VlP 0 Posted January 14, 2019 Share Posted January 14, 2019 Hi, On demand scanner suddenly deleting script installer files, when I have set up "normal" cleaning level..? Threat type: potentially unwanted application Object uri: file:///C:/Install/Tools/Notepad++/npp.7.5.2.Installer.x64.exe/Script.nsi Threat name: Win32/Toolbar.Seznam.B Threat type: potentially unwanted application Object uri: file:///C:/Install/Tools/Adobe/AcroRdrDC1500720033_cs_CZ.exe/Script.nsi Threat name: Win32/Toolbar.Seznam.B Threat type: potentially unwanted application Object uri: file:///C:/Install/Tools/7zip/7z1604-x64.exe/Script.nsi Threat name: Win32/Toolbar.Seznam.B ,,etc Link to comment Share on other sites More sharing options...
Administrators Marcos 5,259 Posted January 14, 2019 Administrators Share Posted January 14, 2019 I don't think it's a FP, most likely it's a Toolbar.Seznam PUA as the detection name suggests. It's not the original application installers but ones provided by Seznam.cz that have also a toolbar bundled besides the original application. Peter Randziak 1 Link to comment Share on other sites More sharing options...
VlP 0 Posted January 14, 2019 Author Share Posted January 14, 2019 And why is Eset deleting this when I have set up "normal" cleaning level in on demand scan? Eset should be deleting this files in "strict" cleaning level.. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,259 Posted January 14, 2019 Administrators Share Posted January 14, 2019 In managed environments (ie. on machines with the ESMC agent installed) PUA are cleaned as though in strict cleaning mode. The users are not supposed to make decisions and PUAs are controlled by an administrator. An admin can create exclusions for specific PUA detections and also possibly restore files from quarantine remotely. TomasP and Peter Randziak 2 Link to comment Share on other sites More sharing options...
Recommended Posts