NewbyUser

Is there any benefit to using learning mode before smart mode? Not sure I understand the difference between smart mode and automatic mode

Thank you Marcos.

Does Smart Mode honor rules that were created in Learning Mode? Or is learning mode only effective for Policy Mode or interactive modes?

Thanks, sorry.

Interesting article on the issue of LOLs. https://www.darkreading.com/threat-intelligence/open-source-project-aims-to-detect-living-off-the-land-attacks

My guess is it's an Eset issue, seeing it in the consumer version as well.

Seeing files being sent at obscure times here as well. Last two times have been during system bootups.

Now try and restore from that restore point in a week or so. It will fail every time. Restore from a point a few weeks to a month in the past, never works for me. Yes you can create a restore point and then restore from that right away successfully, but beyond that I have never had a restore operation work.

Same here. Windows restore is not compatible with Eset products here either.

So which is it? Missed detection by Eset or FP by everyone else?

Great support here.

https://silicophilic.com/fix-application-error-0xc0000022/

Are the people having problems with installing using any type of Windows Hardening applications or settings through group policies? If so return those settings to default or remove or disable said apps before attempting to install any Eset app.

https://www.eset.com/int/home/internet-security/download/#download-manually

https://support.eset.com/en/kb2885-download-and-install-eset-offline-or-install-older-versions-of-eset-products?ref=esf

https://support.eset.com/en/kb3466-how-do-i-use-eset-log-collector

After updating to 3.1.2 on iOS I have to open password manger several times before saved logins appear. Usually there’s nothing there the first few tries.

At any rate, everything works as far as I can tell, so I marked @Marcos post as solving it, so unless he comes up with something else, thanks for everyone's time.

Not the same version, I have 10.24.5, dated 10/17/21, that file analyzed was a year ago and the file was from 11 years ago

I have ehdrv, it's efavdrv that's missing according to autoruns.

This is ehdrv, which while it is an Eset helper, is not the same file. https://www.file.net/process/ehdrv.sys.html

Not sure where this file reference comes from then. This laptop was made in 2016, way after WinXP obviously, I don't recall using Rogue App cleaner, I did use Eset online scanner once last year I believe while using Emsisoft, which is the only other AV/AM that's ever been on this laptop once I removed the McCrappy that it came with preinstalled.

It is explained way it is hitting markers to classify it as malicious, it does a lot of things malware would do. https://www.hybrid-analysis.com/sample/9842097cea0ecf59dbfdc0f9e020049c52bd4ab8c591559b0c9bebf63de3fc10/58ebda38aac2ed8e4881f64f

Been using Eset for quite awhile, but I don't recall using any stand alone cleaners, I may have used the Online scanner once or twice. Like itman said I found that it's supposedly tied to ESSP, but since joining Insiders the last few months is the first time I've used this product, I've always used EIS previously.