Jump to content
VlP

Eset is now deleting installer script files

Recommended Posts

Hi,

On demand scanner suddenly deleting script installer files, when I have set up "normal" cleaning level..?

Threat type: potentially unwanted application
Object uri: file:///C:/Install/Tools/Notepad++/npp.7.5.2.Installer.x64.exe/Script.nsi
Threat name: Win32/Toolbar.Seznam.B

Threat type: potentially unwanted application
Object uri: file:///C:/Install/Tools/Adobe/AcroRdrDC1500720033_cs_CZ.exe/Script.nsi
Threat name: Win32/Toolbar.Seznam.B

Threat type: potentially unwanted application
Object uri: file:///C:/Install/Tools/7zip/7z1604-x64.exe/Script.nsi
Threat name: Win32/Toolbar.Seznam.B

,,etc


 

Share this post


Link to post
Share on other sites

I don't think it's a FP, most likely it's a Toolbar.Seznam PUA as the detection name suggests. It's not the original application installers but ones provided by Seznam.cz that have also a toolbar bundled besides the original application.

Share this post


Link to post
Share on other sites

And why is Eset deleting this when I have set up "normal" cleaning level in on demand scan?  Eset should be deleting this files in "strict" cleaning level..

Share this post


Link to post
Share on other sites

In managed environments (ie. on machines with the ESMC agent installed) PUA are cleaned as though in strict cleaning mode. The users are not supposed to make decisions and PUAs are controlled by an administrator. An admin can create exclusions for specific PUA detections and also possibly restore files from quarantine remotely.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×