Jump to content

Recommended Posts

Posted

ESET Internet Security v17.0.16.0

ESET is not respecting the exception I have added to exclude from all scanning. I have to constantly click "No Action" then apply multiple times a day.
I have my Desktop folder excluded from all scanning but I constantly receive notifications that a PUP was found. I know this because I have a zip folder of JDownloader2 in a folder on my desktop and ESET keeps alerting.
I also found that when I do a full scan of my Desktop folder, nothing is found and I don't receive any notifications.

This has been happening for the last few versions. I found that excluding a folder on separate drives works but not on my main drive.

My log file created from the ESET Log Collector is just over 600MB so I had to upload it to my Google Drive. 

ESET Generated Logs

Thank you.

  • Administrators
Posted

There are only 2 detections from Jan 5 and 6, one was in the Program files folder which was not excluded. If you are still getting detections in excluded folders, please provide fresh ELC logs.

Don't forget to re-enable the scan on open and create options in the real-time protection setup since real-time protection is now substantially weakened.

Posted

Adding screen shots of the popup notification I received again, shot of the folder excluded from both performance and detection sections.

Adding new log file link:

New ESET Logs

ESET.PUA.Popup.png

Detection.Exclusions.png

Performance.Exclusions.png

  • Administrators
Posted

Please make sure that the check-box Ignore exclusion is not ticked prior to running a custom scan:

image.png

Posted

I woke up to another popup showing JDownloader as a potentially unwanted application. I had to click apply again to close the window. 

I think the detection happens during idle or background scans because I only have a deep scan scheduled to run weekly every Sunday morning, so, the "Ignore Exclusions" box is not used. I always have ESET set to warn user and to never automatically clean. I want to make sure there are no false positives.

I went through all the settings again and I lowered the setting to "Cautious" under the Protections > Detections responses > Potentially unwanted applications section. I will have to wait to see if it pops up again but it usually does a few times a day, which leads me to believe it's from the background / idle scanning.

  • Administrators
Posted

According to the logs you've supplied, there was only one on-demand scan ran on 2024-01-15, 13:32.

There's a scan task "Full System Scan" scheduled which has ignoring of exclusions disabled. Moreover, it has probably never run or ran just once since there's only one on-demand scan log in C:\ProgramData\ESET\ESET Security\Logs\eScan.

Posted

Yes, I ran an on demand scan that I ran specifically on the Desktop folder and one full scan to test if the exclusion was working. During the scan nothing was detected, which was odd because I expected the full scan to ignore the Desktop folder but when scanning the Users > Jsin > Deskotp folder path it SHOULD have detected JDwonloader2 and marked it as a PUA, but it didn't. I say that it should have detected it because it obviously scanned the folder but didn't find anything, even though multiple times each day I receive a popup showing JDownloader2 as being a PUA and asking me to clean - delete - ignore.

This is why I say I think it is being detected and exclusions ignored during an idle or background scan. There are no exclusion options for these scans only to ignore file extensions.

Posted

I just logged into my home PC remotely and again, there was the popup notification.  This is the second time it has happened today and it is only 8am.

 

01.jpg

  • Administrators
  • Solution
Posted

You have excluded c:\users\... Please exclude the file also at the link c:\documents and settings...

Posted

Thank you for the suggestion Marcos.

I have added the path: C:\Documents and Settings to my exclusions list. But I thought this folder was not used since Windows now uses the "Users" folder? Won't this cause an error since the folder is not accessible and can't be opened?

I will test and wait to see if I receive the notification again.

Posted

Excluding the Documents and Settings folder seems to have worked. Thank you Marcos!

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...