Eset Blocking Continuum Rmm Software And Updates

[techonecs 0]

I’m getting a BUNCH of these this morning from Eset:

hxxp://update.itsupport247.net/AGTU/DPMA/DPMA_525_0.zip contains probably unknown NewHeur_PE virus.

Also blocking some program files:

9/18/2014 7:33:24 AM - Module Real-time file system protection - Threat Alert triggered on computer ***:  C:\PROGRA~2\SAAZOD\SaazUpdates\ZPMGmt.exe contains probably unknown NewHeur_PE virus.
9/18/2014 7:33:24 AM - Module Real-time file system protection - Threat Alert triggered on computer ***:  C:\PROGRA~2\SAAZOD\SaazUpdates\ZPMDwld.exe contains probably unknown NewHeur_PE virus.
9/18/2014 7:33:38 AM - Module Real-time file system protection - Threat Alert triggered on computer ***:  C:\PROGRA~2\SAAZOD\IntelAMT\ChkIntelAMT.exe contains probably unknown NewHeur_PE virus.

Anyone else seeing this?  I'm sure it's a false positive...
 

[Peter Randziak 1,181]

Hello,

 

I will check it with our malware research team.

 

In future please report such issues as described in this KB article.

 

Thank you.

[techonecs 0]

Thanks!  I'll try to remember that for the future...

 

While I'm at it, how do I add a certain site as an exclusion in Remote Administrator if I have Eset NOD32 (not Internet Security).  Eset is blocking that HTTP download, but the only place I see to add an exclusion for HTTP sites is in the Firewall section in RA.

[rugk 397]

In future please report such issues as described in this KB article.

 

Or (like I always add), do it from your ESET product:

 

Eset is blocking that HTTP download, but the only place I see to add an exclusion for HTTP sites is in the Firewall section in RA.

 

No I think this is not the only place. You can also do this here:

Please note that this screenshot is from ESS, but in NOD32 it should be at a similar place.

[_George_ 0]

Peter Randziak  

i also have my own program that is false positive.  

i mean program itself is clean but the self update link is blocked. already submited for analysis and email too but no response
please check your P.M.