rugk
-
Posts
1,716 -
Joined
-
Last visited
-
Days Won
54
Posts posted by rugk
-
-
Okay, for case 1 it may be useful, but case 2 would be a "misuse" of ESET Anti-Theft. Because it's ESET Anti-Theft is - like the name says - an Anti-Theft service and not a "show me where he/she/it-is"-service. I think for locating by a friend or so you can also use other apps.
BTW I'm not fully sure but I think that the device isn't blocked if you use the SMS commands (e.g. eset find).
-
Ahh you mean this...
Well, if it wouldn't lock the device then the thief would be able to deactivate GPS or do other things, which wouldn't be good in this case.
And if GPS is deactivated you can't locate your device anymore.
-
Instead of bumping this thread it would be a better idea to answer my question and reproduce the problem.
-
@cohbraz
This is already possible. The thief won't get any information when you select "Mark as stolen" in ESET Anti-theft.
But the user of the device will get one when you choose to run a test, but as this is only a test this doesn't matter.
-
@Marcos
But why are you writing this in this topic...
If I'm right the issue you're talking about was an issue about this was an issue about video stuttering or something similar. Unfortunately I cannot find the original topic now.
However I can imagine to what you are referring...
[they] often cite Eset's performance as being an issue
No, no, I think he doesn't mean "they say ESET has performance issues"1, but "ESET has a good performance - that's an issue". Maybe they explain this in such disputable ways as "they scan very fast, so they scan cursorily..." - or maybe they say other reasons - but this doesn't matter now.
Fact is that nobody talked about any performance issues in this topic. This topic is about a file detection (
issue).1 And even this wouldn't mean they they talk about network performance issues. Performance issues could be... anything - okay, maybe not anything, but at least very different, because many things can "perform" more or less well...
-
Now I found the thread: Forum specific: Mixed content
You can also see that the source of this issues are the Twitter pictures, because not on every forum site appears this issue.
So this issue is already known some months. @Marcos said they "have been considering possible solutions".
But I never would have thought that this "solution" would be to remove the SSL/TLS encryption...
The best, simplest (and maybe the only) solution is to adjust the Twitter integration in a way that it doesn't call hxxp://twimg.com/..., but https://twimg.com/...!
And BTW if we're already talking about the TLS/SSL security of this forum, then please use SHA-2 for your next certificate and deactivate SSL v3. It would also be a nice idea to activate the support for TLS v 1.2.
-
I was trying to reproduce the problem (I'm also playing WoW while using ESS8), but without success
No, don't worry. That's a good message!
-
It was meant in jest (given forums such as Wilders analyse AV test results and often cite Eset's performance as being an issue) - but let's not let a little fun get in the way.Well... there are also many AVs which doesn't "pick it up". Also "test winning" is very much expansible and doesn't say many things...
Ahh... it was a joke.
Sorry for this confusion. -
Not directly links but things included.
I think I already reported this issue with mixed content. And I think the reason was mostly because of Twitter profile pictures from users who linked there account to Twitter.
Why do you want to remove HTTPS support? That's strange. If you already have it and already have to pay for the certificate just leave it there.
-
Look at all those test winning AV's picking up this unwanted file..
Well... there are also many AVs which doesn't "pick it up". Also "test winning" is very much expansible and doesn't say many things...
Additionally you don't know how virustotal tests the files. E.g. it's also interesting that OpenCandy is detected with ESET on virustotal, because the default settings for ESETs products is not to detect potentially unsafe applications.
The same way it is of course also possible that a AV vendor listed there which isn't listed as detecting OpenCandy can - in a real usage - detect OpenCandy. That's one reason why VirusTotal shouldn't be used for things like AV comparison, like themselves say.
-
BTW you can mark this post as solved now...
(If there is a button - I think new users aren't allowed to mark posts as solved here...)
-
Is there a PUA in that one as well ? I have no idea what file that is.
Well... this may also be a PUA. As uploaded.net is free to use they can make it similar like file-upload.net, which I used for some files recently...
They added a download manager for these files which ESET blocked. This was the reason why I changed my links and use another file hoster now for the "alternative download links" I used somewhere.
So, @str8arrow, does this happen with every file from uploaded.net? And can you provide us with an example link to a download please? (Or at least a screenshot of the message you get from ESS...)
-
@SweX
It's not "clean" and it's no FP. It's just a PUA...
So all explanation why it is detected are already in this thread.
What did the notifications say at the moment the download was terminated, what was it detected like ?
You can simply reproduce it. Download FileMenuTools from the creator site (Lopesoft). Then you will see this message:
But note that...
- there is a "No action" button.
- the detection can simply be deactivated. (I feel like I already linked hundred times in this topic to this article...)
- and there are other nice ways to get around OpenCandy.
-
@yongsua
Yes that's the same which Marcos also said. And as you see ESS blocks it too.
@str4arrow @Marcos
Attention: It is detected as a potentially unsafe application. Usually we say PUA only for a potentially unwanted application. This are two different categories (and settings in ESS).
More information about OpenCandy and some tips how to block it, while still installung the (wanted) software you can get here: https://forum.eset.com/topic/3701-block-pua-inside-installers-from-nero-burning-rom-orbit-downloader-imgburn-dvdvideosoft-install-them-without-opencandy/
-
Try it out and begin to smile again.
After you apply the settings you should be able to successfully download the file.
-
Great that it worked nicely for you.
As an input file all text files are working great. Just use .txt or .lst. (normally .lst only means list and the content is a text file anyway...)
And you could have leaved the headings there. All lines beginning with usual characters, which indicate comments, are ignored.
I am assuming that being set to "off" implies that I would not see any breaches in a log file.
Yes that's right. The log option is just the same option as you can see in the rules list later. By default it is disabled (in most predefined rules too). If it would be enabled then you could see the entries in "Tools → Logs → Personal Firewall".
I guess I could always take one of the IPs and enter it into the browser to see what happens.
Of course you can. However in your current configuration you won't get any notification (or log entry) if an application is connecting to these IPs.
If any, I will first delete the existing rule in Smart Security and then run the updated list through the tool and reimport.
Yes, that's the only possible way. Otherwise you would have two rules in ESS...
-
Is such an amount of memory usage normal for ESS 8?
Definitively no! The normal usage of ekrn.exe is about 100MB.
Some time ago, we already had this "high-RAM-usage-issue". Maybe a look into this topic can help you.
So basically you may create a dump and PM it to a moderator here.
-
Thank you very much for taking the time to test this on your own. How long did your test run?
Surely 3 days...
No seriously, if NOD32 would have such an option then it would surely be below 30 seconds and I think it would also be configurable.
As both isn't the case I think there isn't such an option. But as a future suggestion this would be a neat idea.
I thought ESET would have data available from their own development tests. Is this forum the proper place to ask for that type of data? If not here, do you know where I should ask?
Well... there are many forum members (mods and "staff members") from ESET here - some are from ESET Slovakia, some from ESET NA and also a few from other countries.
But as ESET is a huge company, nobody knows everything. Especially if this is such a detailed question like you asked.
So maybe there are other forum members which can answer your question more certainly, but Marcos test is also a way to find the answer out...
-
And? Has this parameter affected the issue?
-
Do you have SSL scanning enabled by chance?
If so then this is quite well known to me:
Error code: ERR_CONTENT_DECODING_FAILED
More information you can get in this topic.
-
Upload it/them to a file hoster and PM Marcos the link.
-
OK, yeah... security issues are everywhere...
-
You can post a screenshot by clicking on "More reply options" (or "Full editor") and click on "Choose Files..." to upload them. Normally flash player is used, but you can also switch to the "basic uploader"...
Alternatively you can of course also upload the picture on a file hoster and paste the link to the file here.
-
No problem. Your links about password (alternatives) are also very nice.
Sorry for this confusion.
Maxiumum protection setup for ESET AV
in ESET Internet Security & ESET Smart Security Premium
Posted · Edited by rugk
To revert any changes of the settings and use the default settings - which are already optimized with "maximum security" (at least in a way that it says this on the home screen), you can reset your settings in the bottom right corner in the settings).
But there are no "settings packs" from which you could choose. So e.g. you can't choose "apply settings for balanced security" or "apply settings for lowest security".
However what the settings for "maximum security" are is difficult to say. It strongly depends on much the user wants to get messages from ESS.
But basically I would also agree with Marcos that ESET LiveGrid is an important thing which should be activated.
Then there are some settings which aren't activated by default, because of bigger or smaller (even very small
) disadvantages they have. So read ion the in-product or in the ESET KB help about this and decide by yourself whether you want to activate this:
But one note about the last two settings: Use them only when you have a basically knowledge about computers and Windows. If you enable them you will get questions from ESS asking you whether you want to allow some things. If you don't want this or already now that you wouldn't be able to answer this questions, let them as they are (on automatic mode) - this way you won't be "annoyed" by ESET.