Get answers and solutions, initiate discussions, and connect with experts globally
Hello, I'm currently testing Withsecure EDR with ransomware. The solution works well (my files are not altered), but the ransomware leaves an encrypted duplicate next to my file (files .psr, as shown in the screenshot below). I attempted to find a way to properly remove all the .psr files using the "Remediation" > "Delete…
Hello, with F-secure 15.30, I used fspm-definitions-update-tool to download the updates and I installed them offline with fsaua-update.exe. This worked very well. Since migrating to WithSecure 16.01, I've been using the new version of fspm-definitions-update-tool, which also works well. However, the new fsaua-update_32.exe…
Why are quarantined tar files being detected as malware during scans? This issue has been occurring with multiple files since yesterday. The file is located at the following path. Trojan-Downloader:W97M/Dridex.X|None|On_demand_scanner.file_infection.nothing|C:\ProgramData\F-Secure\Quarantine\Repository\TAR\00000001.tar[1]…
Hi, We've installed WithSecure™ Elements Agent for Computers on multiple iMac computers, but because of an error in the activating of new license, we didn't have the opportunity to add the license key. Is there a possibility to apply the license throught MacOS Terminal? We can access the terminal of the iMac with Remote…
Hi, i'm managing a private cloud solution for provisioning virtual machines and related services. This uses mostly API-Calls and Scripts to different infrastructure services (Virtualization, Networking, User Management, Backup etc.). We would like to include an API-Connection to Policy Manager 16 to automatically remove…
Issue: Elements portal's Security Events page shows that "OfficeClickToRun.exe" was blocked from changing the "fshoster64.exe" process , whereas "fshoster64.exe" can be any WithSecure service is generated. Will selecting acknowledge allow the specific process to run? Or we still need to do manual whitelisting or exclusion?…
Issue: How to reset two factor authentication (2FA) for a WithSecure Business Account (Elements, Partner Portal, eService Portal) user account. Example scenarios: * User has a new mobile device and wants to move or transfer the authenticator to the new device * Device that had the multi factor authentication (MFA)…
Issue: Getting an error of "Your login to WithSecure™ Partner Portal failed. Please try using a different browser, or you can open a support ticket at: https://www.withsecure.com/en/support; when logging into Partner Portal. Resolution: This error message appears typically when user has an existing WithSecure user account,…
Issue: WithSecure Elements Endpoint Detection and Response (EDR) detects a safe application (e.g. an in-house application). How to whitelist the detection? Resolution: You can close the Broad Context Detection (BCD) as "Accepted behavior", to create suppression rule that can accept the behavior of a user or a process. To…
Issue: When an WithSecure endpoint product is installed on a computer or server, there is high CPU or memory (RAM) usage and applications are experiencing performance issues. The connectivity of some applications can also be slow or blocked completely. Issue affects all WithSecure clients: * Elements Endpoint Protection…
Issue: Real-time scanning or DeepGuard has detected a file to be malicious. How to submit a sample file to Virus labs to find out if it is a false positive? What if a possibly malicious file has not been detected, how to submit a sample file to virus labs to find out if it is a false negative? Resolution: If you suspect…
It looks like you're new here. Sign in or register to get started.