Jump to content

Eset is now deleting installer script files


VlP

Recommended Posts

Hi,

On demand scanner suddenly deleting script installer files, when I have set up "normal" cleaning level..?

Threat type: potentially unwanted application
Object uri: file:///C:/Install/Tools/Notepad++/npp.7.5.2.Installer.x64.exe/Script.nsi
Threat name: Win32/Toolbar.Seznam.B

Threat type: potentially unwanted application
Object uri: file:///C:/Install/Tools/Adobe/AcroRdrDC1500720033_cs_CZ.exe/Script.nsi
Threat name: Win32/Toolbar.Seznam.B

Threat type: potentially unwanted application
Object uri: file:///C:/Install/Tools/7zip/7z1604-x64.exe/Script.nsi
Threat name: Win32/Toolbar.Seznam.B

,,etc


 

Link to comment
Share on other sites

  • Administrators

I don't think it's a FP, most likely it's a Toolbar.Seznam PUA as the detection name suggests. It's not the original application installers but ones provided by Seznam.cz that have also a toolbar bundled besides the original application.

Link to comment
Share on other sites

And why is Eset deleting this when I have set up "normal" cleaning level in on demand scan?  Eset should be deleting this files in "strict" cleaning level..

Link to comment
Share on other sites

  • Administrators

In managed environments (ie. on machines with the ESMC agent installed) PUA are cleaned as though in strict cleaning mode. The users are not supposed to make decisions and PUAs are controlled by an administrator. An admin can create exclusions for specific PUA detections and also possibly restore files from quarantine remotely.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...