KurtPCguy 0 Posted November 5, 2019 Share Posted November 5, 2019 I am receiving multiple “cleaned by deletion” messages from the “email scanner filter” with a logged user of nt authority\network authority. Eset finds nothing when I scan. Can you please advise what I need to do to rid myself of this issue Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted November 6, 2019 Administrators Share Posted November 6, 2019 To start off, please collect logs with ESET Log Collector and upload the generated archive here. Only ESET staff can access uploaded files. Link to comment Share on other sites More sharing options...
KurtPCguy 0 Posted November 7, 2019 Author Share Posted November 7, 2019 Here are the Logs emsx_logs.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted November 7, 2019 Administrators Share Posted November 7, 2019 All detections come from EdgeTransport.exe, ie. it's malware detected in spammed email that was cleaned / removed by ESET. Link to comment Share on other sites More sharing options...
KurtPCguy 0 Posted November 7, 2019 Author Share Posted November 7, 2019 Weird how all the sudden I started getting a bunch of these. Stranger was the user was nt authority and not a common user. It has slowed up now after I adjusted some spam settings in our cloud filtering solution so I think we are ok now. Thanks for your quick response and help Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted November 7, 2019 Administrators Share Posted November 7, 2019 It's normal, the service runs in the Network Services account by default: Link to comment Share on other sites More sharing options...
Recommended Posts