ESET v6.0.115.0 RC

Added: Anti-Theft One-way messaging
Added: Anti-Theft Diagnostics
Added: Anti-Theft Phantom account
Changed: More actions available after scan is finished
Fix: Various bugfixes in desktop client and Anti-Theft based on feedback from our users

 

What about memory-based heuristic detection? Any news?

 

HIPS not working:
Load driver
Install global hook
Debugging another application
Intercept events from another application


ESS v6.0.115.0 RC. Windows 7 Ultimate SP1 64 bit


Virus signature database: 7255 (2012062
Update module: 1040 (20120313)
Antivirus and antispyware scanner module: 1362 (2012062
Advanced heuristics module: 1124 (20120523)
Archive support module: 1147 (20120620)
Cleaner module: 1056 (20120601)
Anti-Stealth support module: 1031 (20120613)
Personal firewall module: 1082 (20120515)
Antispam module: 1022 (20120601)
ESET SysInspector module: 1224 (20120223)
Real-time file system protection module: 1007 (20111129)
Translation support module: 1044 (20120223)
HIPS support module: 1052 (20120613)
Internet protection module: 1041 (20120627)
Web content filter module: 1009 (20110705)
Advanced antispam module: 1041 (20120622)
Database module: 1021 (20120612)

 

1. EAV 6.0 doesn't detect these files (7E9DA07F9C5C91C5F815E2E2FDBC94CB, 99BF51E8A76AE8E0380FE74A8D2176C2), but v5.2 does.
2. Choose 9E3C13B6556D5636B745D3E466D47467 → click “Clean files” via context menu (the “Strict cleaning” level) → available actions: “Delete” and “No action”.
2.1. Choose 9E3C13B6556D5636B745D3E466D47467 → click “Clean files” via context menu (the “No cleaning” level) → available actions: “Clean”, “Delete” and “No action”.
2.2. The above detection is triplicated in the “Computer scan” window.
3. If i scan a long path, i won't see a threat name. Add word wrap.


EAV 6.0.115 (regular updates), Windows XP SP3 (32-bit) on VirtualBox.

Virus signature database: 7255 (2012062
Update module: 1041 (20120430)
Antivirus and antispyware scanner module: 1362 (2012062
Advanced heuristics module: 1124 (20120523)
Archive support module: 1146 (20120511)
Cleaner module: 1056 (20120601)
Anti-Stealth support module: 1031 (20120613)
ESET SysInspector module: 1224 (20120223)
Real-time file system protection module: 1007 (20111129)
Translation support module: 1074P (20120601)
HIPS support module: 1052 (20120613)
Internet protection module: 1039 (20120531)
Database module: 1021 (20120612)

 

Try renaming the file. e.g. From svchost.exe to MyInfectedApp.exe
Now you can try to clean the file.


If "unable to clean" message is logged, it could indicate a serious error in the cleaning procedures.

 

А lot of good changes.
Real-time file system protection - changes. And many other.

http://img13.imageshost.ru/img/2012/06/29/image_4fecf3cc53ac6.png
http://img13.imageshost.ru/img/2012/06/29/image_4fecf4012f4b7.png

 

wow, new category Threat classification es getting more and more advanced. That is AV passion

 

Now that's what I want to see!
Good job Eset .

Thank you.

 

"Adv. Heuristics on File execution" cannot be enabled yet.

 

Just installed this new 6 RC version on my main system (Win 7 x64, 3gb RAM, core i3 330). So far so good. Nothing unexpected out of the ordinary. Launched several applications, just as quick and clean as expected from ESET.

Love the new GUI very minimalist and sleek. Oh and memory usage is slightly down, definitely an improvement. Currently have ESET Anti-Theft and Parental control disabled, indicated by red circles.

A quick question, document protection and removable media protection are showing as disabled with a blank dot. All my settings are as default, is this by design? I've never really paid attention to it in previous versions so perhaps it is new to me.

Nontheless, performance is super. Keep up the good work.

 

I am also confused with the "Document Protection" and "Removable Media Protection" states. Are them supposed to be disabled by default?

 

Hello,

In this build they are disabled, but you can enable them if you like.

Regards,

Aryeh Goretsky

 

Detects fine. Tested on Windows 7 (32-bit, VirtualBox).

 

Hello Aryeh Goretsky,

Just another question..
Would enabling them affect performance?

 

Has the memory leak been fixed in this build?

Jim

 

I haven't noticed any memory leak.

 

Some observations in the main GUI:

* Enabled status in Parental Control page after disabling it completely (light is correctly displayed as off)
* No dropdown menu for Network filtering in the Network page.

 

I hope version 6 is much better at removing malware. I believe that is Eset's weakest area, and there needs to be major improvement in this area. I was also hoping to see a true cloud based AV added to V6. It looks like they are sticking with Live Grid.

 

What do you mean by "a true cloud based AV" ? ESET with ThreatSense.Net was among the first to have introduced a sort of cloud solution several years ago which has evolved to LiveGrid recently.
If you mean detection based on reputation, we won't go this route as it would produce myriads of FPs.

 

If you consider that a cloud AV I could also say that Tuneup Utilities has a cloud AV in it as well. It has something similar as Live Grid. I understand its not as up to date, and they do not specialize in the security arena. When I say cloud AV I mean the behavior of applications are monitored in real-time from the client back to the cloud or server. Then behaviors deemed dangerous by the cloud are either blocked, prompt the user for action, and / or removed on the client end. I do not want to go any further into details than that because i'm no expert in this area. I do understand the difference in a cloud AV, and simply giving feedback on the reputation of an application as seen by the community. Live Grid is a step in the right direction, but Eset's not quite there yet.

 

You don't need cloud to evaluate potentially malicious operations (e.g. in order to evaluate patching of system files as suspicious you can use simple logic or common sense when talking about people). However, even if such operations are basically suspicious, they can be performed for legit purposes, e.g. during a Windows update so the point is to distinguish between legit and malicious applications which cloud solutions can help to accomplish. I agree there's a huge potential cloud offers, however, ESET's products are continually being developed to take advantage of it.
Speaking about cloud and reputation, my feeling is that many people think it's very easy - just get the reputation of a file from cloud and based on it decide whether it's a benign file or malware. However, in reality it's not that easy at all and such approach would lead to a huge number of false positives.

 

To me the greatest benefit of the cloud is the constant data collected by the behavior of applications across the community which is sent from the clients machines back to the cloud. That information can then be flagged by the cloud for analysis by security experts at Eset or any other company. This will lead to early discovery of malware that otherwise may have taken weeks, months, and even years before being discovered in some cases. The cloud will be a great benefit in early discovery of malware. It is a must to keep up with the amount of malware released in the wild everyday.

 

Information from suspicious incidents is sent to ESET, even in v3/v4; and -like you said- it helps in early discovery of malware.

 

Hello,

That depends largely on how the PC is used, I would think. If you were constantly loading multi-megabyte Microsoft Office documents and connecting/disconnecting devices like USB flash drives you might notice something. Then again, performance on those features is optimized and it might not be something that you notice. The type of computer being used and how busy it is can also make a difference as well, too.

Regards,

Aryeh Goretsky

 

Hello friends what about the memory consumption and other requirements in version 6 ? same as version 5 or will it going to ask higher system requirements than version 5 ? It looks v6 only got minor tweaks to the same scan engine.