I forgot you were also using EMET. With EMET installed, you will not get accurate Surfright Exploit test tool results from Eset. The problem is that EMET will intercept all tests prior to Eset's handling of them. EMET installs deeply into the OS. As you observed, EMET fails a lot of the tool tests; primarily the heapspray ones. Disabling all EMET protections in its GUI will not help either as far as the test results go due to the way EMET works; it will still interfere with Eset's exploit protection. If you use Eset's exploit protection, you should uninstall EMET. I did and have never regretted it. Also my system is greatly improved performance wise since EMET will cause system performance degradation. Finally, I use Eset HIPS rules to protect critical processes from disk and memory based injection, global hooking, and the like to supplement Eset's exploit protection since it only protects Internet facing apps for the most part.