Advice Request Has Windows "SmartScreen" Gone mad??!!

Please provide comments and solutions that are helpful to the author of this topic.

Status
Not open for further replies.

Venustus

Level 59
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Dec 30, 2012
4,809
Eset "Live installer" blocked by "SmartScreen",or maybe we should call it "ParanoidScreen":p:p
How on earth can this be an unrecognised app?
I am thinking it's because it is the online rather than offline installer??

Thanks!!:)

rvuovwspexqmwekfubsgcazhiqrlpuexykefcjkguompikjjewcquitgfakyyhkzvhcqkwtfsixtwcfsvisiodnzmwudncdddpvd


VT:
Antivirus scan for 61278e63acfb97f05982704da3e8c04768c349523f56e133cc415a2be34be3b0 at 2016-02-09 21:03:12 UTC - VirusTotal
 

Venustus

Level 59
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Dec 30, 2012
4,809
that happened too, when Im testing webroot. SmartScreen is turned off, dont know why it keep block all files....
Same here!!
Maybe a bug of some sort??
 
  • Like
Reactions: frogboy
L

LabZero

It seems there are problems with the digital signature authentication of Eset. It allows you to verify the publisher of a file and that the file has not been changed since it was digitally signed.
If the file does not have a valid digital signature, it there is no way to be sure that it comes from the source declared or that it has been tampered with (possibly by a malware) since it was published.
Probably there is a problem in the Smartscreen filter authentication process (Unknown Publisher).
 

Venustus

Level 59
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Dec 30, 2012
4,809
It seems there are problems with the digital signature authentication of Eset. It allows you to verify the publisher of a file and that the file has not been changed since it was digitally signed.
If the file does not have a valid digital signature, it there is no way to be sure that it comes from the source declared or that it has been tampered with (possibly by a malware) since it was published.
Probably there is a problem in the Smartscreen filter authentication process (Unknown Publisher).
Thanks for the heads up!!:)
Here are the details of the certificate:
caauichmjnxikkakmzpuagdsnxvnjcliydkynjisiwyvjjrlmzpixheoqxjadeclanarbdlrqfdpuedeaojvmnzyzfvbjusqvujr
txtcdblfsbtgvrykdsttaybdyehpdnwdopriodefoaqgzyxummwmpisduffanwnknqbpcxtxtvwgmpglpzxzsryncvveqoeyxtnc
 
  • Like
Reactions: frogboy and LabZero
I

illumination

Smart screen is nothing more then a reputation service, meaning if not enough people world wide have this file, or a new version number is out it does not recognize, it will be flagged. Smartscreen flags Microsofts own tools from sysinternals :rolleyes: That they bought out some time ago..
 

XhenEd

Level 28
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Mar 1, 2014
1,708
Good for you all that SmartScreen is showing that it's working (at least you find it annoying). :D
I only felt its presence in the past when there was no internet and it would say that SmartScreen couldn't verify an app because it couldn't connect to the internet. :D
I'm not sure now if it's working in my laptop's system because there's no single blocking coming from it. :D
 
L

LabZero

Thanks for the heads up!!:)
Here are the details of the certificate:
caauichmjnxikkakmzpuagdsnxvnjcliydkynjisiwyvjjrlmzpixheoqxjadeclanarbdlrqfdpuedeaojvmnzyzfvbjusqvujr
txtcdblfsbtgvrykdsttaybdyehpdnwdopriodefoaqgzyxummwmpisduffanwnknqbpcxtxtvwgmpglpzxzsryncvveqoeyxtnc
Of course, the certificate is valid and the problem isn't Eset installer, the fact is that Windows 10 adds special metadata to any files downloaded from the Internet and these metadata, that Windows adds to the file, store information about the file source. The system can show the notice of protection through SmartScreen that warning the user that the executable you downloaded is not signed and that can be insecure.
So the problem may be related to the management of this metadata from Windows side, causing false alarms.
 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
Maybe a bug? Because smartscreen uses reputation and sometimes when there is insufficient information to prove the validity hence turned out to be unrecognized rather malicius which a different side of story.
 

Malakke

Level 5
Verified
Well-known
Jan 29, 2013
221
Really is something wrong with Smartscreen. Is not only ESET... I've downloaded Kaspersky Internet Security 2016 MR1 and Auslogic Defrag portable and same behaviour: blocked.
 
  • Like
Reactions: frogboy
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top