PDA

View Full Version : HELP!! Eset is blocking my WSUS window updates


doma
October 20th, 2008, 09:39 PM
Hi,

I have ESET installed on all my clients computers ( 90PCs). Yesterday I pushed to my client's PCs some WSUS windows updates from the WSUS server and the next day more than 30 clients were not able to log on into their PCs through their domain credentials. I went to investigate the problem and I logged into their PCs locally and saw that the updates are still waiting to be installed, however I got the following warning from ESET.

WARNING! APPLICATION MODIFICATIONS DETECTED
DURING COMMUNICATION A CHANGE WAS DETECTED IN THE APPLICATION:C:\WINDWS\SYSTEM32\WINLOGON.EXE

Also another warning with the same wordings accept it is for:
APPLICATION:C:\WINDWS\SYSTEM32\svchost.EXE

Can somebody help me or recommend changing some ESET settings to prevent any blocking of WSUS windows updates that I will deploy in the near future. Thanks a lot.

Marcos
October 21st, 2008, 12:49 AM
That's really weird as modifications in digitally signed applications are accepted by default. Could you check if you didn't disable this option in the Personal firewall -> Application modification detection setup? Could you check if those exe files have a valid digital signature?

doma
October 21st, 2008, 11:39 PM
Hi Marcos.. I checked them and all OK. Any other hints. Thanks.