Advice Request Has Windows "SmartScreen" Gone mad??!!

Please provide comments and solutions that are helpful to the author of this topic.
Status
Not open for further replies.

Venustus

Level 59
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Forum Veteran
Dec 30, 2012
4,806
1
37,077
5,788
58
Sydney
Eset "Live installer" blocked by "SmartScreen",or maybe we should call it "ParanoidScreen":p:p
How on earth can this be an unrecognised app?
I am thinking it's because it is the online rather than offline installer??

Thanks!!:)

rvuovwspexqmwekfubsgcazhiqrlpuexykefcjkguompikjjewcquitgfakyyhkzvhcqkwtfsixtwcfsvisiodnzmwudncdddpvd


VT:
Antivirus scan for 61278e63acfb97f05982704da3e8c04768c349523f56e133cc415a2be34be3b0 at 2016-02-09 21:03:12 UTC - VirusTotal
 
that happened too, when Im testing webroot. SmartScreen is turned off, dont know why it keep block all files....
Same here!!
Maybe a bug of some sort??
 
  • Like
Reactions: frogboy
It seems there are problems with the digital signature authentication of Eset. It allows you to verify the publisher of a file and that the file has not been changed since it was digitally signed.
If the file does not have a valid digital signature, it there is no way to be sure that it comes from the source declared or that it has been tampered with (possibly by a malware) since it was published.
Probably there is a problem in the Smartscreen filter authentication process (Unknown Publisher).
 
It seems there are problems with the digital signature authentication of Eset. It allows you to verify the publisher of a file and that the file has not been changed since it was digitally signed.
If the file does not have a valid digital signature, it there is no way to be sure that it comes from the source declared or that it has been tampered with (possibly by a malware) since it was published.
Probably there is a problem in the Smartscreen filter authentication process (Unknown Publisher).
Thanks for the heads up!!:)
Here are the details of the certificate:
caauichmjnxikkakmzpuagdsnxvnjcliydkynjisiwyvjjrlmzpixheoqxjadeclanarbdlrqfdpuedeaojvmnzyzfvbjusqvujr
txtcdblfsbtgvrykdsttaybdyehpdnwdopriodefoaqgzyxummwmpisduffanwnknqbpcxtxtvwgmpglpzxzsryncvveqoeyxtnc
 
  • Like
Reactions: frogboy and LabZero
Smart screen is nothing more then a reputation service, meaning if not enough people world wide have this file, or a new version number is out it does not recognize, it will be flagged. Smartscreen flags Microsofts own tools from sysinternals :rolleyes: That they bought out some time ago..
 
Good for you all that SmartScreen is showing that it's working (at least you find it annoying). :D
I only felt its presence in the past when there was no internet and it would say that SmartScreen couldn't verify an app because it couldn't connect to the internet. :D
I'm not sure now if it's working in my laptop's system because there's no single blocking coming from it. :D
 
Thanks for the heads up!!:)
Here are the details of the certificate:
caauichmjnxikkakmzpuagdsnxvnjcliydkynjisiwyvjjrlmzpixheoqxjadeclanarbdlrqfdpuedeaojvmnzyzfvbjusqvujr
txtcdblfsbtgvrykdsttaybdyehpdnwdopriodefoaqgzyxummwmpisduffanwnknqbpcxtxtvwgmpglpzxzsryncvveqoeyxtnc
Of course, the certificate is valid and the problem isn't Eset installer, the fact is that Windows 10 adds special metadata to any files downloaded from the Internet and these metadata, that Windows adds to the file, store information about the file source. The system can show the notice of protection through SmartScreen that warning the user that the executable you downloaded is not signed and that can be insecure.
So the problem may be related to the management of this metadata from Windows side, causing false alarms.
 
Maybe a bug? Because smartscreen uses reputation and sometimes when there is insufficient information to prove the validity hence turned out to be unrecognized rather malicius which a different side of story.
 
Really is something wrong with Smartscreen. Is not only ESET... I've downloaded Kaspersky Internet Security 2016 MR1 and Auslogic Defrag portable and same behaviour: blocked.
 
  • Like
Reactions: frogboy
Status
Not open for further replies.