ESET Windows home products version 13

ESET Windows home products version 13 has been released.
The previous thread was about version 12:
https://www.wilderssecurity.com/threads/eset-nod32-v12.409491/

Please let us continue in this thread for version 13.

The latest posts in the previous thread can be found starting from this post:
https://www.wilderssecurity.com/threads/eset-nod32-v12.409491/page-10#post-2865009
Initially it was on pre-release updates.

Thanks all.

 

Thank you, Thankful !
Got it offered and updated, on regular update channel.
At the moment (as far as I can tell) there are no official announcements. I suppose they will come later.

 

I wonder if somebody who comes across new malware on a regular basis could comment on detection capabilities, especially with regard to advanced machine learning introduced in v13

 

Hoping someone over at MalwareTips can test this.

 

Make sure they do it with a new ransomware sample.

 

Under advanced download there is now installer for v. 13.0.22.0.

 

I´ve no luck with this version. The first I´ve extreme network performance drops in virtual machines (see Eset 12 thread), and now, I´ve to do netbanking. And what should I say, I thought my pc is broken, so slow is netbanking. The fan is running relatively high, and the workload in taskmanager is showing 30-40% continuously.

I think, this version is going to be deinstalled, until there are the correspond bugfixes. Long time to see such a poor version of Eset. I think the last time was the change of version 9 to 10 (or was it 10 to 11, or 8 to 9....? to long ago to remember....).

 

ESET Windows home products version 13.0.22 have been released (October 22, 2019)
https://forum.eset.com/topic/21235-eset-windows-home-products-version-13022-have-been-released/

Spoiler: Changelog v13.0.22

ESET NOD32 Antivirus, ESET Internet Security and ESET Smart Security Premium version 13.0.22 have been released and are available to download.

Changelog:
Version 13.0.22

• Added: Advanced Machine Learning
• Improved: Deep Behavioral Detection
• Improved: Connected Home Monitor (EIS, ESSP)
• Improved: Password Manager (ESSP)
• Improved: Disk Encryption (ESSP)
• Changed: supported operating systems: Windows 7 SP1 and newer
• Fixed: many other improvements and fixes

Known issues:

• Error in Windows Logs may appear once fix is applied (Error appears only once - during upgrade itself)

Download ESET Internet Security
Download ESET NOD32 Antivirus

 

Starting uTorrent takes about 30 seconds on my system. 20 seconds before process starts and another 10 until GUI shows. During this time ekrn.exe is at 12,5% CPU ( one core fully utilized). If I pause protection it launches in 1-2 seconds.

 

I was unable to reproduce it, utorrent starts instantly with v13 installed. The best would be if you report it in the ESET forum, provide a demonstration video as well as logs collected with ESET Log Collector and Procmon logs, one with protection enabled and one with protection disabled when the issue doesn't manifest.

 

When I get some more time I will create logs and report it on your official forum.
So far it seems to me that it's related to file scanner scanning that file. Right click on exe and it needs 30+ second to show right click menu, selecting properties and another 30+ second waiting time.Clicking on details tab another 15 seconds. Opening folder in Windows Explorer 10+ seconds till icon appears on executable.During this tests ekrn.exe is maxing one CPU core.
For now I "solved" a problem by adding uTorrent executable to performance exclusions. After that all symptoms are gone. Disabling option Scan on File open "solves" the problem also.

 

Weird. I can scan it through the right-click menu instantly. Is msmpeng.exe not running? Is the SHA1 of utweb.exe B9233B05438C9011F2BE771B7D69FA1F2D1A4FCB ? I look forward to checking the logs, there must be something weird that is causing the issue.

 

Did you bypass Eset's PUA detection of it on download? I assume you did since that would be the only way it can run without a PUA popup appearing.

 

@Marcos I don't have WD installed or running (I use Windows 8.1). I also don't use web version of utorrent but instead desktop version ( utorrent.exe with SHA1: bb8a66417823958651417edf5a234e344d1d0523 ).

@itman I didn't have Eset installed when I installed uTorrent so there was no PUA detection ( which happens during uTorrent installation or update).

For now I will reinstall Eset with default settings and see if that helps. If not I will post on official forum in a day or two.

 

Does it make a difference if you temporarily disable detection of potentially unwanted applications that are in utorrent files?

 

I tried disabling all of this and non of them helped: advanced machine learning, detection of PUA, detection of suspicious applications, advanced heuristics, HIPS.

Two options that did help are: adding performance exclusion for that file or disabling scan on file open in real-time file system protection.

 

In Eset GUI Real-time settings, check in the ThreatSense section under the Other category if "Enable Smart Optimization" is check mark. If it is not, check mark it and retest.

If Smart Optimization is not enabled, Eset will perform full heuristic analysis on the executable each time it is started regardless of whether the file had been previously scanned.

 

The ui is still the same right ?

 

It's more-less same. However, people install security software not because of their nifty gui but to get protection from malware and other threats and that's what matters. ESET is not a company that would provide you every year with a newer version that has gui changed completely but most important changes are under the hood, such as Advanced Machine Learning or improved Deep Behavioral Inspection.

 

Yes I like the ui , that's why i was hoping it's not changed

 

Yes, Smart optimization is enabled.

I started topic on their forum and will try to solve this problem there.

 

@Marcos: something new about the network performance loss under virtual machines or the high load under netbanking (in non virtual machines)?

 

Is there any way to see the mac address of a client in the firewall log?

 

As far as I am aware of, the only thing that will show a MAC address in Eset is the Connected Home Monitor feature: http://support.eset.com/kb6268/ . And it is only applicable if you're using the Home/Office firewall profile.

 

Hi I do not know ir your problem with utorrent still excists? but have you tried switching to this instead : https://www.qbittorrent.org/download.php
it has the same gui as utorrent , minus the crap and adds , maybe eset is getting stuck on utorrent related to the unwanted extra p.u.s. that come bundled with it?this is the main reason why I abbandoned utorrent ages ago....

edit : qbittorent literally starts up in a second or two ( I am on Eset i.s. 13.0.22.0 atm )