William Hudson

Yay, thanks!

Thanks, the last part of this post is encouraging since it refers to the MS article that I mentioned which is very explicit in describing that it is the firmware in flash memory that's being scanned. Thanks for that. So how do we raise a change request to get ESET to update it's help page on custom scanning and to fully describe the effect of the Boot sector/UEFI option? (The page is here @ https://help.eset.com/eis/14/en-US/idh_scan_target.html. If you read it you will see that the option isn't mentioned at all. This was accessed from the Custom Scan dialog in Internet Security 14.0.22.0.)

For anyone who's not seen an UEFI/EFI partition.

Can I just clarify that there is NO MENTION of the UEFI option on the help page for the custom scan. It is missing. This needs to be remedied @ https://help.eset.com/eis/14/en-US/idh_scan_target.html The Boot Sectors/UEFI option also needs to be better described. Boot sectors are on the disk and so is the UEFI partition (see post above). So that option sounds like it may be a disk scan only. None of the ESET articles I have seen state clearly that motherboard firmware is being scanned, unlike this description of a Microsoft solution that is very clear @ https://www.microsoft.com/security/blog/2020/06/17/uefi-scanner-brings-microsoft-defender-atp-protection-to-a-new-level/

See https://en.wikipedia.org/wiki/EFI_system_partition

Thanks, but the problem I am reporting is the absence of any information on this item in the help page that appears (URL in my original post) when you click the question mark in the top right of the dialog you show. The crux of the problem is in the title of this thread: "Missing Help Info on Boot sectors/UEFI Scan". I do know how to run the scan, just not exactly what it does and specifically, whether is accesses firmware on the motherboard or just software images held on disk.

I was hoping that the help info for custom scan @ https://help.eset.com/eis/14/en-US/idh_scan_target.html would tell me whether the UEFI firmware held in flash was scanned but there is no mention of boot scanning it at all on that page. Could ESET please update this page to include that information? UEFI is quite complex and various bits of it are held in different places. I specifically want to know whether the contents of UEFI flash memory are scanned.

Great, thanks for your speedy handling of this.

I have suddenly started getting messages from NOD32 regarding blocked access to a Microsoft URL mrodevicemgr.officeapps.live.com Does anyone know if this is really a phishing problem? Does blocking it upset MSOffice? The URL is listed by Microsoft here @ https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges The full message I'm getting (from the log, so not pretty) is: Time;URL;Status;Application;User;IP address;SHA1 04/02/2020 10:01:06;https://mrodevicemgr.officeapps.live.com;Blocked by Anti-Phishing blacklist;C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe;ORWELL\willi;52.109.76.40;24F5E9F445912D05C05A45AB17E11FBDFAAF2FBC