Jump to content

COStark26

Members
  • Posts

    207
  • Joined

  • Last visited

  • Days Won

    5

Posts posted by COStark26

  1. 3 hours ago, AGH1965 said:

    @COStark26: The comparison with MBAM doesn't make sense to me. In case of EIS it is not "time since last miss", but it is "time since last run". So if EIS misses a dayly scan, then the time since the last run is always more than 24 hours.

    Forget the MBAM item; Just to show Recovery logic is problematic in other places.

    Main idea was to TRY the 24 hour number Vs your Immediately If last run exceeds 1 hour.

    Itman may be on to something in above post about Sleep and ESET clock re-sets - but were it me I'd try the 24 hour setting I suggested JUST to say you tried what MATCHES the ESET K-base Instruction.

  2. Since you're not getting anywhere, and this is pure SWAG logic .....  is there away you could let it Run a Scan by Schedule at 1800 on a Monday and set the "Recovery if missed " for - Immediately if last run exceeds 24 hours / Not 1 (as shown in K-Base example for a weekly Friday scan). Make sure it's asleep at 1800 the next Monday and then wake it up anytime after & see what happens.  Maybe there is some quirk in the coding logic that wants the "Exceeds #" for Last Run (on a Missed Scan) to be 24 hours (24 Hours + 1 second would be required to MISS a Daily Scan) Vs 1.

    This Schedule logic contradiction thing is a wide-spread issue. The MBAM Setup screen can show - Recover if Missed by 1 hour - ( implies IF the computer wakes up at "8:00:01 or after" Following a Missed 07:00:00 Scheduled Scan, then Scan.) But 2 Clk's backing out to the Review Screen shows - "Run again Within 1 Hour of Last Miss (implies 07:00:00 asleep / IF the unit awakes between 7:00:01 and 8:00:01 Run the scan. If it doesn't, then DON'T Scan. HOW is that for clear Recover logic?

    Hope the above works. Nothing to lose. Or try the  -Immediately if last run exceeds 24 hours - on a Temporary Daily Schedule and see if 24 works there - to find out quicker.

  3. On 12/12/2018 at 4:38 PM, Marcos said:

    I opened https://ibanking.stgeorge.com.au/ibank/loginPage.action in Firefox and was asked if I want to open it in a secure browser.

    ME, TOO. Opened to Login page (set for 1-time only).

    Plan B  ... my FF 64 New Tab Setting is FF Home (Default) and the Protected Screen shows Menu Bar and Bookmarks Toolbar with Pinned Top Sites in the body and Same in Bookmarks Toolbar area. I paste desired Protected Site in BP Address Bar and Save as Bookmark to Bookmark Toolbar And / Or as Pinned Top Site on FF Home New Tab (default) setting.

    Clk on working Protected site shtcut  in normal browser = BPP, see Bookmarks Toolbar OR clk New Tab and see Imgur below to choose from. Not a bad alternative IF no fix found here.

    My New Tab Pg layout .........

    https://imgur.com/Rd231t9

  4. 21 hours ago, Rami said:

    Did you try to reset the settings for Banking and Payment? , turn it off and then turn it on again and see if it prompts you or not.

    Answer Quote first - BUT - (per Marcos suggestion) I made - www.paypal.com - open in BPP by  (in Web/Email/ SSL ) UN-chking "Exclude communications with Trusted Domains -  to force http/1.1 use, I think.

    PayPal has Stopped Opening in BPP ( via FF 63.0.3 )-- and I wonder IF whatever caused that to happen & this Canadian bank issue are related? 

    A toolbar bookmark Within the Protected browser solves the issue for me but this is offered as trouble-shooting data only.

  5. 1 hour ago, Marcos said:

    I assume that paypal.com should not be redirected to a secure browser at all. It works as a payment gateway (ie. user is redirected from merchant's website to the payment gateway and then back to merchant's website) and BPP does not work with payment gateways in principle.

    You would need to open https://donate.lovetotherescue.org in a secure browser and continue with the transaction there.

    You're right! Opened a financial shtcut with BPP, changed to the charity Address &  made a 2nd small donation to test this -- and it processed.

    Never read about the specific limits of BPP but this does make sense. Thanks for the clarification.

  6. After getting PayPal to open in BPP in Firefox 63 my first attempt to donate to a charity got as far as -- logging into PayPal WITHIN BPP -- via the Charity site - - but after Clk'ing - Accept and Continue ( to pay ) - I only got a White Pg. Refresh = nothing. Return to Charity link failed.

    While on Charity Pg I made sure to Gray-List the 3 offerings from the FF extension - Cookie AutoDelete - cookie mgr but no change. As pages progress I know new URL's may want a Cookie OK'd but wonder IF the Cookie Mgr sees anything once BPP is engaged. Don't know IF THAT is the issue.

    To get BPP to open in FF 63 I followed Marcos suggestion - Web-Email / in SSL/TLS .... UN-Chk: Exclude Communication in Trusted Domains .

    Returned - www.paypal.com - to Normal Mode and Paypal "Pay" page after - Accept & Continue - appeared - donation completed.

    No project intended just for me. Disregard unless others have same result.

    Shriner's Children's Hospital start to Donate page ...........  https://donate.lovetotherescue.org/give/119312/?utm_source=shcmain#!/donation/checkout

     

  7. On 10/29/2018 at 7:38 AM, Marcos said:

    To make it work, disable the following option in the SSL/TLS setup so that all secure communication is filtered:

    image.png

    In that case, HTTP/2 will be downgraded to HTTP 1.x and BPP will be able to redirect you to a secure browser.

    THIS for me is THE SOLUTION. BPP NOW Opens in FF 63.         

    I hope I missed this while editing but I'll get an eye check soon. Many Thanks!!

  8. On 10/29/2018 at 8:03 AM, itman said:

    Paypal is indeed http/2:

    Eset_Paypal.thumb.png.7a229e6bebc85497eca5890182b8bb68.png

    Now this test was performed using IE11. Since it showed otherwise for you in Firefox, this leads me to believe the issue is FireFox and Eset together.

     

    ------------------ EDIT: SSL/TLS Un-Chk Marcos posted SOLVED the issue for me. Post deleted   ------------------

     

     

  9. On 10/25/2018 at 9:04 AM, itman said:

    Also as I recollect from previous postings, I believe Eset has issues with HTTP/2 in Firefox. This might be why my operational "hack" doesn't work there.

     

    =======================================

    EDIT:  SSL/TLS  UN-Chk  that Marcos posted above (and I missed seeing) SOLVED the issue.

     

    

  10. EDIT: I tried an ADD within Protected Settings and entered  -- hxxp://llbeanmastecard.com - (I'm entering http here and this Thread changes it to - hxxp - WHY?) - hoping the URL conversion to Citibank would happen within the green-border Protected mode. Did NOT work.

    Protected Settings only shows - - www.llbeanmastercard.com - , and entering THAT brings up an UN-Protected site....... An EDIT to put back #signon within Protected Settings  Failed (The Protected Domain box does NOT like #signon at all) , so until ESET figures something is the next possible?

    An "almost-maybe-solution" is to Open a Bkmark that gives the Protected Redirect page; Paste your LL Bean URL Over what's there and it Will Open within the green Protected border (I'm presuming inside Green IS Protected, so Marcos, advise IF Incorrect). Drag your tab to Bookmarks (and I put my test in Toolbar Bkmarks), so whenever I want LL Bean I'd open a Protected site Bkmark and use my saved LLB Toolbar  Bkmark to get there rather than signing in to the Bkmark site.

     

  11. I-Clk'd your Link - & -  I DID get the ESET Redirect page asking me to define HOW I wanted to Open the site now and later.

    I wonder if one day while multi-tasking you absent-mindedly chk'd "Protected" when the Define popup appeared and just don't remember it.

    In Home/ Setup/ Security/ Bank-Pmt Protect - Settings module --  I presume you'll mark Normal Browser IF chk'd "Protected" now.

  12. Thanks, Marcos. It loads with the Regular Browser Mode but gives the Secure Connection block with the Banking "Protected" mode. I did a Re-Start to see IF your SSL solution disappeared and it loaded again OK with the normal  Browser Mode.

    I can live with that.

    Itman, Only This site gets Blocked so far - would have been interesting to see if others got blocked.. 

    Thanks to you both for the Replies.

  13. Is there a Work-around (other than Filter Off per browser session) to the following .....

    All of a sudden I cannot Load  IN FIREFOX 61 (ie) my John Hancock site-- https://jhannuities.com -- without going to EIS Web & Email  and Turning OFF -- "Enable application protocol content filtering"--.  ..... IE 11 loads OK. Presume other Sites will do the same at some point.

    IF I clear Firefox and start over I have to Repeat the process. Firefox popup Fix Links actually instruct trying this same ESET Filter Off/On. In some cases Off/Back On works; In others I have to leave the Filter "OFF".

    I know of the love for Mbam here BUT Mbam Web Protection is currently OFF because you cannot load --  http - sites with it ON. -- BUT, -- IF it's ON -- and you do the Same disable of this ESET Protocol Content Filter .... the page loads. Mbam Sppt actually declares They Do Not Think ESET IS the problem for the http No Load. Dup'd w/other AV's, I think.... JH is an https site BUT the ESET mods being the same for Both Problems is WHY I bring it up..  EDIT: Mbam FIXED This - http No Load - Issue with Component Pkg 1.0.391.

    Clear out of Firefox / re-load and you have to repeat.

    https://www.askvg.com/fix-secure-connection-failed-problem-in-mozilla-firefox-web-browser/

    Above link author says (right or wrong): " Sometimes ESET security products can't import root certificates properly after installation or upgrading to a new version. When it happens, HTTPS websites with SSL certificates become not accessible and start throwing "Secure Connection Failed" error message in Mozilla Firefox web browser.

    His SSL OFF/ON fix didn't work for me; It was the Filter in same module that works.

    Firefox Popup -----  [Secure Connection Failed

    ---

    An error occurred during a connection to -- www.jhannuities.com --. Peer’s certificate has an invalid signature. Error code: SEC_ERROR_BAD_SIGNATURE

     

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

        Please contact the website owners to inform them of this problem.] ................ Fix links show the OFF/ON ESET instructions.

    Sorry for length.

  14. Marcos, I've used EIS w/Mbam for a long time BUT Have the Mbam Exemptions in ESET that were suggested by Mbam Forum Moderators.

    One is System 32 \Drivers\mbam.sys. Is THAT really of any help?

    Should OP try the List suggested by Mbam ?

     

        C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe

        C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe

        C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

        C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe

        C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

        C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

        C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

        C:\Windows\system32\Drivers\farflt.sys

        C:\Windows\System32\drivers\mbae64.sys

        C:\Windows\System32\drivers\mbam.sys

        C:\Windows\System32\drivers\MBAMChameleon.sys

        C:\Windows\System32\drivers\MBAMSwissArmy.sys

        C:\Windows\System32\drivers\mwac.sys

     

      C:\Program Files\Malwarebytes\Anti-Malware

        C:\ProgramData\Malwarebytes\MBAMService      

  15. I inst'd the Lite Ver and would Delete this Thread if I knew how.                                                                                                                                                                                                                                                        I had read one Dnload Ver of this had a possible "You Don't Won't It" attachment so that's why I posted.

    hxxp://www.kcsoftwares.com/?download#SUMo

    Secunia PSI is going away and EIS Blocked / Popup (this on a list of)  "Potentially Unwanted Content Sites"  for SUMO Update Checker download.

    Anyone use it or know if it's still OK (Ignore & Continue) . Recommended by PC Mag, AskWoody.com, etc.

    Thanks as always.

  16. 22 hours ago, Marcos said:

    Here you can find step-by-step instructions how to open indexing options: https://helpdeskgeek.com/windows-7/windows-7-file-search-indexing-options/.

    Thanks for the Link but based on your Reply I presumed we need to learn How to EXCLUDE the ESET Install Folder from Indexing. The Link is more about Adding or Moving items. If you Clk Modify and Browse via "users" to all of the C: Gateway Folders, Program Files isn't even Checked, and I presume it must be checked to be Indexed.

    I'll just manually update Virus Sigs when the popup occurs.

  17. 3 hours ago, Marcos said:

    It could be that the ESET install folder is not excluded from indexing by Windows Search which locks an update file at the moment we attempt to rename it during update.

    Hi, Marcos. I get this too But every X Weeks vs Days. Manual Virus Update always works but it would be nice to eliminate the Update failures.

    I found Indexing Options in Win 7 Control Panel.: Indexing Options/ Modify / Users/  Program Files/ ESET/ ESET Security ..... then Do what?

  18. I may recall dragging the cursor one space past the last Key digit and the ESET page not liking that. Dragged to exact end of data and it worked.

    Type the Key or be sure no extra space is pasted.

    Support Pg wants Cookies Enabled to work; For fun be sure a Cookie Mgr isn't blocking anything although I doubt it prevents a Login.

    When all else fails Open a Sppt Ticket:     https://www.eset.com/uk/enquiry/support/

  19. 12 hours ago, Marcos said:

    Was the file detected? If so, please report it to samples[at]eset.com.

    No EIS Popups. Just a popup during attempted installs of either app.

    "Not a suitable Win32 app" for Unchecky (partial download, apparently), and the Sharing violation from my starting post #1.

    In EVENTS part of Log File at exactly 7 am and 8 am (same day Dec 10)  I have red bars: -- Update Module  -- "Failed to Rename File ---    User: System.---   Presume that's about Virus Signature database. Cleared cache and clk'd Chk Updates. All appears OK.

    The Unchecky dnload/install problem was a few hours earlier. Tax app hours later.

    I'll disable during Dnload only for awhile and see how things go, although the Win Update I did Just recently had no problems with EIS.

    SCR, Thanks. 12/6 In-Depth Scan OK and Running One NOW (Was OK).

    Thanks for the Replies!

  20. I very rarely have DIS-abled EIS for App downloads ( even Win Update ) but today EIS affected my 2017 Income Tax App download (failed to Install re: "Sharing Violation accessing  C:\ ...1040_FedPrint.dll" - and - a small utility app (https://Unchecky.com) installed in Program Files (x86).

    After I Disabled EIS Protection + FW and Re-Dnloaded, the Installs went without issue. Uninstall for the incomplete Tax App install failed, but the EIS-OFF New Dnload Installed Over the old "partial install" fine.

    Do most of you now Disable EIS when Dnloading Apps?

  21. 2 hours ago, illumination said:

    Version 11.0.149.0 updated via internal updater this morning, required a restart. Update was smooth as could be, no issues to report, but was wondering if a more transparent change log is available. 

    Either I didn't see this "Re-Start Requ'd" or I forgot I delayed it.

    I can tell you that I got - 2 Macrium Image Aborts - UNTIL I ran the Re-Start, so FYI for ESET Updates and Macrium users.

  22. On 10/26/2017 at 6:54 AM, COStark26 said:

    Really appreciate that.

    I'm Not sure ESET is THE Cause but will do this asap as some recent App Update is surely responsible..

    EDIT: The Trick used below lasted only briefly; I can no longer Safely Remove either Ext BkUp Drive no matter what App I close. I doubt it is ESET's fault.

    Without opening a Sppt Tkt ....... Safely Remove now works every time because to remove the current drive to follow the ProcMon/ESET instructions I had to turn the computer OFF -- I now don't have to deal with any other App as prior.

    I first changed the Removable Media setting to - Do Not Scan - and THAT didn't help before the Shutdown, - BUT - After computer Off/On I then Turned the Removable Media Option to "Completely Off", and Safely Remove has worked every time since. I'm not sure if - Do Not Scan - would have worked IF I had Re-Started the computer after the change - but at least I've eliminated the issue as described.

    Thanks again, Marcos.

  23. 22 minutes ago, Marcos said:

    I'd suggest contacting customer care and providing them with a Process Monitor log generated as follows (for instructions, see https://support.eset.com/kb6308/):

    - Before connecting the external HDD, start logging with Procmon
    - Reproduce the problem, ie. click "Safely remove"
    - Stop logging.

    Save the log with the pml extension in an unfiltered form and compress it before providing it to customer care for perusal. Also provide them with logs collected by ELC and information whether the problem occurs with any USB hard drive or flash disk or only with the WD backup drive.

    Really appreciate that.

    I'm Not sure ESET is THE Cause but will do this asap as some recent App Update is surely responsible..

×
×
  • Create New...