ESET Anti-Virus

claire-craig

Good morning all,

Anyone out there have any experience of ESET Anti-Virus? We have a customer who has used this for quite sometime with no issues, but just recently (in the last week) it has started attacking the Opera3 reports (deleting frx's, producing 100's of pages).
I've supplied them with the usual exclusions but just wondering if anyone knows if there is something else within this particular AV that needs actioned - just wanting to point them in some direction if possible.

Regards
Claire

DDiskel

Hello Claire,

One of our customers has encountered the same issue with ESET and is currently investigating it with their internal IT team.

We experienced a similar problem last year, which required us to log a case through the antivirus provider’s portal.

Although the provider is Sophos , the information below may help you.

Exploit Mitigation Exclusions

You can exclude applications from protection against security exploits, these applications are excluded from exploit protection for all your users and their devices.

If you want to exclude applications from exploit protection for some users or devices, you can do this using an Endpoint Threat Protection policy.

If you want to exclude applications from exploit protection for some servers, you can do this using a Server Threat Protection policy.

As adding exclusions reduces your protection, we recommend that you use policies to target users and devices where the exclusion is necessary rather than using this global option.

To exclude an application, do as follows:

Go to Overview > Global Settings > Global Exclusions.

Click Add Exclusion (upper right of the exclusions list).

In Exclusion Type, select Exploit Mitigation (Windows).

You see a list of Protected Applications found on your network.

Select an application you want to exclude.

If you don’t see the application you want, click Application not listed? You can then exclude an application by its file path. Optionally, use any of the variables.

Under Mitigations, you can:

Turn off Protect Application. The application won’t be checked for any exploits.

Keep Protect Application turned on and select the exploit types that you do or don’t want to check for.

Click Add or Add Another. The exclusion is added to the list on the Global Exclusions page. To edit an exclusion later, click its name in the exclusions list, enter new settings, and click Update.

Hope this helps

Kind regards

Darpal Kaur