khairulaizat92

Hi you posted on the wrong section, The thread should be on this section https://forum.eset.com/forum/30-malware-finding-and-cleaning/

Found it, thanks @itman it seems eset just release the update. And you HIPS rule what brought me directly to the source and trigger ESET to remove it from the client system. hxxp://www.virusradar.com/en/update/info/16369 Its called JS/Bondat.BD Still new though, not that many AV detects it; https://www.virustotal.com/#/file/c08da81082d734723e89248f5b87e55f00ef1545cdde5e2d656ada88e487998c/detection Thanks once again including @JamesR, with this, the case is closed

Anyone?

Hi, Can you clarify, is it ESET SMART SECURITY PREMIUM or ESET Smart Security? Have you tried to download a fresh installer and reinstall it again?

Attach is the log generated by Eset SysInspector SysInspector-FAKHRIYAYA-171107-090313.zip

Theres might be problem with SysInternals Software, somehow it cannot be launch on the infected PC. Which is weird. There are some files which seems to make the request, but its a legitimate microsoft program (Maybe) "Microsoft Windows Based Script Host". But maybe in my opinion might be legitimate process that hijack by something.

Agreed, also including activation server status etc. Its does seems nice to have a place to check the current status of the server to knew either its our connection problem or eset side problem.

Hi and good day to all, One of my client has been infected by certain unknown malware, might be zeroday malware as i already tried to scan the whole laptop with various choice of AV. The sign of infection is that theres something in the laptop keep requesting for this ip address and url: 95.153.31.18 95.153.31.22 bellsyscdn.com And ESET block all of it, but when the whole scan are made, eset didnt find any malware. And if possible, i hope this can be solved asap. If you need Teamviewer, let me know. Thanks in advance for your assistance

Yea its normal, it seems the license detect the old installation as active as long as you did not remove the devices from license manager.

It works for me too. I have downloaded all the v11 offline installer from Nod to ESSP without any prob

Yea it should work, even in Malaysia we have instructed the clients that uses smart security to use ESET Internet Security. Im afraid the issues that you are facing in the win 10 built 1703 is because of compatibility issues (Maybe). But if you said that after what you did everything seems to operate normally, then, let it be and see the outcome later on.

Hi based on my past experience, the version always arrived with an online installer first, which then follow up by offline installer later on. And also in my past experience, some version also release earlier than the English version. Its been this ways for years now. So you might want to wait until they put it up the international and the US site. Usually US site will get the release first before the international site. I didnt know why it happened this way, but if i were the developer, even with all of the beta tester, i will release the full version to a set of people or location to see if there any bugs that might occurred in unforeseen circumstances as even though beta user are thorough, there are some cases they miss something and miss the bugs. Before i release it to the whole world. So yeah, as im like you eager to see the new change (even i have seen it in beta) but based on my past experience, yea, the official English version will be release usually later than the 1st set of the products launch in other language.

This is nice, however, this had to be done by an expert etc. And i indeed try some of the command but it seems does not work. Any other suggestion that can be easily used even by beginner to repair the damage done by this malware?

Yeah its already solved

Hi im facing a trouble to activate my products, and its not just me, also some of my clients cannot activate their products too, and we didnt even use the same internet connection. Is there any notification about this? Specifically activation for home products,

Dear Forumers, First of all thanks for helping. First ESET has successfully detect this type of malware and successfully removed the malware. Which is nice, but the damage has been done. The clients file of course has been hidden, which can be easily fix by using cmd command "attrib -s -h -r /s /d *.*" Which we can find again the client files and folder but the files or folder exist in it cannot be copied in, or copied out of the folder the malware used to hide the files or copied out of the thumbdrive. So my question is, is there in anyway i could do to fix this damage done by this malware? I can recover the clients files by using Ubuntu to move the files out of the folder and delete the "System Volume Information" Files and other files created by the malware. But that will need a lot of just to recover the clients files. Is there any fix that anyone could suggest? I have the full sample of the malware if you want to test it on controlled environment. "System Volume Information" files are hidden. And also another nameless files.

Dear Sir/Mdm, Can i requested for the latest ESET Digital Box design in HD? I have find others for home products, but find a little bit difficulties in finding latest design for the below products; ESET Home Office Security Pack ESET Small Business Security Pack Preferably in PNG with transparent background with HD image size bigger than 500px x 500px I want to design some banner for marketing ESET products purposes with this box image, but that if ESET did produce a design of it. If theres is no new box design for this products, please let me know and i will find other method to design the banner. Thanks ESET

Hi just want to make sure, do you asked the distributor or the seller? If its the distributor, and the person you asked is the tech support guy, and they didn't know, i bet it can be used anywhere. Because if the distributor put a country restriction on license they sell. At least the tech guy at the distributor will know. Anyway inform me if its false information. As before I did encountered some license that are restricted for some country.

Hi please provide the details of your ESET products including software version and databse. Thanks

Anyway, i indeed see an extra Mb on the installation files, i wonder what kind of bug did they fix

Did Eset already publish the changelog?

Hi, im not the moderator nor ESET Tech team, but may i know, do you knew someone or do you have other laptop that can be tested of the issue? you can try it on other laptop or PC and try to see if the same problem occured.

The problem solved in in installer built 9.0375

problem solved with latest update 13103

Yep, its also effected some major media website in Malaysia, and including my University web. This going to effect almost 50% of My university student as they used this antivirus too..huhuh