Nod32 or Avast?!?

  • Thread starter Thread starter skia
  • Start date Start date
skia said:
Nod32 or Avast?!? and why?
Click to expand...
Actually, I use both. NOD32 has the best VB100 rating of any AV and it
is easy on resources. It doesn't scan outgoing E-Mail, so I use Avast
with everything turned off except scanning of outgoing E-mail. And I
can use Avast to scan manually if I am worried about anything.

jimbo
 
jimbo said:
Actually, I use both. NOD32 has the best VB100 rating of any AV and it
is easy on resources. It doesn't scan outgoing E-Mail, so I use Avast
with everything turned off except scanning of outgoing E-mail. And I
can use Avast to scan manually if I am worried about anything.

jimbo
Click to expand...

I've used NOD32 for four years. Just tried sending myself the test
virus eicar.com, which I keep handy on my PC. NOD32 wouldn't let me
attach it. So then I tried sending myself a zipped version of it,
eicar.zip, which I attached with no problem, and sent to one of my other
emails addresses. Sending no problem, as you say, outgoing mail wasn't
scanned. But then when I received the mail, NOD32 scanned the ZIP file
and rejected it as having a virus.

s.
 
jimbo said:
Actually, I use both. NOD32 has the best VB100 rating of any AV and it
is easy on resources. It doesn't scan outgoing E-Mail, so I use Avast
with everything turned off except scanning of outgoing E-mail. And I can
use Avast to scan manually if I am worried about anything.

jimbo
Click to expand...

NOD32 didn't detect EICAR in zipped form. Does it not scan archives.
Or is it intentionally only triggering on uncompressed EICAR?

michael
 
xmp said:
NOD32 didn't detect EICAR in zipped form. Does it not scan archives. Or
is it intentionally only triggering on uncompressed EICAR?

michael
Click to expand...

Nope, NOD32 has always detected compressed EICAR virus for me.

jimbo
 
someone said:
I've used NOD32 for four years. Just tried sending myself the test
virus eicar.com, which I keep handy on my PC. NOD32 wouldn't let me
attach it. So then I tried sending myself a zipped version of it,
eicar.zip, which I attached with no problem, and sent to one of my other
emails addresses. Sending no problem, as you say, outgoing mail wasn't
scanned. But then when I received the mail, NOD32 scanned the ZIP file
and rejected it as having a virus.

s.
Click to expand...
Actually, I think NOD32 prevents outgoing E-Mail viruses by the method
you describe. But, I just feel better knowing that the outgoing E-Mail
has been scanned.

jimbo
 
jimbo said:
Nope, NOD32 has always detected compressed EICAR virus for me.
Click to expand...

See my earlier posting. NOD32 doesn't detect the outgoing compressed
virus (so your recipients had better have a good AV themselves), but it
does detect the incoming compressed virus.

s.
 
someone said:
See my earlier posting. NOD32 doesn't detect the outgoing compressed
virus (so your recipients had better have a good AV themselves), but it
does detect the incoming compressed virus.

s.
Click to expand...

I activated runtime packers and scan all files options in AMON. I can't
get AMON to trigger on zip eicar download but it triggers on com eicar.
I activated IMON and it triggers on both zip and com. I did not test
POP and IMAP, and I'm using beta.

I'll remember to keep IMON on. :-)

michael
 
someone said:
archives. Or



See my earlier posting. NOD32 doesn't detect the outgoing compressed
virus (so your recipients had better have a good AV themselves), but it
does detect the incoming compressed virus.

s.
Click to expand...

OK, thanks for the clarification. I know I have a compressed EICAR
somewhere. I will give it a try tomorrow.

jimbo
 
jimbo said:
OK, thanks for the clarification. I know I have a compressed EICAR
somewhere. I will give it a try tomorrow.

jimbo
Click to expand...

By the bye, unexpectedly I had an email from NOD today (first one ever)
saying that they have a new module released called DMON, which "provides
Microsoft Office applications with antivirus support [etc., etc]". And
includes "integration of advanced heuristics into the on-demand scanner
and improved trojan cleaning procedures".

Funny thing is, it's a smaller d'load than their normal one. I've
written to them to ask for more info.

s.
 
someone said:
By the bye, unexpectedly I had an email from NOD today (first one ever)
saying that they have a new module released called DMON, which "provides
Microsoft Office applications with antivirus support [etc., etc]". And
includes "integration of advanced heuristics into the on-demand scanner
and improved trojan cleaning procedures".

Funny thing is, it's a smaller d'load than their normal one. I've
written to them to ask for more info.

s.
Click to expand...

It's in the beta, although I don't use DMON feature.

I'd like to find an AV that blocks VBS and Javascript exploits. AVG
seems to have some limited blocking. Perhaps this is left to the
personal firewall instead.

michael
 
someone said:
By the bye, unexpectedly I had an email from NOD today (first one ever)
saying that they have a new module released called DMON, which "provides
Microsoft Office applications with antivirus support [etc., etc]". And
includes "integration of advanced heuristics into the on-demand scanner
and improved trojan cleaning procedures".

Funny thing is, it's a smaller d'load than their normal one. I've
written to them to ask for more info.

s.
Click to expand...

It's in the beta, although I don't use DMON feature.

I'd like to find an AV that blocks VBS and Javascript exploits. AVG
seems to have some limited blocking. Perhaps this is left to the
personal firewall instead.

michael
Click to expand...

NOD32 v 2.12 is not a beta anymore. It has many new features.


Kaspersky Personal Antivirus has an excellent script blocker module.
www.avp.com

Jari
 
By the bye, unexpectedly I had an email from NOD today (first one ever)
saying that they have a new module released called DMON, which "provides
Microsoft Office applications with antivirus support [etc., etc]". And
includes "integration of advanced heuristics into the on-demand scanner
and improved trojan cleaning procedures".

Funny thing is, it's a smaller d'load than their normal one. I've
written to them to ask for more info.
Click to expand...
In addition to that, when I download a file in Mozilla, NOD32 pops up a
window just above the systray, shows a download and then gives an OK.
 
NOD32 v 2.12 is not a beta anymore. It has many new features.
Click to expand...

Do current versions (2.000.9) update automatically, or does it have to
be downloaded and installed manually?
 
Do current versions (2.000.9) update automatically, or does it have to
be downloaded and installed manually?
Click to expand...

Better to download from their site. Many new features Uninstall old,
install new.
 
xmp said:
someone said:
By the bye, unexpectedly I had an email from NOD today (first one ever)
saying that they have a new module released called DMON, which "provides
Microsoft Office applications with antivirus support [etc., etc]". And
includes "integration of advanced heuristics into the on-demand scanner
and improved trojan cleaning procedures".

Funny thing is, it's a smaller d'load than their normal one. I've
written to them to ask for more info.

s.
Click to expand...


It's in the beta, although I don't use DMON feature.

I'd like to find an AV that blocks VBS and Javascript exploits. AVG
seems to have some limited blocking. Perhaps this is left to the
personal firewall instead.

michael
Click to expand...
You can try Script Sentry from here.

http://www.jasons-toolbox.com/programs.asp?Program=Script Sentry

It's freeware for personal use, I expect you can buy for corporate.

Not strictly an AV tool, but does what you wish.

Ian
 
My 1.8 installation did not update automatically since Friday (the
release date listed for 2.12).

At the moment, it appears so to me.
Better to download from their site. Many new features Uninstall old,
install new.
Click to expand...

<http://www.nod32.com/scriptless/support/ans/v1tov2.htm> is
"Reinstallation of NOD32 version 2 (v2) over the previous version
(v1)". For an individual user, they include

3. Uninstalling the currently installed NOD32 version 1 is not
necessary - just run the installation package of NOD32 v2,
which you have already downloaded (by double-clicking the
downloaded file)

For a local mirror, it appears that it automatically updates too.

NOTE: you should read the URL above before upgrading. There's a step
that needs to be done "if the e-mail accounts have been entered in the
NOD32 v1 to the NOD32 for POP3 e-mail filter manually".
 
Tim McDaniel said:
My 1.8 installation did not update automatically since Friday (the
release date listed for 2.12).


At the moment, it appears so to me.


<http://www.nod32.com/scriptless/support/ans/v1tov2.htm> is
"Reinstallation of NOD32 version 2 (v2) over the previous version
(v1)". For an individual user, they include

3. Uninstalling the currently installed NOD32 version 1 is not
necessary - just run the installation package of NOD32 v2,
which you have already downloaded (by double-clicking the
downloaded file)

For a local mirror, it appears that it automatically updates too.

NOTE: you should read the URL above before upgrading. There's a step
that needs to be done "if the e-mail accounts have been entered in the
NOD32 v1 to the NOD32 for POP3 e-mail filter manually".
Click to expand...

I've had NOD32 for four year now, it's a great product, but I can't find
out which version I have. I update my virus defs several times a week,
but there seems to be no way to find out what version I have of the main
module. There is no Help > About information. How do I find out my
version?

Thanks, s.
 
Back
Top