Rallinth 0 Posted May 17 Share Posted May 17 Hello, I recently created an on-demand scan task that took place over the past 24 hours in our org. While it found a few problems, it also seemed to make lots of noise about "Potentially unsafe applications". Upon investigation, all these detections appear to be part of the locally installed ESET software. Below is a copy/paste of one of the alerts. Is this indeed part of ESET? If yes, how does the community recommend we deal with these alerts? Antivirus Potentially unsafe application Occurred 14 hours ago - May 16, 2023 19:43:25 Occurrences Total 1 Resolved 0 Handled by product 0 Circumstances First seen on Restart required no Hash BAC956C97B714583B74F98567BD5909F1DFADCE7 Name EFI/CompuTrace.A Detection Type Potentially unsafe application Object type File Uniform Resource Identifier (URI) file:////Device/HarddiskVolume1/EFI/HP/BIOS/Current/P08_0206.bin Process name C:\Program Files\ESET\RemoteAdministrator\Agent\ERAAgent.exe User Administrator initiated scan Detection Flags Variant Scan Scanner On-demand scanner Detection engine version 27248 (20230516) Current engine version 27251 (20230517) Scan targets Operating memory;Boot sectors/UEFI;C:\Boot sectors/UEFI;D:\Boot sectors/UEFI;F:\Boot sectors/UEFI;G:\Boot sectors/UEFI;C:\;D:\;F:\;G:\ Number of scanned items 5563614 Infected 2 Cleaned 0 Time of completion 10 hours ago - May 16, 2023 23:01:04 Action Action error Unable to clean Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 4,704 Posted May 17 Administrators Share Posted May 17 Please create a detection exclusion for EFI/CompuTrace detection as suggested in KB https://support.eset.com/en/kb6567. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.