For version 5.x ou 6 : rule by reputation

Hi,

I am very dispointed by v5 cloud reputation, it is just a board
i have 3 computer with EAV and 2 with ESS, i think change for other antivirus.

Please change or improve your cloud :

Eset "Classic" (as now, choose your setting) or "Eset Rule by Reputation"(All actions are based by the reputation)

Eset analyse the file, if virus found remove if not :

a-If application is good(green) :
Firewall allow in/out
Hips allow all (but protect security)

b-If application is yellow(unknow but many users) :
Ask for submit analyse or rank this application
Firewall ask for out but allow for in
Hips ask for many actions (security, registry,...)

c-If application is red/not view) :
Ask if you are sure for launch
Firewall ask for out/in with recommandation for blocking
Hips ask for all actions
Live grid upload file automatically for analysis

Now, will be better antivirus with real good cloud.

I wait this improve,
Thank you
Arnaud

 

Files with poor reputation are not necessarily malicious. Quite the contrary, detecting such files automatically would cause numerous false positives. ESET leverages smart mechanisms (not solely file reputation) to determine whether a file is benign or risky. ESET will never go the way of detecting 100% of threats at the cost of high number of FPs and thus exposing their users at risk of removing important files.

 

I never say a poor reputation = malicious but eset can say :

"Warning this file are use by less 1.000 people are you sure continue"


How can you stop 0day attack if all program are 100% allow by software ?
If program are never see by may be billion users eset and want start in windows registry, open connection...is may be not malcious but very suspect and that it is different

 

Just another intrusive alert, independently if the file is malware, grayware or goodware,
this happenned to norton in the past, and it was penalized for the same reason at AV-C