deszynda 0 Posted April 28, 2015 Posted April 28, 2015 Hello, I did a test from page hxxp://www.amtso.org/check-desktop-cloud-lookupsand was able to download a file. Windows showed an alert that this file can harm my computer but ESET Endpoint Antivirus 6.1.2222.1 did nothing. Follow by this page antivirus should not allow to download such file. I have default configuration of my EEA product. Please let me know if I should change any settings? Thank you!
Former ESET Employees foneil 342 Posted April 28, 2015 Former ESET Employees Posted April 28, 2015 Did you enable ESET Live Grid when you installed EEA? ESET Live Grid is the cloud detection for ESET.
deszynda 0 Posted April 29, 2015 Author Posted April 29, 2015 Yes. ESET Live Grid is enabled in my EEA.
jimwillsher 65 Posted April 29, 2015 Posted April 29, 2015 Strange, I'm using a (mostly) default configuration and it blocks it immediately for me.
Administrators Marcos 5,730 Posted April 30, 2015 Administrators Posted April 30, 2015 If you download eicar from hxxp://www.eicar.org/download/eicar_com.zip, is it detected and blocked by the web (http) scanner?
deszynda 0 Posted April 30, 2015 Author Posted April 30, 2015 Site hxxp://www.eicar.org/download/eicar_com.zipwas not available but after trying to download from https://secure.eicar.org/eicar_com.zip it was detected by ESET and automatically removed. But I've checked one more time and I'm able to download cloudcar.exe from amtso...
deszynda 0 Posted April 30, 2015 Author Posted April 30, 2015 I didn't change anything from 'Antivirus' and 'Web and email' sections in policies. Just update, tools and user interface.
Administrators Marcos 5,730 Posted May 2, 2015 Administrators Posted May 2, 2015 Do you see cloud information about running processes under Tools -> Running processes?
deszynda 0 Posted May 5, 2015 Author Posted May 5, 2015 Yesy. I see these informations about running processes.
Administrators Marcos 5,730 Posted May 6, 2015 Administrators Posted May 6, 2015 As long as Live Grid is enabled, cloud information among running processes is displayed and eicar test file is detected by web protection, there's absolutely no reason for Cloudcar not to be detected by web protection. A remote session may be needed for an ESET personnel to check it out. However, first you could shot a video showing all the above mentioned things.
deszynda 0 Posted June 1, 2015 Author Posted June 1, 2015 After I've updated EEA version to 6.1.2227.3 it finally worked.
Recommended Posts