katbert

Same question about virus in e-mail (eicar). How to see sender and recipient of infected message?

I have MailSecurity 6.3.10005.2 with deleting attachment rules Rules work fine, but I can's see full info in ERA console \ Threats I see: cause = blocked action = deleted object = filename.zip occured = date scanner = mail server filte Is it possible to add sender and recipient address in Threats view or custom reports?

ESET Mail Security for Exchange 6.3.10005.2 with default settings add headers to all scanned outgoing messages: Old-x-esetresult: clean, is OK Old-x-esetid: 37303A29ACF7C96F67726A X-EsetResult: clean, is OK X-EsetId: 37303A29ACF7C96F67726A In Mail transport protection I can fully disable it using "Write scan results to message headers" setting. But it is usefull to view headers for incoming messages Is it possible to add ESET headers only to incoming messages?

Same problem with one server with ERA agent and Mail security installed After two weeks of work, this agent can't connect to server Last error in log is: connection to 'host: "XXXXXXX" port: 2222' failed with: (0x79), The semaphore timeout period has expired Uninstalling agent and installing again don'f fix this problem Telnet to ERA's hostname and port 2222 - works

How about more detailed error description in activation task results? Task failed, but problem with Eset certificate I can see only in sniffer results

I have a problem with activation one of my servers with Eset File Security 6 This server never had direct internet access. Policy with proxy settings (apache http proxy on ERA Server) was applied. But activation task fails. On other servers with same policies activation work correctly. With Wireshark I see connection attempt to edf.eset.com through apache http proxy And I see direct connection to ctldl.windowsupdate.com, which fail This is Windows trusted root certificates update source. When I try to connect edf.eset.com using Internet Explorer on this server. And I see, what IE don't trust certificate of edf.eset.com. I manually download certificate of eset.com, and install "thawte Primary Root CA - G3" in the trusted root CA store. And after this activation task finished successfully. Why ERA Agent don't install necessary root certificates in Windows Store?

Same question Eset MailSecurity 4.5.10023.0 can block *.js attachments by rule But if *.js in zip archive - don't block If I enable detection of potentially dangerous attachments - MailSecurity block only files with double extension in zip (*.doc.exe in zip) Is it possible to create rule to block any *.js files in zip archives?

We started migration to v5 Tools\Sceduler\ startup scan when user logon Same question for v5 - where to find logs of startup scan?

With EAV 5.0.2254 everything works without problems How to troubleshoot EAV 4.2? Where can I find startup scan task logs?

This week one of our client reports about issue with Eset Antivirus 4.2.71.3 on Windows XP SP3 Users of WinXP workstations in many remote braches can't work with their profiles Workstations are not memebers of domain On each workstation exist 2 accounts - 'user' and 'admi'n, and 'user' auto-logon to Windows after boot If I logoff from user session and try to logon with admin account - windows can't load admin's profile and use temp profile But if I disable default startup scan task (started when user logon) in ESET sheduler - problem does not occur Maybe last ESET updates break something? How to look at startup scan task logs?

How about commands from my first post: msiexec /x{33E9FCD1-1B2B-49B2-8CE5-75328B629D67} /qn REBOOT="Force"

If firewall on client (with EAV v5) block inbound connections - uninstall task from ERA5 can't work From ERA v5 help - remote install task uses ADMN$ share

We have ERA v5

ERA Server is located in DMZ, and only port 2222 and 2221 are publeshed to external clients ERA server can't access admin$ share on external clients Can ERA uninstallation task work in this case?

I/m trying to create script for uninstall Eset Antivirus 5.0.2225 I can do this in two ways Generic MSI package way: Using modified command line from Uninstall shortcut (from Strat menu): But I cant's find any official documentation about uninstalling. Which way is recommended and officially supported?

Is it possible to install Eset Smart Security (5.0.2254) over Eset Antivirus (5.0.2225)? Or I need to uninstall Eset Antivirus, reboot computer, and install Smart Security?

ERA6 user guide don't show difference between "Agent Certificate" and "Agent certificate for server assisted installation"

How about documentation/KB article about default certificates?

I'm trying to install ERA 6.1.33 Agent using agent deployment task When configuring task settings, which certificate shoud I select: "Agent Certificate" of "Agent certificate for server assisted installation"? Second question - can ERA 6.1.33 push install Agent on workstations without internet connection? With default settings of Agent deployment task I see error in local workstation event log: ESET Remote Installer Execution finished with 0x653, This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package. Error code: 0x653 MSIInstaller - wants hxxp://repository.eset.com/v1/com/eset/apps/business/era/agent/v6/6.1.444.0/Agent_x86.msi

Is it possible to exclude folder (not only extensions) from real-time protection in Eset Endpoint Antivirus 6? v5 can do this: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN2769

I'm trying to install ERA using sa SQL account, and allow to create eradb account at the next step For which user change default language?

vfiuchcikicshuusrch, which is your SQL version and lang?

Next try - to install ERA 6.1.28.0 on domain controller Windows Server 2008 R2 SP1 Russian, with manually installed SQL 2008 R2 Express SP2 Russina, configured as default instance. Critical error (executing database script) againt ERA Server installer is not compatible with Russian SQL Express (installed with default settings)

Successfully installed ERA Server on test domain controller (Windows Server 2008 R2 SP1 Russian) Difference from the first post: 1. Manually installed version of SQL 2008 R2 Express SP2 is English, not Russian (SQLEXPRWT_x64_ENU.exe, ver 10.50.4000) 2. Install SQL as default instance, not SQLEXPRESS ERA installer stop with critical error (executing database script) - when using Russian SQL Express and/or using named SQL instance SQLEXPRESS

In test environment I installed ERA Server on member server 2008 R2 SP1 Setup install and configure bundled SQL express - and comleted successfully How about KB article about configuring manually installed SQL instance?