to disable it every way I can , but Cortana is mighty keeps resurrecting itself haha
Thanks!
-
Nightowl received kudos from ujeng in ESET Endpoint Antivirus for Linux User interface Cannot display
I am having same trouble with MATE desktop , I believe MATE is like Cinnamon they aren't supported unfortunately
If you switch to GNOME , the GUI will work normally , but I hate GNOME.
-
Nightowl received kudos from nabeelmansoor in License Renewal
Yes they will be added , you have the remaining time of the current license and the added renewed time over it but make sure to renew the same username
-
-
Nightowl received kudos from Astterlan in Dark Mode!
It's not yet supported that's why you cannot use it
-
Nightowl received kudos from howardagoldberg in Dark Mode!
It's not yet supported that's why you cannot use it