Should ESET have quarantined this file when scanning?

Discussion in 'ESET Smart Security' started by harryz, Oct 2, 2010.

Thread Status:
Not open for further replies.
  1. harryz

    harryz Registered Member

    Joined:
    Apr 19, 2010
    Posts:
    15
    Hello,

    I'm running ESET SSS V4.0.467.0 with the latest virus signature database on a Win XP Home system with all Microsoft patches installed. I'm using a USB adaptor to attach a hard disk to this machine that I removed from another machine. I did this because this hard disk seemed to be infected or damaged and I was not sure which and I wanted to scan it with ESET and Malwarebytes.

    Once I attached the hard drive, I opened Explorer and right clicked on the drive letter, and selected 'Scan with ESET Smart Security'. The scan identified the following object as infected:

    E:\Documents and Settings\Chris\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-2dfb3e1f-510a6d60.class - Java/TrojanDownloader.OpenStream.NAC trojan

    This is all well and good, but ESET did not take any action to quarantine / delete this file or to ask me what I wanted to do about it. Is this the expected behavior? I can't find any settings within ESET SSS that would seem to apply.

    FWIW, the file was deleted / quarantined by ESET SSS while running Malwarebytes against this same disk:

    10/1/2010 11:57:31 PM Real-time file system protection file E:\Documents and Settings\Chris\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-2dfb3e1f-510a6d60.class Java/TrojanDownloader.OpenStream.NAC trojan cleaned by deleting - quarantined
    <machine name \ owner name> Event occurred during an attempt to run the file by the application: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe.

    Mahalo!

    Harry Z
     
  2. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    Have you tried this?
     
  3. Woodgiant

    Woodgiant Guest

  4. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    "Scan with ESET <security product>" option is intended for diagnostic purposes. :thumb:
    If you want to perform a Cleaning action, choose the "Clean files" option in the "Advanced options" context menu :cool:
     
  5. harryz

    harryz Registered Member

    Joined:
    Apr 19, 2010
    Posts:
    15
    Aloha Woodgiant and Toxinon12345

    Mahalo (thank you) both for your responses. Toxinon, you nailed it with the Advanced Option information. It's right there on the context menu, but I never thought to look at it. I just assumed that a Scan would take action when it found an infection.

    Best regards,

    Harry Z
     
  6. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    "Clean files" option allows you to perform a scan task and at the same time take action on the threats found
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.