PDA

View Full Version : Strange logged events


jayt
May 14th, 2005, 04:49 PM
I found this entry in my event log. I have no idea what it is about. If it is from th e ThreatSense Net Early Warning System, I have that set but it is supposed to ask before sending. A mystery?

snowbound
May 14th, 2005, 06:53 PM
I see 4 of these in my Event Logs today,

Time Module Event User
5/14/2005 13:58:29 PM Kernel Statistical information has been sent to Eset.

Running NOD32 2.5

Never seen any such entries in last version of NOD32.

Anyone know what or why this info is being sent to Eset?


snowbound

ronjor
May 14th, 2005, 07:02 PM
Did you look here? :D

snowbound
May 14th, 2005, 07:09 PM
Yes i did but i'm not convinced that's what's happening here. ;) ;D

I have that option set to ask first and this info(whatever it is) is being sent without alerting me first. Seems this info is not about threats so i'm curious why or what is being sent.


Steve

Blackspear
May 14th, 2005, 07:11 PM
I just checked my logs, and I have the same thing, though being in your future we were naturally ahead of you guys ;) ;D

Time Module Event User
15/05/2005 8:27:22 AM Kernel Statistical information has been sent to Eset.

Cheers ;D

ronjor
May 14th, 2005, 07:13 PM
I did notice Secunia is involved. This from clicking on a link in the help file.

Matt_Smi
May 14th, 2005, 07:14 PM
I do not have the early warning system turned on yet anyway. But I was wondering if you needed the Mircosoft.Net framework installed to use it, or is it just called ThreatSense.Net for another reason?

cliff
May 14th, 2005, 08:09 PM
In advanced settings in the Threatsense.net tab, the Statistics tab has an option to tick "enable submission of anonymous statistical information". also the option how you want to send it. This seems to be independent of the threat of sending information about suspicious files.
The beta version was sending this info also.....my log

Time Module Event User
14/05/2005 18:08:44 Kernel The virus signature database has been successfully updated to version 1.1096 (20050514).
14/05/2005 17:55:11 EMON Unable to load module (2). NT AUTHORITY\SYSTEM
14/05/2005 13:10:36 Kernel Statistical information has been sent to Eset.
13/05/2005 21:47:35 Kernel Statistical information has been sent to Eset.
13/05/2005 19:08:24 Kernel The virus signature database has been successfully updated to version 1.1095 (20050513).
13/05/2005 15:11:20 Kernel Statistical information has been sent to Eset.
13/05/2005 15:09:49 Update NOD32 program components have been updated successfully. For changes to take effect, a computer restart is required.
13/05/2005 15:08:16 Kernel Statistical information has been sent to Eset.
12/05/2005 15:58:00 Kernel The virus signature database has been successfully updated to version 1.1094 (20050512).
12/05/2005 15:47:52 Kernel Statistical information has been sent to Eset.
12/05/2005 14:56:57 Kernel Statistical information has been sent to Eset.

Anyone understand the module problem with EMON or should i submit it to ESET!!

snowbound
May 15th, 2005, 07:44 AM
{QUOTE-> In advanced settings in the Threatsense.net tab, the Statistics tab has an option to tick "enable submission of anonymous statistical information". also the option how you want to send it. This seems to be independent of the threat of sending information about suspicious files.
The beta version was sending this info also.....my log

Time Module Event User
14/05/2005 18:08:44 Kernel The virus signature database has been successfully updated to version 1.1096 (20050514).
14/05/2005 17:55:11 EMON Unable to load module (2). NT AUTHORITY\SYSTEM
14/05/2005 13:10:36 Kernel Statistical information has been sent to Eset.
13/05/2005 21:47:35 Kernel Statistical information has been sent to Eset.
13/05/2005 19:08:24 Kernel The virus signature database has been successfully updated to version 1.1095 (20050513).
13/05/2005 15:11:20 Kernel Statistical information has been sent to Eset.
13/05/2005 15:09:49 Update NOD32 program components have been updated successfully. For changes to take effect, a computer restart is required.
13/05/2005 15:08:16 Kernel Statistical information has been sent to Eset.
12/05/2005 15:58:00 Kernel The virus signature database has been successfully updated to version 1.1094 (20050512).
12/05/2005 15:47:52 Kernel Statistical information has been sent to Eset.
12/05/2005 14:56:57 Kernel Statistical information has been sent to Eset.
<-QUOTE}

Ok thanks, i'll untick that paticular option as i, myself , am not too fond of this type of info(whatever it is) being sent to Eset, Secunia or anywhere else for that matter, without my permission....


snowbound

Marcos
May 15th, 2005, 08:15 AM
There's an example of the statistical information submitted in the help files, if you are not sure what information is submitted. The more people turn off submision of statistical information, the slower Eset will react to new threats.

izi
May 15th, 2005, 09:25 AM
Hello!


Look my old post about EWS: http://www.wilderssecurity.com/showthread.php?t=74690

izi
May 15th, 2005, 09:52 AM
{QUOTE-> There's an example of the statistical information submitted in the help files, if you are not sure what information is submitted. The more people turn off submision of statistical information, the slower Eset will react to new threats. <-QUOTE}

Hello Marcos!

Why ESET doesn't implement this statistical information like in NOD32 Scanner log. Everbody will see what information is sent to ESET.

Regards,

Izi

manOFpeace
May 15th, 2005, 01:14 PM
{QUOTE->
Some of this information may include personal information about the user of the computer, for instance usernames in the path etc. An example of the file information submitted is available here. <-QUOTE}

Na, don't like that. >:(

NOD32 user
May 21st, 2005, 07:22 AM
{QUOTE-> ...I have that option set to ask first and this info(whatever it is) is being sent without alerting me first. Seems this info is not about threats so i'm curious why or what is being sent... <-QUOTE}NOD32 2.5 Control Centre --> NOD32 System Tools --> NOD32 System Setup --> Setup --> ThreatSense.Net --> Advanced settings --> Suspicious Files
is what you have set to ask first, but
NOD32 2.5 Control Centre --> NOD32 System Tools --> NOD32 System Setup --> Setup --> ThreatSense.Net --> Advanced settings --> Statistics
is what is causing the entry in your log here.

snowbound
May 21st, 2005, 07:26 AM
{QUOTE->
NOD32 2.5 Control Centre --> NOD32 System Tools --> NOD32 System Setup --> Setup --> ThreatSense.Net --> Advanced settings --> Statistics
is what is causing the entry in your log here. <-QUOTE}

Yes, thanks. :)

I unchecked that option a few days ago.


snowbound