Jump to content

nickster_uk

Members
  • Content Count

    46
  • Joined

  • Last visited

Profile Information

  • Location
    U.K.

Recent Profile Visitors

592 profile views
  1. First off, really not happy at spending the last few hours of my life battling a BSOD situation by trying to update EIS to the latest version using the official method. I've clicked 'not now' to update for a few weeks now as everything was running just fine with the version of EIS that I had installed, but tonight I thought, 'why not? The lovely people at ESET have no doubt put a lot of time and energy into their latest version, so what's the worst that can happen?'. A wise question in hindsight, and one, judging by other forum posts in recent history, has been asked by others in th
  2. I have noticed a weird problem with EIS that has happened about 3 times since I installed it. Sometimes after booting and loading Windows, I launch Firefox, but nothing happens. It appears in the Task Manager but no firewall notification appears and it doesn't load. I close the process in TM, try again and the same happens. I even try to launch IE and same again...no notification and no gui of the browser. If I disable the firewall module and launch FF or IE, it starts up without a problem and I can browse without a problem. When this has happened, I have tried logging off and bac
  3. Thanks Marcos. I may uninstall, reinstall v8 and then upgrade again as the rules configuration is doing my head in.
  4. Not long upgraded from ESS v8.0.312.0...old version I know, but it worked really well for me. I updated as I've had a couple of BSODs which identified an ESET driver as the most likely cause. Anyway, I clean installed EIS v10.1.204.0. The program itself runs well enough but I've noticed a few annoyances with it. First off the GUI. It looks ok at first glance but when going through the options, it becomes a little messy. In Tools, why not just show all the options instead of getting users to click on 'More tools'? Then in the advanced setup, why the need to show the number of items ch
  5. Thanks for the reply and advice itman. There was nothing relevant in the audit failure section. There is frequent logged entries in the ESET log, but it doesn't really show any more information than I already know. Here's a typical entry: Communication denied by rule [fe80::52c7:bfff:fe06:9982]:56278 [fe80::a19a:b3ef:xxxx:xxxx]:546 UDP IPv6 Test Rule C:\Windows\System32\svchost.exe NT AUTHORITY\LOCAL SERVICE The address in bold is the one I'm trying to identify. The other address is the network adapter. The mac address of my router's LAN port is
  6. For the past few days, I've been getting regular incoming traffic firewall notifications/prompts. The address is IPv6 and has a FE80 local-link prefix but I can't work out what device it is coming from. I've checked all the devices on the network and none use the address. I'm thinking that perhaps the router may be the source but again, I can't find the address anywhere in the router, although there is similarities with some of the address and the router MAC address. Is there any way I can find out where the traffic is originating from? Thanks for any help
  7. Hi.. I've experienced 3 0xa BSODs in the last few days. All of them reference ESS drivers/processes as well as netio.sys. I was using v6.0.316.0 but have updated to the latest version (8.0.312.0) and the BSODs have continued. I've attached some dump files. If you need any more information, please let me know. Thanks. Minidump.rar
  8. I've been having some issues charging devices via USB so as part of the troubleshooting process, I decided to uninstall the USB controllers and root hubs in the device manager. After restarting Windows, I was hit with loads of firewall prompts which I thought was a bit weird. After checking the firewall settings I was shocking to discover all my rules and zones had disappeared, leaving only the default rules present. All other advanced setup settings which I had configured were ok. Is there any way I can get these rules back please? I spent many hours configuring application and home n
  9. I don't negotiate with terrorists...cyber or otherwise. Stand firm and unite against them. If we change our passwords, they win
  10. Thanks for the reply Aryeh. I appreciate that things like OneDrive will generate traffic back to MS and that is to be expected. Also, after linking a MS account with your profile, that will no doubt generate more for other processes such as User Account Control Panel Host (UserAccountBroker.exe) and WSHost.exe. This doesn't particularly bother me too much although I am slightly concerned with any privacy issues with the data being sent to MS. Then there's the very regular connections back to my ISP through most of the processes listed in my first post. After some tracking with Wires
  11. Thanks for the reply CaJazzman. I think your view about those who are worried about such traffic have something to hide is a little blinkered. There are serious privacy issues involved in using the internet and companies regularly sell on personal and private data for advertising or marketing purposes. There's also ongoing issues with Heartbleed which has affected CDNs such as Akamai, EdgeCast and Verizon, all of whom are used by Microsoft. I'm just asking for a little clarity or advice on safer browsing. I also tend to let most, if not all MS traffic go through. I did restrict a few app
  12. I've also been getting quite a few 'block incoming/outgoing multicast dns requests' in the log too even though I have added the addresses to the trusted zone and the option to allow multicast translation in the trusted zone is enabled. It got me thinking... Would it be safe to disable block incoming/outgoing multicast dns requests in rules? I connect from behind a router so externally port 5355 is hidden. If the firewall is in interactive mode, this should surely just generate a prompt anyway?
  13. I'm not sure why but when I first read your post, I didn't read it correctly. I thought you were jokingly suggesting 2 years for the price of 3, hence my saracastic response. Apologies. Are you an official ESET reseller? I qualify for a decent enough discount to renew. £27.94 for one year, £50.33 for 2 years and £67.90 for 3. The one year renewal discount is great but the other two aren't quite as attractive which is why I'm wondering if there's a 2 for 1 deal available anywhere online.
  14. Can someone please explain why I'm seeing the following entry logged in ESS please? 26/04/2014 00:42:14 Communication denied by rule 192.168.0.5:137 192.168.0.255:137 UDP Block NETBIOS Name Service requests C:\Windows\System32\svchost.exe NT AUTHORITY\LOCAL SERVICE I see multiple entries after every reboot. I have added my local subnet to the TZ but that hasn't helped. Thanks for any advice.
×
×
  • Create New...