SeriousHoax

@itmanIs it gonna help if he reinstalls Windows from an ISO and while installing remove C drive partition along with recovery, efi, partition. Then Windows will re-format efi at the start of the windows installation process.

Turn it on. It's not related to ESET, it's smartscreen that's built into the system. It doesn't usually turn off automatically so not sure what happened there.

Did it updated from version 13 to 14 or did you freshly installed version 14? If it's the first case then uninstall and reinstall ver 14 as suggested.

The best suggestion I can give you is to not use uTorrent. It is not recommended anymore and many security software detect it as a PUP. Switch to something like qBittorrent: https://www.qbittorrent.org/

@MarcosHi, Marcos. Any update on this issue? Are the devs aware of this?

This is a known behavior of ESET. ESET is very sensitive about these types of sites and like you said, in my experience also the only AV who completely blocks similar sites this way. I often need to visit some not so trustable sites to watch football (The real football😉) matches during weekends and ESET blocks 8/10 of those sites with similar detection. I have to turn of ESET's web protection completely to watch matches. But I open my browser in sandboxie and ESET's real time protection gets rid of any untrusty scripts the browser saves on its cache so I stay protected anyway. Now we can argue that ESET shouldn't behave like this or they can simply block that faulty script and still let us visit the sites but that's not gonna happen. Each product has their own way of dealing with it and ESET's way is to totally block the site. You can try putting zippyshare in exclusion, temporarily turn off web protection (at your own risk) or not use ESET as an AV anymore.

Good to see you found a logical explanation. Now ESET needs to react and fix it soon. It's been almost 5 months now.

I also have this now but all are associated with todays date. So, maybe it means it only started after ESET was installed.

Now I'm having random CPU usage issue with WMI Provider Host. Sorry, can't provide anymore feedback on this. I just uninstalled ESET and this problem is gone immediately.

I just did and then scanned WMI only after you asked and again there's an error in reliability history.

No that one was before ESET was active as an AV. As you can see, the timestamp of ESET installation and that definition update is the same. WD probably automatically updated itself when ESET was installed. After installing it took ESET more than 5 minutes to download the required modules and then to be activated. Before that WD remains active as the main AV. After that WD has been disabled automatically by ESET. Security center integration is fine and periodic scan is disabled.

Hi, I'm also seeing WMI related crash whenever a WMI scan is done. The first one was during the initial scan and the next two are from custom scan. This is a freshly installed version of ESET 14. No other AV was installed before this except Windows Defender of course.

We can't change what happened and you're unlucky that a non-authorized seller sold you a pirated license 2 years ago. Now if you're still reluctant to buy from your local ESET website then you may go to one of the authorized partner by yourself and buy a physical copy of it from there and this time make sure to register the ESET license to your ESET account. An account isn't needed but it lets you see if the license you is being used on a PC or not. https://www.eset.com/lt/platintojai/

Try collecting logs and share here. Then uninstall ESET. 150 PB in a week? This is really hurting your HDD. On the forum I see another user also having similar high ram usage issue. Wait for ESET to find out the root of the problem, fix it and then install ESET again.

I think he wouldn't want to change the number of maximum connection as changing this in a way makes the use of IDM obsolete.

Try collecting logs and share here. It may help ESET troubleshoot the issue even though it may have been fixed on your PC.

Off topic maybe, please consider ditching utorrent for something like qBittorrent. utorrent installer usually comes bundled with pup and has other risks also and as you can see it's detected by ESET too.

So what does this new registry scanner look for? Potential malicious changes made by malwares like Malwarebytes or less effective than that? Will this also be integrated into ESET's removal engine? As of now, ESET's real time protection don't look for registry modifications made by malwares at the time of removal.

Try blocking all inbound connection in ESET firewall by creating a rule. Does that help?

Same in Chromium Edge. This is not good.

ESET is unlikely to be the villain here. If you want to be sure then you should check the logs like this. Also you may check other logs like detections and HIPS.

Maybe he should scan his system by Norton Power Eraser and Malwarebytes. These are very good at finding leftovers and potentially malicious registry modifications. Scan with this: https://support.norton.com/sp/static/external/tools/npe.html https://www.malwarebytes.com/ Make sure to disable the trial Pro version of Malwarebytes. Only use it as a scanner.

I used it before. It's also available on Linux. If he downloaded from the original source then it's safe. He got the malicious script from cracked Adobe installer. Right, I also think there maybe something in the Startup directory.

Scroll down and post more pictures here. Your startup folder is not fully visible here. Also, beore sharing enable from Options > Scan Option > Check VirusTotal.com.

I think FDM is not the likely source of it. It's a malware/adware free trusted app used by many people.