Jump to content

ESET Internet Security Scanning Excluded Folders


Go to solution Solved by Marcos,

Recommended Posts

ESET Internet Security v17.0.16.0

ESET is not respecting the exception I have added to exclude from all scanning. I have to constantly click "No Action" then apply multiple times a day.
I have my Desktop folder excluded from all scanning but I constantly receive notifications that a PUP was found. I know this because I have a zip folder of JDownloader2 in a folder on my desktop and ESET keeps alerting.
I also found that when I do a full scan of my Desktop folder, nothing is found and I don't receive any notifications.

This has been happening for the last few versions. I found that excluding a folder on separate drives works but not on my main drive.

My log file created from the ESET Log Collector is just over 600MB so I had to upload it to my Google Drive. 

ESET Generated Logs

Thank you.

Link to comment
Share on other sites

  • Administrators

There are only 2 detections from Jan 5 and 6, one was in the Program files folder which was not excluded. If you are still getting detections in excluded folders, please provide fresh ELC logs.

Don't forget to re-enable the scan on open and create options in the real-time protection setup since real-time protection is now substantially weakened.

Link to comment
Share on other sites

Adding screen shots of the popup notification I received again, shot of the folder excluded from both performance and detection sections.

Adding new log file link:

New ESET Logs

ESET.PUA.Popup.png

Detection.Exclusions.png

Performance.Exclusions.png

Link to comment
Share on other sites

  • Administrators

Please make sure that the check-box Ignore exclusion is not ticked prior to running a custom scan:

image.png

Link to comment
Share on other sites

I woke up to another popup showing JDownloader as a potentially unwanted application. I had to click apply again to close the window. 

I think the detection happens during idle or background scans because I only have a deep scan scheduled to run weekly every Sunday morning, so, the "Ignore Exclusions" box is not used. I always have ESET set to warn user and to never automatically clean. I want to make sure there are no false positives.

I went through all the settings again and I lowered the setting to "Cautious" under the Protections > Detections responses > Potentially unwanted applications section. I will have to wait to see if it pops up again but it usually does a few times a day, which leads me to believe it's from the background / idle scanning.

Link to comment
Share on other sites

  • Administrators

According to the logs you've supplied, there was only one on-demand scan ran on 2024-01-15, 13:32.

There's a scan task "Full System Scan" scheduled which has ignoring of exclusions disabled. Moreover, it has probably never run or ran just once since there's only one on-demand scan log in C:\ProgramData\ESET\ESET Security\Logs\eScan.

Link to comment
Share on other sites

Yes, I ran an on demand scan that I ran specifically on the Desktop folder and one full scan to test if the exclusion was working. During the scan nothing was detected, which was odd because I expected the full scan to ignore the Desktop folder but when scanning the Users > Jsin > Deskotp folder path it SHOULD have detected JDwonloader2 and marked it as a PUA, but it didn't. I say that it should have detected it because it obviously scanned the folder but didn't find anything, even though multiple times each day I receive a popup showing JDownloader2 as being a PUA and asking me to clean - delete - ignore.

This is why I say I think it is being detected and exclusions ignored during an idle or background scan. There are no exclusion options for these scans only to ignore file extensions.

Link to comment
Share on other sites

I just logged into my home PC remotely and again, there was the popup notification.  This is the second time it has happened today and it is only 8am.

 

01.jpg

Link to comment
Share on other sites

  • Administrators
  • Solution

You have excluded c:\users\... Please exclude the file also at the link c:\documents and settings...

Link to comment
Share on other sites

Thank you for the suggestion Marcos.

I have added the path: C:\Documents and Settings to my exclusions list. But I thought this folder was not used since Windows now uses the "Users" folder? Won't this cause an error since the folder is not accessible and can't be opened?

I will test and wait to see if I receive the notification again.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...