Alternative to Mcafee Enterprise

  • Thread starter Thread starter asdf
  • Start date Start date
A

asdf

running mcafee 8 enterprise on my windows 2000 pro.
Great program and catches nearly everything I come up against.
But it's incredibly slow to the point where I have to disable
on-access scan in order to be able to use my machine. This
sort of defeats the purpose of having scanner at all.

What other programs there which have good track record
of catching viruses, spyware, coming with new defs on daily basis
as well as being easy on system resources?

My system's specs are as follows:
OS: Win2000pro
1Gb RAM
system installed on 80Gb WD HD.
ASUS p4pe mobo.
2.4 GHZ intel.

thanx
 
running mcafee 8 enterprise on my windows 2000 pro.
Great program and catches nearly everything I come up against.
But it's incredibly slow to the point where I have to disable
on-access scan in order to be able to use my machine. This
sort of defeats the purpose of having scanner at all.

What other programs there which have good track record
of catching viruses, spyware, coming with new defs on daily basis
as well as being easy on system resources?

My system's specs are as follows:
OS: Win2000pro
1Gb RAM
system installed on 80Gb WD HD.
ASUS p4pe mobo.
2.4 GHZ intel.

thanx
Click to expand...
I've got half that RAM and a slower processor on my 2000 box
and VirusScan8enterprise is fine for me. How do you have it
configured? I've seen it slow down a lot if you let it watch
network drives (Novell network here and I have a lot of
mappings). And I have 'scan inside archives' off for the on-
access scan, but on for the on-demand scan.

Thought: is it running a boot-time scan? That's often set to be
invisible, and can make the machine sluggish. Check in the
Console. I switch the boot-time scan off and rely on the on-
access scan.

Also do you have VirusScan patched? And when did you last clean
up your disk? (delete temp files, defrag, etc)
 
running mcafee 8 enterprise on my windows 2000 pro.
Great program and catches nearly everything I come up against.
But it's incredibly slow to the point where I have to disable
on-access scan in order to be able to use my machine. This
sort of defeats the purpose of having scanner at all.

What other programs there which have good track record
of catching viruses, spyware, coming with new defs on daily basis
as well as being easy on system resources?
Click to expand...

Kaspersky version 6 should soon be out of Beta:

http://www.kaspersky.com/beta
My system's specs are as follows:
OS: Win2000pro
1Gb RAM
system installed on 80Gb WD HD.
ASUS p4pe mobo.
2.4 GHZ intel.
Click to expand...

I've tested KAV version 6 Betas on my Win 2K PC which has far less
resources than what you have:

1.6 ghz AMD cpu
256 meg RAM

and after a initial drive scan it was as if the realtime monitor(s)
weren't even there. KAV generates a checksum on files it scans so it
doesn't waste time scanning them again. Applications start
quickly and there is minimal waste of resources.

KAV has arguably the best file scanner, updating scheme, and fast
reaction time of all , and with version 6 you have proactive
protection as well. That is, it has capabilities for alerting users to
new and "unknown" malicious code, for one thing. It also has
a new web surfing protection capability.

If you have some experience and aren't afraid of Beta software,
I suggest giving one of the v6 Betas a shot. They are pretty far
along and shouldn't give you any problems.

Art

http://home.epix.net/~artnpeg
 
Art said:
I've tested KAV version 6 Betas on my Win 2K PC which has far less
resources than what you have:

1.6 ghz AMD cpu
256 meg RAM

and after a initial drive scan it was as if the realtime monitor(s)
weren't even there. KAV generates a checksum on files it scans so it
doesn't waste time scanning them again. Applications start
quickly and there is minimal waste of resources.
Click to expand...

Art,

I've heard good things about KAV 6 beta in terms of being much lighter
on resources. What's the memory usage when _not_ doing an on-
demand/scheduled scan or an update?

TIA
 
Art,

I've heard good things about KAV 6 beta in terms of being much lighter
on resources. What's the memory usage when _not_ doing an on-
demand/scheduled scan or an update?
Click to expand...

Sorry, I don't have either KIS or KAV Beta installed right now. It
probably varies based on the modules you've selected to be active
and whether you're using KIS or KAV. Try it and see :)

Art

http://home.epix.net/~artnpeg
 
Befunge Sudoku said:
I've got half that RAM and a slower processor on my 2000 box
and VirusScan8enterprise is fine for me. How do you have it
configured? I've seen it slow down a lot if you let it watch
network drives (Novell network here and I have a lot of
mappings). And I have 'scan inside archives' off for the on-
access scan, but on for the on-demand scan.
Click to expand...

Yes scan inside archives i enabled on access scan.
Thought: is it running a boot-time scan? That's often set to be
Click to expand...

Not sure about boottime scan but it's slow not just when i start using my
system.
invisible, and can make the machine sluggish. Check in the
Console. I switch the boot-time scan off and rely on the on-
access scan.

Also do you have VirusScan patched? And when did you last clean
up your disk? (delete temp files, defrag, etc)
Click to expand...

all the latest defs are installed and its set to download all the latest
stuff on a daily basis.
I do set my Mcafee to the most secure settings. everything that it can scan
is scanned. Would
you say the default settings are the best?
 
what other setting do you have enabled/disabled to optimize macafee
performance?
Is it really safe to stop AV from scanning inside archives. Or is reasoning
here
that nothing can be done by viruse while it's archived anyway and for it to
be
scanned when it's extracted?
 
tried KAV 6. tried doing systems can. Much slower scan than macafee
Im afraid. took 5 minutes to scan 1000 files. Or is it because it was the
first
scan?
 
Yes scan inside archives i enabled on access scan.
Click to expand...

I have 'scan inside archives' OFF for the on-access scan - but
that would only affect it when you accessed an archive anyway,
so it's not that.
Not sure about boottime scan but it's slow not just when i start using my
system.
Click to expand...

The boot-time scan could be taking up to an hour, of course.
all the latest defs are installed and its set to download all the latest
stuff on a daily basis.
Click to expand...

Even when you tell it to get everything, it doesn't always get
the patches. If you go to the About section, do you have engine
4400 and patch level 10 or 11?
I do set my Mcafee to the most secure settings. everything that it can scan
is scanned. Would
you say the default settings are the best?
Click to expand...

Mine is set to pretty much do everything - except network
drives, so check that: can be a problem sometimes.

What else do you have running fulltime?
My VirusScan gets along OK with ZoneAlarm Pro and Microsoft
AntiSpyware running. What's your email client? I've got
Outlook2003 and it seems OK with that, but it's using IMAP not
POP3. I also have a couple of Firefox windows open most of the
time and the Gravity 2.6 news client is usually loaded. None of
this seems to cause trouble.
 
asdf said:
Is it really safe to stop AV from scanning inside archives.
Click to expand...

Only if you don't run a program that allows decompression and execution
on the fly of the archived content. The Java Virtual Machine (JVM) might
do this if I'm not mistaken.
 
Only if you don't run a program that allows decompression and execution
on the fly of the archived content. The Java Virtual Machine (JVM) might
do this if I'm not mistaken.
Click to expand...

Nowdays, archive scanning should be enabled because of compressed
"executeable" files such as Windows Help CHM files. If Java is
installed, there is another file type along the same lines (compressed
and possibly dangerous, but I forget which) which will not be scanned
unless archive scanning is enabled. That's why Kaspersky (and I
suppose some others) now scan archives by default. In fact "All Files"
is the default safest setting now, unlike back in the dark ages when
scanning all files was considered "dumb" (Frisk and F-Prot :))

This situation is no doubt the main reason Kaspersky uses checksumming
to avoid re-scanning files already scanned. It's so important now to
scan _most_ all files that some method of speeding up scanning is
required. I say "most" all files since I suspect a certain amount of
"smart" scanning may be done as well where the file structure is
examined and some files _may_ not be scanned by default even with a
"All Files" setting ... I'm not sure.

Terminology and techniques are changing. On my old version 3.5 of
KAV, there is a "all files" and a "smart", and then a separate
"archives" settings. With "all files", you can use your own exclude
mask to avoid scanning .TXT and .JPG and the like. With "smart"
scanning, the scanner avoids scanning quite a number of files based on
their structure. Personally, I use the combination of "smart" plus
"archive" with this old version. But if I were to use its realtime
monitor, having archive scanning enabled slows down the loading
of applications considerably. Since archive scanning is important,
I'd use version 6 of KAV if I was interested in realtime scanning.
With v6 there's no slowdown problem at all after the first scan
of the drive.

Art

http://home.epix.net/~artnpeg
 
Befunge Sudoku said:
I have 'scan inside archives' OFF for the on-access scan - but
that would only affect it when you accessed an archive anyway,
so it's not that.

The boot-time scan could be taking up to an hour, of course.
Click to expand...

Is you boottime scan off?
Even when you tell it to get everything, it doesn't always get
the patches. If you go to the About section, do you have engine
4400 and patch level 10 or 11?
Click to expand...

scan engine is 4400
patch versions is none. Where do i download the updated ones.?
Mine is set to pretty much do everything - except network
drives, so check that: can be a problem sometimes.
Click to expand...

Have no network drives to scan
What else do you have running fulltime?
My VirusScan gets along OK with ZoneAlarm Pro and Microsoft
AntiSpyware running. What's your email client? I've got
Click to expand...

Outlook.
using OE for newsgroups
 
ok ive tried KIS 2006 beta and it's great. however i have one question about
it.
I am running ftp server on my machine and with sygate firewall it worked
great.
My router would forward traffic to my machine and sygate would let it
through.
However KIS is not allowing it for some reason.

the rule i created in KIS is:
Allow inbound/outbound TCP connection where local port is xxxx.

I can connect to the ftp server but the files are not listed.

the error that ftp client gives me is:

Error 425 Cant open data connection
could not retrieve directory listing.
 
ok ive tried KIS 2006 beta and it's great. however i have one question about
it.
I am running ftp server on my machine and with sygate firewall it worked
great.
My router would forward traffic to my machine and sygate would let it
through.
However KIS is not allowing it for some reason.

the rule i created in KIS is:
Allow inbound/outbound TCP connection where local port is xxxx.

I can connect to the ftp server but the files are not listed.

the error that ftp client gives me is:

Error 425 Cant open data connection
could not retrieve directory listing.
Click to expand...

I suggest that you post your questions on the Kaspersky Beta forum.
The url should be in KIS, maybe under Help. The developers and
knowledgeable ones are there.

You might consider using KAV plus Sygate instead of KIS since Sygate
worked ok for you. I'm really stuck on Sygate's excellent traffic log.
Dunno if KIS has one like it. Never paid attention to it when I took a
look at KIS. Looks like Sygate is/will be available through Simtel and
other download sources.

Art

http://home.epix.net/~artnpeg
 
any idea where i can download patches for my mcafee enterprise 8?
Click to expand...

I forget where they are a day after every time I go and find
them ;->
You need to use your Prime Portal login, iirc. Somewhere on the
McAfee support forums there'll be a link.
 
Back
Top