mstroud_pfi

I'm still having this issue.

Aw ok! Well that makes sense why it's not showing up. Thanks!

I'm trying to initiate a "Remote Administrator Components Upgrade" task but version 6.5.31.0 is not showing up.

Thanks Marcos. Looks like the install from the Eset website is the culprit. All installs from the ERA show up as 6.5.2094.0. Thanks for the quick response.

The console is showing two different Eset AV versions. The "Overview" tab on a node shows ESET Endpoint Antivirus 6.5.2094.1 but the "Installed Applications" tab shows ESET Endpoint Antivirus 6.5.2094.0. Is it just me?

I uploaded to screen shots of the client and ERA console. The listed threats under the threats tab is not the computer with the attached popup screenshot.

I've come across this issue a few times but users are receiving the "Warning Threats Found" popup but I'm not seeing the alerts in the ERA Console. It doesn't happen all the time. Any reason why?

Does the "on-demand" computer scan module apply to scans that are triggered from the ERA Console? For example, if I click on the computer and Run Scan with Cleaning?

Is it possible to suppress the message and execute the Clean/Delete action? We get a few user complaints when they see the popup. I would like it to perform an action automatically with no interaction.

Marcos, I did some more testing and I don't see any issues with the CPU/Memory. I can see a lot obvious disk reads when it's running a full scan but not much performance. bbahes hit the nail right on the coffin. They seem to complain about everything. Thanks!

Marcos, Our Engineering laptops are all different Make and Models but they will all have a multiple cores. Most of them are Non-SSD disks so it can definitely be an issue with reading of data. Yes, it would be better but they are all laptops so the majority of them take their laptops home every night. We used McAfee VSE and had no issues. However, I had to change a few CPU settings. Is it possible to lower the performance settings for In-Depth Scans? Any other suggestions? Thanks

I'm finishing up on my deployment of Eset but I have hit a snag with our Engineering department. I'm getting complaints of performance issues when running Eset & Autodesk. It's most noticeably when running our weekly full scan. I know there are exclusions and I'm starting to set them but I was just curious if anyone else in the forums have ran into the same issue.

Yes, we do use Cached Mode.

Thanks Jim. I recreated the profile as a quick fix and it seemed to fix it. Our "Shared Folders" are set to cache so some of their OST files can be very large.

Yes, that's what I'm thinking but I was curious about the behavior of Eset and why it would prevent synchronization? I want the Outlook integration so maybe it's just something we will have to deal with for new installations.

I'm in the process of deploying V6 AV to my users and ran into some issues today. We received some complaints today regarding Outlook stuck at updating and it was right after Eset installs on the PC. There are few posts in the forum regarding this issue but it doesn't look like it's been resolved or it could be by design. Some of these users have shared mailboxes so their OST's can get pretty large. Is Eset scanning their entire Outlook profile? If so, does it block all incoming emails or does it cause the synchronization to stop?

Eric, Actually, the service kept crashing so I had to remove the agent and then reboot. I was able to deploy it from the console successfully after the reboot so I'm not really sure what the issue was when I first deployed it.

I logged into the computer and tried the local install but it failed because another install was already in progress. I noticed there were multiple MSIEXC processes running so it must hung even though it said successfully. I rebooted the machine and tried the install again. The install got all the way to "starting services" and then failed but the agent installed. Hopefully it's a one time thing.

Yes, I found the ra-agent log. === Verbose logging started: 9/9/2016 8:40:46 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Windows\System32\msiexec.exe === MSI © (34:C8) [08:40:46:633]: Resetting cached policy values MSI © (34:C8) [08:40:46:633]: Machine policy value 'Debug' is 0 MSI © (34:C8) [08:40:46:633]: ******* RunEngine: ******* Product: C:\Windows\Temp\Agent_x86.msi ******* Action: ******* CommandLine: ********** MSI © (34:C8) [08:40:46:633]: Client-side and UI is none or basic: Running entire install on the server. MSI © (34:C8) [08:40:46:633]: Grabbed execution mutex. MSI © (34:C8) [08:40:46:680]: Cloaking enabled. MSI © (34:C8) [08:40:46:680]: Attempting to enable all disabled privileges before calling Install on Server MSI © (34:C8) [08:40:46:680]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI © (34:C8) [08:40:46:758]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI © (34:C8) [08:40:46:758]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/9/2016 8:40:46 === Event Viewer Entry: The description for Event ID 0 from source ESET Remote Installer cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: ESET Remote Installer Execution finished with 0x0, The operation completed successfully. Error code: 0x0

I created an agent deployment task and it's finishing successfully. However, it never installs on the computer. Suggest any troubleshooting steps on the ERA console?

Thanks for the help! I'll try deploying it through GPO.

Are you serious? There is no way to automatically install the agent to newly added computers within the console?

Marcos, So I followed your steps above but it did not resolve the issue. I still see 14 unresolved threats after a successful scan with no detection.

Yes, these are active and unresolved threats. I see 14 alerts that do not clear after a successful scan from the ERA console. "We recommend using strict cleaning mode, otherwise potentially " How do I specify "Strict Cleaning Mode" from the console? I created a new On-Demand scanning task with "Scan with cleaning". Are the settings you suggested defined in the policy? If so, do I change the the settings in policy and then do a new on-demand task from the ERA?