Some bugs in EAV 4.2.64.12 (Rus)

Discussion in 'ESET NOD32 Antivirus' started by Ego_Dekker, Aug 22, 2010.

Thread Status:
Not open for further replies.
  1. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    Hello. I found some bugs:

    1) Cannot create ESET SysRescue from the main menu (creating takes too long time). It can be created only through Start → Programs → ESET → ESET Sysrescue;
    2) The ESET SysRescue wizard crashes when i click “Next” button fast;
    3) When i boot from ESR, it shows virus signature database v3015, but then it gets back to normal after updating;
    4) Scheduler. The “Regular automatic update” task (parameters: “Repeatedly” → “Interval: 10 min.” → “Run task as soon as possible”) runs correctly, but update occurs only after a while (even if i run the task manually);
    5) An error message appears when i run “Help” (F1) from “Protocol filtering” submenus.

    Windows Vista SP2 (Rus, 32-bit), EAV 4.2.64.12 (Rus, 32-bit), Windows AIK (936330AIK, Rus).
     
  2. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    When I try to restore HTML/TrojanDownloader.FraudLoad.NAG from quarantine (it is caught by web access protection) there are following error messages:
    1)
    egui.exe_error_2.png ;
    2) The instruction at “0x77aae13d” referenced memory at “0x00000014”. The memory could not be “written”. Click on OK to terminate the program.
    egui.exe_error_1.png
     
  3. Rmuffler

    Rmuffler Former Eset Moderator

    Joined:
    Jun 26, 2008
    Posts:
    995
    Location:
    San Diego, CA USA
    Hello Ego_Dekker,

    I will see if I can pass this along to the appropriate team.

    Thank you,
    Richard
     
  4. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    1)
    The same error in “Hidden notification windows” (“User interface”) and “Advanced setup” (“Real-time file system protection”);

    2) NOD32 is unable to clean automatically Jeefo.A & Jeefo.D (all cleaning levels are set to strict). I select the samples, then I click “Advanced options” → “Clean files”, when i click “Clean”, it says “Error while cleaning”. If i don't choose “Delete”, the samples remain.
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    What kind of files did this virus infect on your computer? I reckon it's a quite old one so with real-time protection enabled it shouldn't have infected your machine in the first place.
     
  6. Rmuffler

    Rmuffler Former Eset Moderator

    Joined:
    Jun 26, 2008
    Posts:
    995
    Location:
    San Diego, CA USA
    Hello Ego_Dekker,

    I spoke with our Quality Assurance team here in North America, they asked me to have you contact the ESET representative for Russia. Can you please contact the customer support team for that office and let me know if they are able to assist you with these?

    http://www.esetnod32.ru/

    Thank you,
    Richard
     
  7. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    I'm sorry if I'm misleading you, but i'm talking about the bodies of these viruses (9E3C13B6556D5636B745D3E466D47467, 8BE8BD374BD46CB3A73A82EC012B7599), they just cannot be deleted automatically. I'm not infected.
     
  8. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Perhaps there's nothing to clean. If you think that ESET is unable to clean a specific virus, submit it to ESET per the instructions here, ideally with the appropriate clean files.
     
  9. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    NOD32 for some reason cannot delete these samples automatically (not infected files).
    1. “Advanced options” → “Clean files”. Why does it ask?
    window_1.png
    2. I choose “Clean”.
    window_2.png
    3. NOD32 cannot clean. It is so hard.
    alert_jeefo.a.png alert_jeefo.d.png
    error_while_cleaning.png
    4. But i click “Delete” and everything goes fine. Is it a bug?
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    See my reply above. Most likely the file contains nothing but the virus itself and thus cannot be cleaned, only deleted.
     
  11. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    In addition NOD32 "automatic" cleaning, first attempt to disinfect the file, then delete, or otherwise alert window will appear with actions.
    I assume you have set the cleaning level in "No Cleaning" or "Standard cleaning".
     
  12. loverboy

    loverboy Registered Member

    Joined:
    Mar 25, 2009
    Posts:
    59
    1. dismount the hard disk
    2. mount it as a slave HD on another PC
    3. delete the infected files manually
    4. mount the hard disk back to your PC

    :rolleyes:
     
  13. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    Why in the Russian version of NOD32 the width of advanced setup tree is less than in the English version? Please, make it wider.
    setup_tree_expanded_ru.png setup_tree_expanded_en.png
     
    Last edited: Jan 1, 2011
  14. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Perhaps you made the comparison on different operating systems.
     
  15. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    I've updated the screenshot and the width is still the same.
     
  16. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    That's ok, the Cyrillic uses a bigger font so the text on the right would not fit the window otherwise.
     
  17. Ego_Dekker

    Ego_Dekker Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    97
    Location:
    Russia
    1. My quarantine keeps a lot of files (the quarantine folder is about 200 MB). Right now i've selected all of these infiltrations and clicked “Delete”. NOD32 has stucked.
    2. “Log files”. The more information it records, the more time it gets to show entries.
    You should improve these issues.
     
Thread Status:
Not open for further replies.