Jump to content

Aryeh Goretsky

ESET Moderators
  • Content Count

    678
  • Joined

  • Last visited

  • Days Won

    44

Kudos

  1. Upvote
    Aryeh Goretsky gave kudos to Marcos in Does Eset protect against LoJax?   
    Latest versions of ESET products contain a UEFI scanner that can detect malware in UEFI. For more information, please read https://www.eset.com/int/uefi-rootkit-cyber-attack-discovered/.
  2. Upvote
    Aryeh Goretsky received kudos from razorfancy in A holiday message from ESET for 2018   
    Hello,

    With the holiday season upon us, and the forthcoming New Year just around the corner, it's time to put aside the keyboard and mouse for a moment and spend some time with friends and family.  But before we do that, I did want to take a moment to wish each and every one of you a happy holiday, greetings of the season, and best wishes for the new year.

    We realize that you have many choices when choosing security providers, and thank you for trusting us to protect you in 2018 and all the years past.    And, of course, we look forward to providing you with the same high levels of security in the years ahead.

    Thank you for being part of the ESET family.

    Best regards,

    Aryeh Goretsky
  3. Upvote
    Aryeh Goretsky gave kudos to Marcos in CryptoMining Malware Missed By Many AVs including ESET.   
    Not really. ESET has blocked it as PUA for one year already:

  4. Upvote
    Aryeh Goretsky received kudos from razorfancy in A holiday message from ESET for 2018   
    Hello,

    With the holiday season upon us, and the forthcoming New Year just around the corner, it's time to put aside the keyboard and mouse for a moment and spend some time with friends and family.  But before we do that, I did want to take a moment to wish each and every one of you a happy holiday, greetings of the season, and best wishes for the new year.

    We realize that you have many choices when choosing security providers, and thank you for trusting us to protect you in 2018 and all the years past.    And, of course, we look forward to providing you with the same high levels of security in the years ahead.

    Thank you for being part of the ESET family.

    Best regards,

    Aryeh Goretsky
  5. Upvote
    Aryeh Goretsky received kudos from razorfancy in A holiday message from ESET for 2018   
    Hello,

    With the holiday season upon us, and the forthcoming New Year just around the corner, it's time to put aside the keyboard and mouse for a moment and spend some time with friends and family.  But before we do that, I did want to take a moment to wish each and every one of you a happy holiday, greetings of the season, and best wishes for the new year.

    We realize that you have many choices when choosing security providers, and thank you for trusting us to protect you in 2018 and all the years past.    And, of course, we look forward to providing you with the same high levels of security in the years ahead.

    Thank you for being part of the ESET family.

    Best regards,

    Aryeh Goretsky
  6. Upvote
    Aryeh Goretsky received kudos from razorfancy in A holiday message from ESET for 2018   
    Hello,

    With the holiday season upon us, and the forthcoming New Year just around the corner, it's time to put aside the keyboard and mouse for a moment and spend some time with friends and family.  But before we do that, I did want to take a moment to wish each and every one of you a happy holiday, greetings of the season, and best wishes for the new year.

    We realize that you have many choices when choosing security providers, and thank you for trusting us to protect you in 2018 and all the years past.    And, of course, we look forward to providing you with the same high levels of security in the years ahead.

    Thank you for being part of the ESET family.

    Best regards,

    Aryeh Goretsky
  7. Upvote
    Aryeh Goretsky received kudos from razorfancy in A holiday message from ESET for 2018   
    Hello,

    With the holiday season upon us, and the forthcoming New Year just around the corner, it's time to put aside the keyboard and mouse for a moment and spend some time with friends and family.  But before we do that, I did want to take a moment to wish each and every one of you a happy holiday, greetings of the season, and best wishes for the new year.

    We realize that you have many choices when choosing security providers, and thank you for trusting us to protect you in 2018 and all the years past.    And, of course, we look forward to providing you with the same high levels of security in the years ahead.

    Thank you for being part of the ESET family.

    Best regards,

    Aryeh Goretsky
  8. Upvote
    Aryeh Goretsky received kudos from razorfancy in A holiday message from ESET for 2018   
    Hello,

    With the holiday season upon us, and the forthcoming New Year just around the corner, it's time to put aside the keyboard and mouse for a moment and spend some time with friends and family.  But before we do that, I did want to take a moment to wish each and every one of you a happy holiday, greetings of the season, and best wishes for the new year.

    We realize that you have many choices when choosing security providers, and thank you for trusting us to protect you in 2018 and all the years past.    And, of course, we look forward to providing you with the same high levels of security in the years ahead.

    Thank you for being part of the ESET family.

    Best regards,

    Aryeh Goretsky
  9. Upvote
    Aryeh Goretsky gave kudos to Marcos in Eset the key from which distribution?   
    Please contact your local distributor to answer questions re. licenses.
  10. Upvote
    Aryeh Goretsky gave kudos to Marcos in Eset the key from which distribution?   
    Please contact your local distributor. I have no clue where you found the key; if you purchased a license you should have a registration email with your license details. If you lost it, it's possible to retrieve it, e.g. through your local distributor if you purchased the license from him.
  11. Upvote
    Aryeh Goretsky gave kudos to Marcos in Very poor test result   
    I strongly disagree with this accusation. Itman is not an employee of ESET and has no other relation to the company. He's become an active user in our forum and is a person who 's always willing to help the other with issues they have for no profit.
  12. Upvote
    Aryeh Goretsky received kudos from SCR in interface getting more confusing   
    Hello,

    There are all sorts of users with all sorts of skill and comfort levels.  Some immediately press F5 and go into the Advanced settings and tweak everything to their hearts' delight, others do not want to do anything at all beyond going through the installation of the software—which they prefer to do in as few clicks as possible.  ESET has to balance the needs of millions of users with differing ideas about what is correct… for them.  Overall, I think ESET does a good job of being fair to all users in terms of user experience, but that does mean there are still going to be some at both ends of the tech spectrum where things are not ideal for them.  For those folks, I think ESET does at least manage to make the amount they have to change bearable, but ESET is always open to constructive feedback about how to make things even better.

    The feedback about having to configure cleaning in multiple places through the UI is noted. 

    Regards,

    Aryeh Goretsky
  13. Upvote
    Aryeh Goretsky gave kudos to novice in interface getting more confusing   
    I have to agree with this;
    Just an example about the "Threatsense parameters" : No cleaning/Normal cleaning/Strictly cleaning .
    An user has to set up this in at least 8 places ; it is very unlikely that somebody will want "no cleaning" in certain situation and "strictly cleaning" in another situation. To be honest, every time I set-up ESET I was in doubt that I did it right or I missed something somewhere....
  14. Upvote
    Aryeh Goretsky gave kudos to Marcos in SOLUTION TO :- JS/Adware.Agent.AA application" pops up   
    Please nobody follow the advice above. Disabling web protection would expose your computer to Internet-borne threats.
    The solution is not to visit websites where ESET detects malware or some other threat.
     
  15. Upvote
    Aryeh Goretsky gave kudos to Marcos in Why is my scan taking so long?   
    On my machine it took 1 hour and 45 minutes to finish a scan of the C drive with 3,2 mil. objects scanned in total.
    The scan time depends on many variables. For instance, the more big archives (e.g. iso containers) you have, the longer it takes since files from each archive have to be extracted before they are scanned. You could try running a scan with archives disabled and see how long it will take then to scan the drive.
  16. Upvote
    Aryeh Goretsky received kudos from RB fashion in Future changes to ESET NOD32 Antivirus   
    Hello,
     
    Not every requested feature can be added at once.  ESET's project managers have to carefully look at the technical and market requirements for each request.  Sometimes, the amount of work required to implement a requested feature may mean that it needs to be put off for a few version releases until enough engineering time can be budgeted to implement, test and maintain the feature.  And sometimes, a feature might be requested that is just out of scope, offers little real-world benefit to customers or may even be against ESET's business practices.
     
    In any case, what I would suggest is to provide as detailed a description as possible of the feature you are requesting, in order for ESET's project managers to make better sense of it, and a little patience, as not everything can be done at once.
     
    Regards,
     
    Aryeh Goretsky
     
     

  17. Upvote
    Aryeh Goretsky gave kudos to Rami in Future changes to ESET Internet Security and ESET Smart Security Premium   
    It's not that big deal in my opinion @nonamelab, It's a way to bring more people to use ESET and in the same time giving the person who invited the other person who doesn't use ESET , a month of usage or more I don't remember exactly.
  18. Upvote
    Aryeh Goretsky gave kudos to TomasP in New ESET Security Forum theme   
    Hello forum users,
    ESET Security Forum is here for you for more than 5 years now and we are happy to see it grow.
    Back in 2013, we chose a look that was in line with our products, websites and overall brand at that time. However, in the recent years, ESET defined its brand design in more details and chose a unique color to represent and distinguish itself; a color that is present in most of our online and offline presentation materials nowadays, on our websites, etc. – the turquoise color.
    During the past year, we have designed a fresh new theme for the ESET Security Forum that fits perfectly with this new brand design. After implementing it and polishing the last few details that came as feedback from our ESET Forum staff (who have been using it for some time now), we are ready to unveil it for the world to see.
    When you are reading this post, the theme is already live, so you have a first-hand experience with it. We hope you like it – and in case you spot an issue, do let me know directly (via a private message).
    On behalf of the ESET Security Forum staff,
    Tomas
  19. Upvote
    Aryeh Goretsky received kudos from TomFace in Rules of the ESET Security Forum   
    Welcome to the ESET Security Forum!
     
    ESET is pleased to provide you with this resource in order to make it easy for you to ask questions and receive answers about ESET's products and services.  Understand that the ESET Security Forum is a private community for existing customers of ESET, prospective customers who are interested in ESET's software, ESET employees and business partners.  Because of this focus, it is not like a general public forum, where conversations take place on a variety of non-ESET and non-security related topics.
     
    With that in mind, we have the following rules in place:
     
    When registering for an account on the forum, please fill out the information accurately and correctly.
    Do not enter the Username and Password for your licensed ESET software, but instead choose a username (in Latin) unique to this forum.  You should also choose a suitably complex password unique to this forum as well. Do not create multiple accounts.  If a person is found creating multiple accounts, ESET reserves the right to take whatever actions it deems necessary, including banning, blocking, deleting and/or merging them.  The exception to this rule is ESET staff, who may create multiple accounts for testing purposes. No impersonating other forum users, ESET employees or other people. Use appropriate language in the forum.  No vulgar, obscene or rude language will be tolerated. No vulgar, obscene or otherwise offensive images or video will be tolerated. ESET staff have the right to move, edit or modify messages that you post.  This may be done for clarity, to move a message to more appropriate forum where it will receive more attention, or for other reasons outlined in these rules. All decisions by ESET staff are final, and not open to discussion. This list may be updated at any time.  Please periodically visit this page to review any updates. Do not post direct links to any executable files, malicious/suspicious software or web sites in public messages, even if you think the software or site is clean and incorrectly detected by ESET.  Break up the URL by inserting spaces into it, or replacing the protocol handler with an obfuscated one, like . Do not attach malicious or suspicious files to messages, even if you think they are clean.  Write a public message, and then use the "report this message" option to send a private message to ESET staff with a link. Do not post any personally identifiable information (PII) about yourself, such as an email or mailing address or phone number, in a public message. Do not post the username and password for your ESET software in a public message. Do not post links to software cracking tools, license key generators, pirated copies of software or other illicit software in the forum.  If you wish to report a site, write a public message, and then use the "report this message" option to send a private message to ESET staff with a link. Do not post private correspondence (private messages, email, etc.) publicly within the forum. Do not post "A vs. B" or "Which product is best?" type messages in the forum. Do not post overtly commercial messages in the forum (this includes in your signature). Do not pre-announce releases.  Due to differences in scheduling, it may sometimes take several hours after a release has appeared on ESET's web site for the release announcement to appear here in the forum. Do not abuse the forum's rich text controls.  Messages and signatures with inappropriate font selection, including size, color and, for signatures, length, may be edited by forum staff to conform to standards of decency. Do not ask other users for logs, especially if they may contain sensitive or other personally identifiable information. Posts made on behalf of a 3rd party company may only be made from accounts registered with an email address from the company's domain (verifiable by ESET staff). If you have any questions or comments, please contact one of ESET's moderators.
     
    Last Revised:  31 August 2018.
  20. Upvote
    Aryeh Goretsky gave kudos to ESET Security Forum in ESET NOD32 Antivirus for Linux Desktop version 4.0.90.0 has been released   
    Release Date: July 2, 2018
    ESET NOD32 for Linux Desktop version 4.0.90.0 has been released and is available to download.
    Changelog
    Fixed: Mozilla Firefox crashes Fixed: Nroff crashes when running "man" commands Known Issues
    CD media blocking does not work correctly on Debian 6.0.7 64-bit Supported Linux distributions
    Debian 6.0.7, Fedora 18, Mandriva, Red Hat, SuSE, Ubuntu 12.10 and most RPM- and DEB-package manager based distributions.
    For more information and to download the product, visit the ESET NOD32 Antivirus for Linux download page or contact your local reseller, distributor or ESET office.
  21. Upvote
    Aryeh Goretsky gave kudos to foneil in ESET SysRescue Live 1.0.16 has been released   
    A new version of ESET SysRescue has been released. See the ESET SysRescue Download page for more information and to download the tool. 
    How do I use ESET SysRescue Live to clean my computer?
    Changelog
    Changed: ISO updated to isohybrid. Isohybrid enables the ability to create live USB via various available apps. Older versions of Live USB creator will not work because they are bound to a specific version of ISO Changed: Updated legal terms and sensitive information handling due to EU General Data Protection Regulation (GDPR) Changed: System updated to Ubuntu Xenial Xerus 16.04 LTS Changed: Updated UEFI boot and the ISO now supports both Legacy and UEFI mode booting Changed: Integration of the second El Torito image grub Changed: Additional minor changes and improvements Fixed: Invalid copyright value in startup splash
  22. Upvote
    Aryeh Goretsky gave kudos to Cousin Vinny in Request for feedback on a plan to change handling of Potentially Unwanted & Unsafe Applications   
    Speaking as someone who is hands-on IT management rather than a reseller or MSP:  That is how I would expect it to behave and should.  My endpoints are configured for strict cleaning so I have not dealt with this issue, however if end users were greeted with option dialogs during an av scan without any way for the admin to suppress I would be quite aggravated with the product.
  23. Upvote
    Aryeh Goretsky gave kudos to rekun in Request for feedback on a plan to change handling of Potentially Unwanted & Unsafe Applications   
    I would welcome the changes, as I currently enable strict cleaning to get similar results 
  24. Upvote
    Aryeh Goretsky gave kudos to Marcos in Request for feedback on a plan to change handling of Potentially Unwanted & Unsafe Applications   
    Dear forum members,
    We are considering a change in the product's behavior but before doing that, we would like to consult you, our field experts with regards to the problem and suggested change.
    We kindly ask you to:
    Read this message carefully Talk with other people of your support staff, whether they are aware of issues related to current behavior Provide any comments (supportive / negative) towards the proposed change As of now, one of the issues that our customers are facing is the behavior of products in managed environment, related to handling of detections and cleaning of Potentially Unwanted and Potentially Unsafe Applications (hereafter referenced as PUA)
    The following are prerequisites of the behavior:
    Default cleaning settings on the Endpoints (normal cleaning) Detection of PUA is enabled. With these settings we were reported the following problems by several customers and resellers / MSPs that we have interacted with directly during a customer research.
     
    Main problems are:
    End users on local machines are forced to respond to an „interactive window“ that is asking for action in case of a PUA detection, which can by triggered by protection modules or the on-demand scanner. They offer the „ignore & continue“ action even in managed environments where the end user should not make decision. Users can try to install a PUA which usually ends with multiple interactive windows appearing. If a PUA is already in the system and you schedule an on-demand scan, it will be reported to the user again and a dialog with action selection is shown to the user. If this happens on a server, it will be never resolved; the dialog eventually expires, and then will be reported again and again to the server upon re-scanning. The only solution currently is to set an exclusion or to set cleaning mode to strict which will automatically remove the PUA detection without asking.
     
    What are we planning to do:
    We are planning to change the product behavior in a way that our endpoints will automatically block / clean PUA detections in managed environments according to the option selected by an administrator, meaning that the end users will never see interactive windows. Alerts (only one) will be reported to the ERA, and it will be up to the security administrator to either set an exclusion or acknowledge such detection. After exclusion, reinstall of the affected PUA will be needed on the target system; restore from quarantine is not enough since „cleaning“ also removes references which are not restoreable (this is valid also now, when Exclusion is „cleaned“).  
    We would like to hear from you and ask for feedback whether you consider this change as risky from the perspective of customer expectations. We do perceive the problem as serious and would like to change the behavior even for existing users by means of a module update. An alternative approach is to change it only in new versions of our products, meaning Endpoint V7 and eventually backport it to a new 6.6 hotfix if that happens in the foreseeable future.
    How the interactive window looks:

    How it looks in the logs:

    How it looks in the ESET Remote Administrator:

    Please note that we are also bringing a lot of changes into the ESMC:
    Cleaned „threats“ are automatically going to be marked as resolved (once the behavior is implemented, you will automatically get the PUA cleaned at the „first detection“) and will be automatically „resolved“ in ESMC (no duplicated entries when one clicks „no action“) You will be able to set exclusions directly from the threats section, basically by „one click“; there will be also an option to set „exclusion by HASH“ in EES.  
    Thank you for your feedback & support.
  25. Upvote
    Aryeh Goretsky received kudos from yeoldfart in ESET's response to Meltdown and Spectre CPU vulnerabilities   
    Hello,

    I am building a master list of hardware, software and networking companies affected by Meltdown and Spectre in the We Live Security blog post mentioned, above. 

    Here is a link a direct link to the table:  https://www.welivesecurity.com/2018/01/05/meltdown-spectre-cpu-vulnerabilities/#vendors
    Currently there are 62 150 vendors listed at the time of this posting editing.  There's a revision history at the bottom of the blog post with each day's additions.

    Regards,

    Aryeh Goretsky
×