Closing main app w\o turning off protection

[cyberzeus 0]

All of the other Mac AV and security apps I have used are able to run in the background without the main app being open.  In such cases, the application protects the machine and when the user needs to access the app itself, it is done via the Finder or the Dock.  It appears that ESET does not allow this and the app must remain open at all times.

Is this correct?

 

[Marcos 5,071]

That's not correct. ESET runs in the backround unless you click its icon which will open the gui.

[cyberzeus 0]

Thanks Marcos...then I believe we have a bug in the software.  Here is the observed behavior:

ESET GUI is open --- may or may not be minimized:

• Attempt to download the eicar.org test file, file is flagged as expected.
  • The Detected threats log indicates the discovery of the issue and the type of issue found.
• Manually scan the already downloaded eicar.org test file, the file is flagged as expected.
  • The Computer scan log indicates that the scan was performed and also increments the counter for issues found.
  • However, the Detected threats log does not indicate the discovery of the issue.

ESET GUI is closed --- this also results in the Dock icon going away:

• Attempt to download the eicar.org test file, the website is blocked (different behavior than above).
  • Also, the Filtered websites log does not show this attempt.
• Manually scan the already downloaded eicar.org test file, nothing happens meaning the file is not flagged but also, no indication is given that the file was even scanned.
  • Also, the Computer scan log does not indicate any scan was performed.

Also, the attached file shows the message that is presented when closing the GUI.

Thanks.

Edited March 13, 2020 by cyberzeus

[Marcos 5,071]

Regarding "However, the Detected threats log does not indicate the discovery of the issue", it could be that you downloaded eicar in a zip file so real-time protection could not detected it (it doesn't scan inside archives) which would also account for no detection being logged in the detection log. However, scanning it with the on-demand scanner should detect it and generate a record in Computer scan logs.