[Threats Found on PC but not showing up in ERA Console]

I'm still having this issue.  

[ERA Upgrade Task - 6.5.31.0 is not showing up in Console]

Aw ok! Well that makes sense why it's not showing up.  Thanks!

[ERA Upgrade Task - 6.5.31.0 is not showing up in Console]

I'm trying to initiate a "Remote Administrator Components Upgrade" task but version 6.5.31.0 is not showing up.

[ERA 6.5 - Eset Security Products show different versions]

Thanks Marcos.  Looks like the install from the Eset website is the culprit.  All installs from the ERA show up as 6.5.2094.0.  Thanks for the quick response.

[ERA 6.5 - Eset Security Products show different versions]

The console is showing two different Eset AV versions.  The "Overview" tab on a node shows ESET Endpoint Antivirus 6.5.2094.1 but the "Installed Applications" tab shows ESET Endpoint Antivirus 6.5.2094.0.  Is it just me?

[Threats Found on PC but not showing up in ERA Console]

[Threats Found on PC but not showing up in ERA Console]

I uploaded to screen shots of the client and ERA console.  The listed threats under the threats tab is not the computer with the attached popup screenshot. 

 

 

[Threats Found on PC but not showing up in ERA Console]

I've come across this issue a few times but users are receiving the "Warning Threats Found" popup but I'm not seeing the alerts in the ERA Console.  It doesn't happen all the time.  Any reason why?

[ERA On-Demand Scan - Suppress Threats Found Message]

Does the "on-demand" computer scan module apply to scans that are triggered from the ERA Console?  For example, if I click on the computer and Run Scan with Cleaning?

[ERA On-Demand Scan - Suppress Threats Found Message]

Is it possible to suppress the message and execute the Clean/Delete action?  We get a few user complaints when they see the popup.  I would like it to perform an action automatically with no interaction.

[Eset Antivirus 6.4.2014.0 - Autodesk]

Marcos,

I did some more testing and I don't see any issues with the CPU/Memory.  I can see a lot obvious disk reads when it's running a full scan but not much performance.  bbahes hit the nail right on the coffin.  They seem to complain about everything.

Thanks!

[Eset Antivirus 6.4.2014.0 - Autodesk]

Marcos,

Our Engineering laptops are all different Make and Models but they will all have a multiple cores.  Most of them are Non-SSD disks so it can definitely be an issue with reading of data.  

Yes, it would be better but they are all laptops so the majority of them take their laptops home every night.  We used McAfee VSE and had no issues.  However, I had to change a few CPU settings.

Is it possible to lower the performance settings for In-Depth Scans?  Any other suggestions?

Thanks

[Eset Antivirus 6.4.2014.0 - Autodesk]

I'm finishing up on my deployment of Eset but I have hit a snag with our Engineering department.  I'm getting complaints of performance issues when running Eset & Autodesk.  It's most noticeably when running our weekly full scan.  I know there are exclusions and I'm starting to set them but I was just curious if anyone else in the forums have ran into the same issue.

[Eset V6 Antivirus Deployment - Outlook stuck at "Inbox Updating"]

Yes, we do use Cached Mode.

[Eset V6 Antivirus Deployment - Outlook stuck at "Inbox Updating"]

Thanks Jim.  I recreated the profile as a quick fix and it seemed to fix it.  Our "Shared Folders" are set to cache so some of their OST files can be very large.  

[Eset V6 Antivirus Deployment - Outlook stuck at "Inbox Updating"]

Yes, that's what I'm thinking but I was curious about the behavior of Eset and why it would prevent synchronization?  I want the Outlook integration so maybe it's just something we will have to deal with for new installations. 

[Eset V6 Antivirus Deployment - Outlook stuck at "Inbox Updating"]

I'm in the process of deploying V6 AV to my users and ran into some issues today.  We received some complaints today regarding Outlook stuck at updating and it was right after Eset installs on the PC.  There are few posts in the forum regarding this issue but it doesn't look like it's been resolved or it could be by design.  Some of these users have shared mailboxes so their OST's can get pretty large. Is Eset scanning their entire Outlook profile? If so, does it block all incoming emails or does it cause the synchronization to stop? 

[Console says Agent deployed successfully but did not install]

Eric,

Actually, the service kept crashing so I had to remove the agent and then reboot.  I was able to deploy it from the console successfully after the reboot so I'm not really sure what the issue was when I first deployed it. 

[Console says Agent deployed successfully but did not install]

I logged into the computer and tried the local install but it failed because another install was already in progress.  I noticed there were multiple MSIEXC processes running so it must hung even though it said successfully.  I rebooted the machine and tried the install again.  The install got all the way to "starting services" and then failed but the agent installed.  Hopefully it's a one time thing.

[Console says Agent deployed successfully but did not install]

Yes, I found the ra-agent log.

 

=== Verbose logging started: 9/9/2016  8:40:46  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\Windows\System32\msiexec.exe ===

MSI © (34:C8) [08:40:46:633]: Resetting cached policy values

MSI © (34:C8) [08:40:46:633]: Machine policy value 'Debug' is 0

MSI © (34:C8) [08:40:46:633]: ******* RunEngine:

           ******* Product: C:\Windows\Temp\Agent_x86.msi

           ******* Action: 

           ******* CommandLine: **********

MSI © (34:C8) [08:40:46:633]: Client-side and UI is none or basic: Running entire install on the server.

MSI © (34:C8) [08:40:46:633]: Grabbed execution mutex.

MSI © (34:C8) [08:40:46:680]: Cloaking enabled.

MSI © (34:C8) [08:40:46:680]: Attempting to enable all disabled privileges before calling Install on Server

MSI © (34:C8) [08:40:46:680]: Incrementing counter to disable shutdown. Counter after increment: 0

MSI © (34:C8) [08:40:46:758]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1

MSI © (34:C8) [08:40:46:758]: MainEngineThread is returning 1618

=== Verbose logging stopped: 9/9/2016  8:40:46 ===

 

Event Viewer Entry:

 

The description for Event ID 0 from source ESET Remote Installer cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

 

If the event originated on another computer, the display information had to be saved with the event.

 

The following information was included with the event: 

 

ESET Remote Installer

Execution finished with 0x0, The operation completed successfully. Error code: 0x0

[Console says Agent deployed successfully but did not install]

I created an agent deployment task and it's finishing successfully.  However, it never installs on the computer.  Suggest any troubleshooting steps on the ERA console?

[Deploying agent on newly added computers automatically]

Thanks for the help! I'll try deploying it through GPO.

[Deploying agent on newly added computers automatically]

Are you serious? There is no way to automatically install the agent to newly added computers within the console?

[Active Threats - ERA In-Depth scan not clearing threats]

Marcos,

 

So I followed your steps above but it did not resolve the issue.  I still see 14 unresolved threats after a successful scan with no detection. 

[Active Threats - ERA In-Depth scan not clearing threats]

Yes, these are active and unresolved threats.  I see 14 alerts that do not clear after a successful scan from the ERA console.

 

"We recommend using strict cleaning mode, otherwise potentially "

 

How do I specify "Strict Cleaning Mode" from the console?  I created a new On-Demand scanning task with "Scan with cleaning".  Are the settings you suggested defined in the policy?  If so, do I change the the settings in policy and then do a new on-demand task from the ERA?