VeselinB 0 Posted May 3 Share Posted May 3 Hello, I am new to these forums and hope this thread is posted in the right section. Anyways let's move on. I have ESET Nod32 Antivirus, and when opening one "Tool that attaches to a specific game/app," the .exe is fine. But as soon as I open the game/app, ESET detects something and requires me to do a PC restart Now or Later and also clears the detection instantly, making the tool I want to use simply unusable. I want to allow the associated process or whatever else it is running from the said .exe instead of completely disabling ESET whenever I want to use it. Sometimes ESET does not detect things when they are bad/malicious. Sometimes, ESET thinks/detects stuff that is bad/malicious, while it's not (at least for me). I want to allow the said process (on my own risk), but it's impossible when I click it in the log to restore/exclude (only can view more detailed information). I tried to exclude the exe in multiple places (files exclusion and deep behavior exclusions) but still nothing. Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here 3.5.2023 г. 12:22:50;Advanced memory scanner;file;Operating memory » RuntimeBroker.exe(9148);a variant of Win64/Agent_AGen.EE trojan; contained infected files (after the next restart);;;681A3787BA95124581207AC11D15EA47B4BD253D; Any ideas? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,919 Posted May 3 Administrators Share Posted May 3 We'll adjust the detection and change it to riskware / game hack for which you can then create a detection exclusion based on the detection name. Link to comment Share on other sites More sharing options...
VeselinB 0 Posted May 3 Author Share Posted May 3 Yeah, thanks. If I have to provide more information about this game hack/riskware would be awesome because it's pain to disable ESET every time and restart my PC. Link to comment Share on other sites More sharing options...
VeselinB 0 Posted May 4 Author Share Posted May 4 @Marcos, I still can't figure out how to exclude it. I can see only the following options (Filter, Copy, Delete, Export, Find, and More details). Maybe the new detection can be restored and excluded when the process is reopened? This context menu that I listed was when I tried to click on one of the old detection logs, where the actual process/file is no longer available because deleted already. Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 4,919 Posted May 4 Administrators Solution Share Posted May 4 A detection exclusion like this should work (Detection engine -> Exclusions -> Detection exclusions): Link to comment Share on other sites More sharing options...
VeselinB 0 Posted May 5 Author Share Posted May 5 Thank you for all the support and help. It works now. Link to comment Share on other sites More sharing options...
Recommended Posts