SpIDerGuard v4.33 fixed?

[Blackcat]

The service upgrade to version 4.33 can be obtained to-day through the normal internal update procedure through the program.

After deselecting "Scan running programs and modules" in the SG settings I am no longer seeing any high CPU usage at all.

So on THIS machine everything now seems okay :P

Has this update solved the problems for other Dr Web users who had difficulties with this new version?

[Benvan45]

{QUOTE-> The service upgrade to version 4.33 can be obtained to-day through the normal internal update procedure through the program.

After deselecting "Scan running programs and modules" in the SG settings I am no longer seeing any high CPU usage at all.

So on THIS machine everything now seems okay :P

Has this update solved the problems for other Dr Web users who had difficulties with this new version? <-QUOTE}


Thanks for your update Blackcat, I just read the Dr. Web forum about this and I'll re-install Dr. Web tomorrow just to see how things are. I'm glad you see a big difference already, so......let's hope everything is ironed out smoothly!

'Good luck! ;)

Putin

[fredra]

Hi Blackcat
Thanks for the heads up.
It shows SPIDERGUARD uploaded version 4.33.0.10173 (have no idea about x.xx.0.10180)
I will do some testing and let putin and the others know if the "problems" are still in this release.
Cheers :)

[bellgamin]

For those using WinME, following DRW information is current (?) as of 10/24/2005...
Engine 4.33.0.09273 2005-09-27
Agent 4.33.0.10170 2005-10-17
Scanner 4.33.0.09293 2005-09-29

P.S.-I haven't used my WinXP partition in ages. I plan to *bite the bullet* on replacing my WinME-only programs when Vista arrives.

[Benvan45]

{QUOTE-> For those using WinME, following DRW information is current (?) as of 10/24/2005...
Engine 4.33.0.09273 2005-09-27
Agent 4.33.0.10170 2005-10-17
Scanner 4.33.0.09293 2005-09-29

P.S.-I haven't used my WinXP partition in ages. I plan to *bite the bullet* on replacing my WinME-only programs when Vista arrives. <-QUOTE}

Using XP Pro:

Spider Guard Version: 4.33.0.10173
Engine: 4.33.0.09273
Scanner: 4.33.0.09293

Hope all these figures match with all users at this moment.

Good luck ! ;)

Putin

[Benvan45]

Just installed and configured after the service release and this is my comment:

Copied and deleted 30 Mb exe file again. CPU went up to 100% for a short time, but still 100%. I don't care for the CPU peak, but it is the slowdown that bothers me. It took 18 seconds!!!

See screendump:

168074

Still find slowdown, a lot less than before, but I think it's still NO GOOD!
Blackcat had no trouble at all, but for me this remains a riddle and removed the doctor again, but now permanently for sure. Too bad.
I am now comparing this new behaviour with Nod32 and find this unacceptable. Never seen this kind of trouble with 4.32b I have used with great pleasure.

Hope other users have better results after this service release.

Good luck ! :-\

Putin

[Bob]

{QUOTE-> Using XP Pro:

Spider Guard Version: 4.33.0.10173
Engine: 4.33.0.09273
Scanner: 4.33.0.09293

Hope all these figures match with all users at this moment.

Good luck ! ;)

Putin <-QUOTE}

With me copying a 59 mb file takes ages; nothing has changed.
I think something is wrong with the update.
If I look at the forum:
http://forum.drweb.com/viewtopic.php?t=1941
it looks to me the Spiderguard version should be:

=========================================
SpIDer Guard for Windows NT/2000/XP v4.33
Copyright (c) Igor Daniloff, 1992-2005
4.33.0.10180
=========================================

and not: 4.33.0.10173

Bob

[Benvan45]

{QUOTE-> With me copying a 59 mb file takes ages; nothing has changed.
I think something is wrong with the update.
If I look at the forum:
http://forum.drweb.com/viewtopic.php?t=1941
it looks to me the Spiderguard version should be:

=========================================
SpIDer Guard for Windows NT/2000/XP v4.33
Copyright (c) Igor Daniloff, 1992-2005
4.33.0.10180
=========================================

and not: 4.33.0.10173

Bob <-QUOTE}

You are so right, the upgrade is no good! Like you said, it should be 4.33.0.10180, so where is it?

I even installed the latest download, so what else is there to do?

This is what I mean, this is no way to frig around with a great product like it's always been!

Who else still has slowdowns?

:( Putin

[Mongol]

I was prompted to do a reboot with my update and afterward I noticed one or two minor changes with a new save paused state button on my control panel. Checking the Spidernt log I show #4.33.0.10180. I wonder if this fixes Processguard yet??. It would be nice to see a change log...:-\ :o ::) :)

[shorty1]

Where are you pulling that version number from? Do this: open the DrWeb program folder and find then open spidernt.log file and check the version listed there.

[Mongol]

So far so good with the updated Spiderguard. I noticed they added the little information bubble window when the guard updates, a little idea they got from NOD I guess. Processguard still is not working as I found out through trial and lockup. Had to remove it in safemode...::) ;D

[Benvan45]

{QUOTE-> So far so good with the updated Spiderguard. I noticed they added the little information bubble window when the guard updates, a little idea they got from NOD I guess. Processguard still is not working as I found out through trial and lockup. Had to remove it in safemode...::) ;D <-QUOTE}

Just don't understand why I never saw these changes after a complete fresh install with de upgraded Spider Guard yesterday!!!!!

There's something spooky going on here with the doctor!!!!

Good luck ! ;)

Putin

[Blackcat]

The new service upgrade is now available as part of the full download of v.4.33 from the main site.

SpIDer Guard for Windows NT/2000/XP v4.33
Copyright (c) Igor Daniloff, 1992-2005
4.33.0.10180

My high CPU usage when changing the SpiderGuard settings has now gone and the program now appears to be up to its old fast speed.

However, one problem I have is in the ACTIONS of the SpiderGuard settings. I can change permanently the default settings of the Infected and Suspicious Objects but NOT the Infected Compound Objects and Malware. When I change the settings of the last 2 , select Apply and then Okay, they always revert back to the default settings.

The new pause button which Mongol referred to was previously available in the last NT version so I am presuming he uses WIN98/Me. But like putin, I have yet to see the “new update balloons.”

However, I don’t like the way the updater now minimizes itself to the taskbar during updating.

There are apparently some bugs left in the program, including putin's one of deleting large files, and these can be seen in the bug tracker (http://bugs.drweb.com/login_page.php) program available for users of Dr Web.

Further, forum support is getting better. (http://forum.drweb.com/viewtopic.php?t=1941)

[Technodrome]

After spiderNT update, DrWeb works just like it used to. No problems here at all. ;)


tD

[Technodrome]

{QUOTE->
But like putin, I have yet to see the “new update balloons.”
<-QUOTE}
I've seen it last night and this morning so its there. Maybe you missed it or turned this (XP/2000) feature off.?


tD

[Blackcat]

{QUOTE-> I've seen it last night and this morning so its there.tD <-QUOTE}
Have just seen one now 8) :D :-X

[Benvan45]

{QUOTE-> After spiderNT update, DrWeb works just like it used to. No problems here at all. ;)


tD <-QUOTE}

Are you not having any slowdown when copying/deleting large exe files? I always use the same exe file for testing, 30 Mb.
I still had the same trouble yesterday, but it didn't take as long as before the upgrade.
Please let me know!

;) Putin

[Mongol]

{QUOTE-> The new pause button which Mongol referred to was previously available in the last NT version so I am presuming he uses WIN98/Me. But like putin, I have yet to see the “new update balloons.” <-QUOTE}

I run XP here but never noticed that button til this update, I guess that explains why I wear glasses eh?. I did get an email from DrWEB acknowledging they are looking into the Processguard conflict from Pavel Ershov so that fix is hopefully in the works. Not a real big issue though since Spysweeper has a limited sort of Process Guard to it...:o Otherwise the old Doctor is becoming a more polished bit of software all around.

[Technodrome]

{QUOTE-> Are you not having any slowdown when copying/deleting large exe files? I always use the same exe file for testing, 30 Mb.
I still had the same trouble yesterday, but it didn't take as long as before the upgrade.
Please let me know!

;) Putin <-QUOTE}

I just deleted 38 MB exe file. No slow downs.


tD

[Bob]

Downloaded Dr Web half an hour ago.
Updated.
Copying a 59 Mb file still takes ages.
Bob

[Benvan45]

{QUOTE-> Downloaded Dr Web half an hour ago.
Updated.
Copying a 59 Mb file still takes ages.
Bob <-QUOTE}

See.....what on earth are we doing wrong? Technodrome has no problem with it and there are others, that don't. There are a few of us having this slowdown and I just wonder what we do different!

Are more users willing to copy & delete a large exe file and state here if it took a long time or what? A screendump would be great, like Technodrome did.
I am very curious.

Good luck ! ;)

Putin

[Benvan45]

{QUOTE-> I just deleted 38 MB exe file. No slow downs.


tD <-QUOTE}

Thanks for the screendump, would you be so kind to post your configuration?

There must be a reason for the different experiences.....and I really would love to get my finger behind that.

My screendump shows 18 seconds for deleting 30 Mb..........that's what I mean.

Thanks in advance!

;) Putin

[Firefighter]

I can't find a proper "en-spider" help file. That help file I've got says nothing about that "enhanced protection mode" in SpIDer Guard Scan options. Just curious, how does that "enhanced protection mode" add your protection?

Best regards,
Firefighter!

[Technodrome]

{QUOTE-> Thanks for the screendump, would you be so kind to post your configuration?

There must be a reason for the different experiences.....and I really would love to get my finger behind that.

My screendump shows 18 seconds for deleting 30 Mb..........that's what I mean.

Thanks in advance!

;) Putin <-QUOTE}

Default settings with "all files" (file types tab).


tD

[Firefighter]

{QUOTE-> You are so right, the upgrade is no good! Like you said, it should be 4.33.0.10180, so where is it?

I even installed the latest download, so what else is there to do?

This is what I mean, this is no way to frig around with a great product like it's always been!

Who else still has slowdowns?

:( Putin <-QUOTE}It took some time when I understood how DrWeb is naming those new versions of SpIDer Guard.

The "spidernt.log" file looks like this.

================================================================================
SpIDer Guard for Windows NT/2000/XP v4.33
Copyright (c) Igor Daniloff, 1992-2005
4.33.0.10180
================================================================================

When you check the properties of the "spider.sys" file, there you can see also that same version as above. But when you right click the spider icon in taskbar and choose "Control...", you can see an other version of SpIDer Guard.

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> It took some time when I understood how DrWeb is naming those new versions of SpIDer Guard.

The "spidernt.log" file looks like this.

================================================================================
SpIDer Guard for Windows NT/2000/XP v4.33
Copyright (c) Igor Daniloff, 1992-2005
4.33.0.10180
================================================================================

When you check the properties of the "spider.sys" file, there you can see also that same version as above. But when you right click the spider icon in taskbar and choose "Control...", you can see an other version of SpIDer Guard.

Best regards,
Firefighter! <-QUOTE}

It all makes it very misty, as far as I am concerned. If this is what it takes, to see some version ........!! I can imagine, a lot of people get all confused!

;) Putin

[fredra]

{QUOTE-> I can't find a proper "en-spider" help file. That help file I've got says nothing about that "enhanced protection mode" in SpIDer Guard Scan options. Just curious, how does that "enhanced protection mode" add your protection?

Best regards,
Firefighter! <-QUOTE}
Hi FF
I had asked that same question before... http://www.wilderssecurity.com/showthread.php?t=100841&page=3 #52...refer to Putins response in #53 and shortys response in #54
I hope that helps.
Cheers :)

[Bob]

Here is a screendump.
52 sec for a 58 Mb file.
And I even have a WD Raptor harddisk.
Bob

[Firefighter]

{QUOTE-> Hi FF
I had asked that same question before... http://www.wilderssecurity.com/showthread.php?t=100841&page=3 #52...refer to Putins response in #53 and shortys response in #54
I hope that helps.
Cheers :) <-QUOTE}I thought that the protecting of the "drwb32.ini" file was in the miscellaneous section in here.

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> Here is a screendump.
52 sec for a 58 Mb file.
And I even have a WD Raptor harddisk.
Bob <-QUOTE}

Thanks for the screenshot, but indeed it takes a hell of a long time, but it is faster now than before service upgrade.
Keep wondering why Technodrome is not having this problem!

;) Putin

[Firefighter]

{QUOTE-> Hi FF
I had asked that same question before... http://www.wilderssecurity.com/showthread.php?t=100841&page=3 #52...refer to Putins response in #53 and shortys response in #54
I hope that helps.
Cheers :) <-QUOTE}Is the SpIDer Guard "enhanced protection mode" something like this what I found from the "en-spider" help file?

Best regards,
Firefighter!

[Technodrome]

{QUOTE->
Keep wondering why Technodrome is not having this problem!

;) Putin <-QUOTE}

Are you running anything else besides DrWeb (AT or any other security tool)?


tD

[Firefighter]

{QUOTE-> However, one problem I have is in the ACTIONS of the SpiderGuard settings. I can change permanently the default settings of the Infected and Suspicious Objects but NOT the Infected Compound Objects and Malware. When I change the settings of the last 2 , select Apply and then Okay, they always revert back to the default settings.

<-QUOTE}I think that you need to try this again. Uncheck the "Protect Dr.Web configuration file" option first as you can see in my post 29. in here. Just choose the "change" and it will be restored. Look at my settings in my post 67.

http://www.wilderssecurity.com/showthread.php?t=100841&page=3


Best regards,
Firefighter!

[fredra]

Hi FF
The screen shot shown appears to be for 4.32b (I have that help file screen also).
I had "Disable Enchanced Protection Mode" ticked and in "File Types", I had "All Files".
As a test, I removed the tick mark for "Disabe Enchanced Protection Mode" ( I presume that it is now activated) and in "File Types" changed to "By Format" (which I think is the default).
I have not changed anything in the "ini" files, as I need to know what changes affect the overall operation.
The help file has been improved, however, it is still showing 4.32 screen shots.
I will run it in this configuration and see the results.
Cheers :)

[Benvan45]

{QUOTE-> Are you running anything else besides DrWeb (AT or any other security tool)?


tD <-QUOTE}

No, nothing at all!

Putin

[Blackcat]

{QUOTE-> Is the SpIDer Guard "enhanced protection mode" something like this what I found from the "en-spider" help file? <-QUOTE}
I doubt it as kernal protection is only available in non-NT systems.

It may be due to the new "background" scanning of files. There is a Documentation file in the Downloads section which might give some information about this new scanning mode but at the present time it appears to be a dead link. I do wish that they would produce a proper and detailed help-File within the program.

The changes in the new "service upgrade" are now on the main (http://info.drweb.com/show/2687)site.

Putin, do you see the same slowdown on deleting files with just the DEFAULT file settings of SpiDerGuard?

Bob seems to have the same problem as you, whereas other users are seemingly running SG without any problems at all. So at the present time you may decide not to stay with DW. As I stated before, it may simply be a conflict between SG and your software/hardware configuration on YOUR computer.

I have the same problem with F-Prot for Windows; I cannot run the present version because of high CPU usage yet other users report no such problem. Just the role of the dice in some cases.

[shorty1]

Yes, my speculation that enhanced protection mode protected the ini file is incorrect. Sorry, must have had a brain cramp. I only noticed that enhanced protection mode tick box in the control panel a couple days ago. Guess I don't peruse that panel very often. I do recall reading somewhere, and I think Blackcat is on the right track, that enhanced protection involves scanning of certain files at a later time when the computer was "idle" so as to save cpu's. I also recall now of reading there was some problems with Spider Guard's determination of when the computer was idle not always coinciding with the users opinion of the computer being at rest. :)

As for the problem some people are seeing with large files if some of these users would copy/paste the contents of the drweb32.ini file others could take a look and see if anything looked amiss.
Having said that I don't think it is a settings problem but rather it is a conflict and/or a bug with Dr Web.

[Benvan45]

{QUOTE->
Putin, do you see the same slowdown on deleting files with just the DEFAULT file settings of SpiDerGuard?

Bob seems to have the same problem as you, whereas other users are seemingly running SG without any problems at all. So at the present time you may decide not to stay with DW. As I stated before, it may simply be a conflict between SG and your software/hardware configuration on YOUR computer.

I have the same problem with F-Prot for Windows; I cannot run the present version because of high CPU usage yet other users report no such problem. Just the role of the dice in some cases. <-QUOTE}

Yes, the same slowdown with default settings with "all files" checked (file types tab). That's the only thing different.

But I uninstalled Dr. Web again and won't re-install, as I'm happy with Nod32 now and I don't want to put anymore energy in this matter, as I'm totally confused. If it is a conflict between Spider Guard and my soft- hardware, it won't be an easy matter to figure this out. My computer runs like oil with 4.32b, never any problems......nothing changed regarding soft- hardware, but after upgrading to 4.33, hell comes loose. I am convinced for 100%, that it is a bug in 4.33.
The only way to run 4.33 as smooth as 4.32, is to uncheck archive scanning and adding the recycle bins to the excluded section. But again, I don't believe this should be needed.

So, in closing......I'll follow this thread, but won't be able to try things out anymore with Dr. Web as I uninstalled it for the last time.

Hope everything will ever be sorted out!

;) Putin

[Serge Popov]

{QUOTE-> I can't find a proper "en-spider" help file. That help file I've got says nothing about that "enhanced protection mode" in SpIDer Guard Scan options. Just curious, how does that "enhanced protection mode" add your protection?

Best regards,
Firefighter! <-QUOTE}

As was already mentioned, it adds the background scanning feature. There are several factors to take into consideration:

1. Anti-virus must be as secure as possible - scan more, scan deeper, use heuristics, use proactive methods, control access to vital parts of operating system and configuration.
2. Anti-virus is, after all, just a utility program, so it must be light and quiet. It must not steal resources from other programs.
3. It must be simple enough, so you dont have to learn too much about protection and security.

So working modes were invented. As to SpIDer Guard, these are: Smart, RunAndOpen, CreateAndWrite. Smart is the default mode, providing good security for little price. Being a compromise, it has its drawbacks, too. In Smart mode SpIDer Guard would scan only objects what were opened for writing access on local volumes, and all objects on removable and network volumes. It works fine until you miss a virus definitions database update, or turn SpIDer Guard off for some time, so the system gets infected. After that SpIDer Guard would not catch a virus, because its already here, and launching a program (virus) from existing file does not encur write access to it - so SpIDer Guard would not catch and scan it.

Background scanning is a tradeoff between speed and security. Any object what wont be scanned otherwise goes to background scanning engine. So, Smart mode continues to scan files what are being modified or created, and background scan (enhanced protection mode) takes over the rest. It tries to minimize its impact on user's experience, doing its job only when computer is idle. What idle really mean? The most important part for SpIDer Guard, as an anti-virus on-access monitor, is disk input/output activity. As you open a program, or search for files, background scan stops and waits until you are done. It pays much less attention to cpu, keyboard or mouse activity.

[Benvan45]

{QUOTE-> As was already mentioned, it adds the background scanning feature. There are several factors to take into consideration:

1. Anti-virus must be as secure as possible - scan more, scan deeper, use heuristics, use proactive methods, control access to vital parts of operating system and configuration.
2. Anti-virus is, after all, just a utility program, so it must be light and quiet. It must not steal resources from other programs.
3. It must be simple enough, so you dont have to learn too much about protection and security.

So working modes were invented. As to SpIDer Guard, these are: Smart, RunAndOpen, CreateAndWrite. Smart is the default mode, providing good security for little price. Being a compromise, it has its drawbacks, too. In Smart mode SpIDer Guard would scan only objects what were opened for writing access on local volumes, and all objects on removable and network volumes. It works fine until you miss a virus definitions database update, or turn SpIDer Guard off for some time, so the system gets infected. After that SpIDer Guard would not catch a virus, because its already here, and launching a program (virus) from existing file does not encur write access to it - so SpIDer Guard would not catch and scan it.

Background scanning is a tradeoff between speed and security. Any object what wont be scanned otherwise goes to background scanning engine. So, Smart mode continues to scan files what are being modified or created, and background scan (enhanced protection mode) takes over the rest. It tries to minimize its impact on user's experience, doing its job only when computer is idle. What idle really mean? The most important part for SpIDer Guard, as an anti-virus on-access monitor, is disk input/output activity. As you open a program, or search for files, background scan stops and waits until you are done. It pays much less attention to cpu, keyboard or mouse activity. <-QUOTE}

Great explanation of this feature and should be clear now, what it does.

;) Putin

[Serge Popov]

{QUOTE-> Yes, the same slowdown with default settings with "all files" checked (file types tab). That's the only thing different.

But I uninstalled Dr. Web again and won't re-install, as I'm happy with Nod32 now and I don't want to put anymore energy in this matter, as I'm totally confused. If it is a conflict between Spider Guard and my soft- hardware, it won't be an easy matter to figure this out. My computer runs like oil with 4.32b, never any problems......nothing changed regarding soft- hardware, but after upgrading to 4.33, hell comes loose. I am convinced for 100%, that it is a bug in 4.33.
The only way to run 4.33 as smooth as 4.32, is to uncheck archive scanning and adding the recycle bins to the excluded section. But again, I don't believe this should be needed.

So, in closing......I'll follow this thread, but won't be able to try things out anymore with Dr. Web as I uninstalled it for the last time.

Hope everything will ever be sorted out!

;) Putin <-QUOTE}

With release of version 4.33 Dr.Web anti-virus had been greatly improved in many areas. Most of them are under the hood and are not so bright as new icons or skins. This new version knows more archive and packer formats, better heuristics, new options, new types of malware and so on. Its really sad what some things were not properly tested with this release, but things are getting better. So I hope you'll later change you mind and try Dr.Web once more.

As far as we talk about on-access monitors, beware that NOD32' AMON does not scan archives on the fly, while SpIDer Guard does. Its the real cause of your problems with moving a huge file to recycle bin (this file is actually a compound object what SpIDer Guard unpacks and scans on-the-fly). This kind of compound objects was unknown to version 4.32, thus it looks faster.

Anyway, its your choice. Be safe.

[Benvan45]

{QUOTE-> With release of version 4.33 Dr.Web anti-virus had been greatly improved in many areas. Most of them are under the hood and are not so bright as new icons or skins. This new version knows more archive and packer formats, better heuristics, new options, new types of malware and so on. Its really sad what some things were not properly tested with this release, but things are getting better. So I hope you'll later change you mind and try Dr.Web once more.

As far as we talk about on-access monitors, beware that NOD32' AMON does not scan archives on the fly, while SpIDer Guard does. Its the real cause of your problems with moving a huge file to recycle bin (this file is actually a compound object what SpIDer Guard unpacks and scans on-the-fly). This kind of compound objects was unknown to version 4.32, thus it looks faster.

Anyway, its your choice. Be safe. <-QUOTE}

Dear Serge,

Thanks for your reply, but will this unpacking and scanning on-the-fly remain the way it is? I understand that it is important for the proper security and I would have to accept this. I think it is still causing a terrible slowdown.
Like stated here before, to avoid this slowdown, one would have to disable archive scanning, but I don't agree with this at all.
So, I hope things can be sped up a bit in a next service update.

As for Nod32 Amon, it scans: Self-extracting archives - enables internal scan of self-extracting archives.

Good luck ! ;)

Putin

[Technodrome]

{QUOTE->

As for Nod32 Amon, it scans: Self-extracting archives - enables internal scan of self-extracting archives.

Good luck ! ;)

Putin <-QUOTE}
There is a bit difference between self-extracting archive scanning and actual archive scanning. As pointed here AMON does not scan archives for the sake of real time scan speed.


tD

[Blackcat]

{QUOTE-> Its really sad what some things were not properly tested with this release, but things are getting better. <-QUOTE}
Maybe for the next major Dr Web for Windows release you will consider more open and longer beta-testing?

Great to see someone from Dr Web popping in.

Serge, a warm welcome and I hope you can regularly drop by from time to time ;)

[Firefighter]

{QUOTE-> As far as we talk about on-access monitors, beware that NOD32' AMON does not scan archives on the fly, while SpIDer Guard does. Its the real cause of your problems with moving a huge file to recycle bin (this file is actually a compound object what SpIDer Guard unpacks and scans on-the-fly). This kind of compound objects was unknown to version 4.32, thus it looks faster.

Anyway, its your choice. Be safe. <-QUOTE}Is it actually so that SpIDer Guard is now capable to scan MUCH DEEPER some compound objects, which the former 4.32b version couldn't and left so some possible infections undetected? If this is the case, so many other scanners couldn't either detect those possible infections there with their fast scan results.

I have excluded two "exe" files from scanning in my DrWeb now, one of them is the K-Lite Mega Codec Pack 1.39 Beta 4 installer (about 28 Megs), "klmcodec139beta4.exe", which I think is a compound object too. But when I removed that file from excluded files and made an On-Demand scan of it, it took 4 min 17 sec and after that I knew that it was clean (1 min 42 sec after I increased the scan priority from 60 % to 90 % and the number of totally scanned objects was 416 in that sample). How could I know that it was clean by an other scanner which was not so good in unpacking? I'm ready to exclude some files from scanning after that I have done a full On-Demand scan of them, I have still over 240k+ files to protect by SpIDer Guard after all this. :)

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> There is a bit difference between self-extracting archive scanning and actual archive scanning. As pointed here AMON does not scan archives for the sake of real time scan speed.


tD <-QUOTE}

Thanks for the info, I was not aware of this! In Amon, I have checked "all files" on the 'extensions' tab. Which other good scanners will do archive scanning at a reasonable speed? Kav?

;) Putin

[shorty1]

Serge,
Thank you for the clear and informative answers to some lingering questions about Dr Web. I certainly appreciate you taking the time to do that. I, too, hope to see you stop by now and then to keep us informed. Again, thank you.

[bellgamin]

@Serge- A superb explanation!! Thank you. I hope you post here often in the future.

[jubilee]

i have an trial version of the drweb but i have some problems


i have some programs written in foxpro for dos, which is essential for my business.

i have an win2000 computer, and with spiderguard loaded, when i want to load this programs, i experience some stops and delays in response of them.


i know that this programs consume a lot of cpu because the lack of dos support in win2000, but in f-secure or in avast, this delays doesn't appear.

thank's

[fredra]

Hi
Is version 4.33 immune to this exploit?
http://www.securityelf.org/magicbyteadv.html
KAV has already putting out a patch for their products.
Is there any response from Dr. Web on this?
Thanks
Cheers :)

[Mongol]

{QUOTE-> Hi
Is version 4.33 immune to this exploit?
http://www.securityelf.org/magicbyteadv.html
KAV has already putting out a patch for their products.
Is there any response from Dr. Web on this?
Thanks
Cheers :) <-QUOTE}
I suspect the new version is immune to this since the DrWEB folks are very much on the ball. I emailed their support folks with the link just to be sure. I will let everyone know as soon as the respond...cheers...8)

[Mongol]

{QUOTE-> Hi
Is version 4.33 immune to this exploit?
http://www.securityelf.org/magicbyteadv.html
KAV has already putting out a patch for their products.
Is there any response from Dr. Web on this?
Thanks
Cheers :) <-QUOTE}

I emailed them about this a week ago and still no answer. I like the program but their customer support stinketh. The website promises replies in 24 hours but... I just don't know if I am going to renew with them this week or not. Other then a few minor annoying bugs this version is running fine but the lack of any support at times gets rather aggravating. Like the Process Guard issue which is dragging on since this new release...>:( :o ::)

[shorty1]

In case anyone is interested and as a general FYI: I see that the English documentation file for 4.33 is now available.

http://download.drweb.com/win/

[Blackcat]

{QUOTE-> In case anyone is interested and as a general FYI: I see that the English documentation file for 4.33 is now available.

http://download.drweb.com/win/ <-QUOTE}
At last the link is working!!!! It's been up for several weeks but dead.

117 pages in the manual, so it's a little better than the present "Help file" within the program ::)

I would have liked a little more detail in parts, particularly for the different configuration settings but this is a good effort to build on.

Thanks for the heads up, shorty.

[shorty1]

Agree with you that it would be nice if there was a little more detail on the different configurations. I see that it's listed as a "brief" users maual where mainly the default settings are described. One can only hope that means a more in-depth one where the various other setting will be published. I would be remiss though if I didn't compliment Dr Web on the vast improvement of this documentation over any previous documentation I have seen. In particular, the English translation is very good especially when compared to previous documentation. They still have some potholes in the road but it seems to me that they are making a concerted effort to improve in many areas that have long been complained about. This is good news for DR Web users.

[bellgamin]

{QUOTE-> ...the lack of any support at times gets rather aggravating. Like the Process Guard issue which is dragging on since this new release...>:( :o ::) <-QUOTE}As reported in THIS thread (http://www.wilderssecurity.com/showthread.php?t=100373) the Process Guard issue was fixed as of ~11/10/2005. As for support, it is indeed good that DrWeb's own Serge Popov (http://www.wilderssecurity.com/showpost.php?p=604035&postcount=22) now visits the Wilders forums from time to time.

Version 4.33 now runs just fine on my computer. Life is good!*puppy*

[Mongol]

{QUOTE-> As reported in THIS thread (http://www.wilderssecurity.com/showthread.php?t=100373) the Process Guard issue was fixed as of ~11/10/2005. As for support, it is indeed good that DrWeb's own Serge Popov (http://www.wilderssecurity.com/showpost.php?p=604035&postcount=22) now visits the Wilders forums from time to time.

Version 4.33 now runs just fine on my computer. Life is good!*puppy* <-QUOTE}

I agree, glad to have these posts from Serge Popov keeping us updated and to know they are watching posts here. There are quite a number of DrWEB users afoot at Wilders eh...:)

[Benvan45]

{QUOTE->
Version 4.33 now runs just fine on my computer. Life is good!*puppy* <-QUOTE}

Just for the heck of it, my licence runs out the 24th and could not resist trying it one more time......But still bad news as far as I am concerned. It still crawls when copying, moving and deleting large exe files or whatever. It does not take minutes anymore to delete a 30 Mb exe file, but still takes too long for me, so......it's a pitty, but I'll stick to Nod32 for sure now!

Good luck and ;)

Putin

[kdcdq]

Putin,

First of all a quick level-set: I have been running Dr. Web for at least three years on almost all of my systems with no performance problems, UNTIL I installed version V4.33 on two systems running Windows XP Home.

It is hard (OK, impossible) to believe that you and I are the only two Dr. Web users having the same problem with downloading and/or copying larger-size files!! Slowdowns on my PCs come when copying (or downloading) packed executables. As an example, http://files.avast.com/iavs4pro/setupengpro.exe. After the dowload is complete, Dr. Web wallows around for about 10 seconds making sure is has no viruses in it; when I copy the file to another directory: same thing. Another example is the 82mb Ultimate Boot Disk image; right clicking on the downloaded file and clicking Properties sends Dr. Web out to lunch doing who-knows-what.

I hope Technodrome (whom I respect a WHOLE LOT) or one of the other Global Moderators can screen-print every option page in/on their running-good Dr. Web systems that don't have this problem so that we can get to the bottom of the problem and solve it once an for all. Like Putin, it's driving me insane ("I've always been crazy, but it kept me from going insane" - Waylon Jennings).

KDCDQ, Security Freak

[Technodrome]

Hi KDCDQ

I use SpiderNT in "default" Mode. What kind of setting you got there?

[Technodrome]

2nd shot...

[kdcdq]

Technodrome, thanks for your quick reply!

My SpiderNT settings, in both of the screen shots, are identical to yours.

[OnTheEdge]

KDCDQ,

I am also having the same problems you are with downloading packed executables. I experience long delays at the end of the download. These delays can last up to 15 to 20 seconds. I could live with this but I have also experienced when Dr.Web unpacks and scans these executables that about 1/3 of the files downloaded are corrupted by this scan process and have to download the file again. This is unacceptable.

I bought Dr.Web after trialing 4.32b and was impressed by both its speed and detection. Two months later 4.33 was released with a lot of issues. I am also a registered user of Process Guard and was unable to run the two together until the recent fix.

Because of the continuing issues I finally broke down and bought KAV5. Run the resident scanner with the “High Speed” setting and get almost the speed of Dr.Web.

Frankly, right now, I am a little pissed I spent my money on Dr.Web. At a minimum, this company needs to offer its software for beta testing prior to release and/or engage in more strenuous internal testing prior to release. In my opinion, 4.33 was not a complete stable product when it was released to the public.

Having said the above, I am all about second chances. I probably will return to Dr.Web if they are able to work out the kinks with 4.33. Dr.Web’s combination of speed and detection is hard to beat. Thanks for letting me rant.

[Technodrome]

{QUOTE-> Technodrome, thanks for your quick reply!

My SpiderNT settings, in both of the screen shots, are identical to yours. <-QUOTE}

Ok. I did some tests and I found out that packed files are causing these slow downs(Probably because of new unpacking engine.). If I remember right avast setup file is packed by UPX.

Turn this off in drweb.ini file by changing Yes to No under CheckPackedFiles and reboot your machine.See if it helps.


[SpIDerGuardNT]
DisableEnhancedProtection = Yes
LngFileName = ""
FilesTypes = EXE,COM,DLL,SYS,VXD,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,386,FON,DO?
FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,PP?,OBJ,LIB,PIF,HLP,MD?,INI,MBR
FilesTypes = IMG,CSC,CPL,MBP,SH,SHB,SHS,SHT*,CHM,REG,XML,PRC,ASP,LSP,MSO,OBD
FilesTypes = THE*,NWS,SWF,MPP,OCX,VS*,DVB,CPY,BMP,AR?,ZIP,R??,GZ,Z,TGZ,TAR,TAZ
FilesTypes = CAB,LHA,LZH,BZ2,MSG,EML,TBB
UserMasks = "*.EXE","*.COM","*.DLL","*.SYS","*.VXD","*.OV?","*.BAT","*.BIN"
UserMasks = "*.DRV","*.PRG","*.BOO","*.SCR","*.CMD","*.386","*.FON","*.DO?"
UserMasks = "*.XL?","*.WIZ","*.RTF","*.CL*","*.HT*","*.VB*","*.JS*","*.INF"
UserMasks = "*.PP?","*.OBJ","*.LIB","*.PIF","*.HLP","*.MD?","*.INI","*.MBR"
UserMasks = "*.IMG","*.CSC","*.CPL","*.MBP","*.SH","*.SHB","*.SHS","*.SHT*"
UserMasks = "*.CHM","*.REG","*.XML","*.PRC","*.ASP","*.LSP","*.MSO","*.OBD"
UserMasks = "*.THE*","*.NWS","*.SWF","*.MPP","*.OCX","*.VS*","*.DVB","*.CPY"
UserMasks = "*.BMP","*.AR?","*.ZIP","*.R??","*.GZ","*.Z","*.TGZ","*.TAR"
UserMasks = "*.TAZ","*.CAB","*.LHA","*.LZH","*.BZ2","*.MSG","*.EML","*.TBB"
ScanFiles = ByFormat
HeuristicAnalysis = Yes
CheckPackedFiles = No
CheckArchives = No
CheckEMailFiles = No
InfectedFiles = Report
SuspiciousFiles = Report
IncurableFiles = Report
ActionAdware = Report
ActionDialers = Report
ActionJokes = Ignore
ActionRiskware = Ignore
ActionHacktools = Ignore
ActionInfectedArchive = Report
ActionInfectedMail = Report
ActionInfectedContainer = Report
ActionIfRenameFailed = Delete
ActionIfMoveFailed = Rename
ActionIfDeleteFailed = Lock
ActionIfReportFailed = Lock
RenameFilesTo = #??
MoveFilesTo = "infected.!!!"
ExcludePaths =
ExcludeFiles =
VirusBase = "*.vdb"
LogToFile = Yes
OverwriteLog = No
LogScanned = No
LogPacked = Yes
LogArchived = Yes
LogFormat = ANSI
TestMemory = Yes
TestStartup = Yes
PromptOnAction = Yes
PlaySounds = Yes
UseDiskForSwap = Yes
LimitLog = Yes
MaxLogSize = 512
RestoreAccessDate = No
UpdateFlags = "drwtoday.vdb"
UpdatePeriod = 1m
GuardMode = Smart
ScanBootOnShutDown = Yes
LogStatistics = Yes
Acknowledge = Yes
AllowWildcards = No
AllowRelativeFileNames = No
EnableDeleteArchiveAction = No
DisableHotReconfigure = No

[bellgamin]

{QUOTE-> Ok. I did some tests and I found out that packed files are causing these slow downs(Probably because of new unpacking engine.). ...Turn this off in drweb.ini file by changing Yes to No under CheckPackedFiles and reboot your machine.See if it helps. <-QUOTE}Would such a change cause any reduction in the level of protection provided by DrWeb?

[Technodrome]

{QUOTE-> Would such a change cause any reduction in the level of protection provided by DrWeb? <-QUOTE}

SpiderNT won't scan Packed malware (ASPACK, PECRYPT, UPX, MORPHINE, PECOMPACT, NFO, EXPRESSOR, etc). This is only for Real time monitoring.


tD

[Benvan45]

{QUOTE-> Would such a change cause any reduction in the level of protection provided by DrWeb? <-QUOTE}

I'm quite sure it will. This configuration is not for nothing and disabling all kinds of archive scanning is not the way I want to use an AV scanner.

Serge Popov warned me about using Nod32:

As far as we talk about on-access monitors, beware that NOD32' AMON does not scan archives on the fly, while SpIDer Guard does. Its the real cause of your problems with moving a huge file to recycle bin (this file is actually a compound object what SpIDer Guard unpacks and scans on-the-fly). This kind of compound objects was unknown to version 4.32, thus it looks faster.

Anyway, its your choice. Be safe.

I surely don't agree with diasabling these functions within Dr. Web. I still think Dr. Web should fix these problems without bringing back the great security level and speed it used to have.

;) Putin

[Blackcat]

Running Guards of most other AV's do not even have the choice of scanning any packed files.

I am running BOClean together with Dr Web and this seems to provide a good layered defense ;)

[kdcdq]

Regards to all,

Technodrome:
Setting Dr. Web's control setting to CheckPackedFiles = No did, indeed, eliminate the system slowdown associated with downloading and/or copying packed executables. Do you have the slowdown associated with packed executables on your Dr. Web-based systems?


Also, now I'm mad like Putin; "I surely don't agree with diasabling these functions within Dr. Web. I still think Dr. Web should fix these problems without bringing back the great security level and speed it used to have". I couldn't say it better myself; ditto; ditto; ditto.

Blackcat:
Have you disabled packed file checking in Dr. Web? I also have a registered copy of BOClean. You seem to feel pretty good about this configuration....

Together, I hope we can work this all out to the benefit of all.

[Mongol]

Holy smokes, and I thought I was one of the only DrWEB users in Texas...

[Technodrome]

{QUOTE-> Do you have the slowdown associated with packed executables on your Dr. Web-based systems?. <-QUOTE}

Yes!


{QUOTE-> Also, now I'm mad like Putin; "I surely don't agree with diasabling these functions within Dr. Web. I still think Dr. Web should fix these problems without bringing back the great security level and speed it used to have". I couldn't say it better myself; ditto; ditto; ditto.
<-QUOTE}

Many AVs out there don't even offer this(as Blackcat pointed). I don't see this as a problem.


tD

[kdcdq]

Technodrome:
Thanks for your time and efforts on my behalf; I really do appreciate it.

By the way, I came up with a way to minimize the slow-down in Dr. Web processing packed executables downloaded from the Net: I put my IE download directory (IE_Download) in the SpiderNT Excludes list. Now I only experience the slowdown "pain" when copying the files to their "real" home directories.

Mongol:
You and I are practically neighbors! And I thought I was the only Dr. Web user in Texas.......

KDCDQ, Security Freak

[Benvan45]

{QUOTE-> Technodrome:
Thanks for your time and efforts on my behalf; I really do appreciate it.

By the way, I came up with a way to minimize the slow-down in Dr. Web processing packed executables downloaded from the Net: I put my IE download directory (IE_Download) in the SpiderNT Excludes list. Now I only experience the slowdown "pain" when copying the files to their "real" home directories.

Mongol:
You and I are practically neighbors! And I thought I was the only Dr. Web user in Texas.......

KDCDQ, Security Freak <-QUOTE}

Now you're gonna exclude your download directory (IE_Download), just for the sake of keeping the right speed. Why not excluding the 'real' home directories also.......Dr. Web will fly like a butterfly......(just kidding) but what I mean to say: How far does one have to go to be able to use a SECURITY product, that is purchased to protect your computer?
I'm pretty diasappointed about some answers given here.....for the sake of using the new version of Dr. Web with some pretty big bugs!
I still think: if a security product needs to be altered in order to protect my pc at an acceptable speed, I think I have chosen the wrong product and go for another product.
A good example: Kaspersky 5.0, is a great scanner, but also slowed my system down to a very acceptable level. There are many ways to avoid this slowdown, but again.....why alter this all, because it sure as hell will effect the protection I choose for in the first place!!
I switched to Nod32, as it is rated as a very good scanner with great speed, but I'm convinced, that Kaspersky is better, but I feel more comfortable with Nod32 personally and that's what made my choice.

I felt very comfortable with Dr. Web up to the upgrade and when I have to alter too many things in order to use this scanner the way I used to, I don't feel comfortable anymore as in my opinion the security level is brought down.

;) Putin

[Mongol]

{QUOTE->

Mongol:
You and I are practically neighbors! And I thought I was the only Dr. Web user in Texas.......

KDCDQ, Security Freak <-QUOTE}

Our DrWEB updates could almost cancel each other out eh? The internet does make this big old world smaller...

[Technodrome]

KDCDQ,

I understand excluding packed file from scanning is not the best idea. But as I pointed out many av products don’t even scan packed files on the fly (RTM). Of course this is not an excuse for DrWeb and I hope they are working on better or optimized solution.

I always recommend people to use explorer extension to scan file before opening (no matter what AV you use). ;)


tD

[kdcdq]

Hello Putin,

I just wanted to let you know that I agree with every word in your last posting; your points of view are well taken and understood. If I hadn't just renewed my Dr. Web subscription last month, I believe that I would have switched to either BitDefender V9 (which I use on two other machines) or Nod32 (which I have only dabbled with).

And you are right, of course: I am simply trying to make using Dr. Web less "painful" by excluding my primary Internet download directory from the grasp of SpiderNT. I simply suggested this concept in case anyone else could benefit by doing the same thing. I keep hoping that the fine folks (???) that produce Dr. Web can fix the slowdown problem soon (always remember, soon is a relative thing)...

KDCDQ

[Benvan45]

{QUOTE-> Hello Putin,

I just wanted to let you know that I agree with every word in your last posting; your points of view are well taken and understood. If I hadn't just renewed my Dr. Web subscription last month, I believe that I would have switched to either BitDefender V9 (which I use on two other machines) or Nod32 (which I have only dabbled with).

And you are right, of course: I am simply trying to make using Dr. Web less "painful" by excluding my primary Internet download directory from the grasp of SpiderNT. I simply suggested this concept in case anyone else could benefit by doing the same thing. I keep hoping that the fine folks (???) that produce Dr. Web can fix the slowdown problem soon (always remember, soon is a relative thing)...

KDCDQ <-QUOTE}

I know what you mean and it's a pitty about your recent renewal and let's hope things will change soon.......as it sure is relative!

Good luck! ;)
Putin

[Blackcat]

{QUOTE-> Slowdowns on my PCs come when copying (or downloading) packed executables. <-QUOTE}
{QUOTE-> Turn this off in drweb.ini file by changing Yes to No under CheckPackedFiles and reboot your machine.See if it helps. <-QUOTE}
{QUOTE-> This configuration is not for nothing and disabling all kinds of archive scanning is not the way I want to use an AV scanner. I surely don't agree with disabling these functions within Dr. Web. I still think Dr. Web should fix these problems without bringing back the great security level and speed it used to have. <-QUOTE}
If you consider carefully the new features in version 4.33, the security level has been greatly improved compared to earlier versions even with archive/packed scanning disabled in SpiderGuard!!!

1. Previously, the big potential hole in SG's real-time protection was "Smart-mode". Regular on-demand scanning was one way around this but this default setting was still less secure than the other on-access scan modes. Unfortunately, these other scan modes could not be used because of their huge performance hit on most systems.

However, the new "enhanced protection mode" allows the Smart SpiderGuard to scan files that are being modified or created while queuing other files in the background.

2. Not all RTM's of AV's can scan archives. Command, Dr Web, McAfee Enterprise, BitDefender are some of the ones that offer the choice of archive scanning, but this is not a default setting.

But a number of others do not e.g. AMON and KAV 5. The last two AV vendors are no slouch in detection rates but at the present time they do not offer this scanning choice. The main reason being that it may slow down the performance considerably and/or malware can be picked up in the archive when it is extracted, then the RTM jumps in. So most AV companies leave archive scanning to the on-demand scanner.

CSAV, for example has a good choice in the latest version of it's RTM; Dynamic Virus Protection, where there are 5 levels to choose for archive scanning if required. But even given this choice I have not selected this scanning option.

3. Even fewer RTM's can scan packed files on the fly. There is a new unpacking engine in Dr Web and therefore the number of files that can be unpacked has greatly improved. However, disabling this option in the new version does not reduce its protection level compared to v.4.32. Again most other AV's leave the unpacking of these files to the on-demand scanner.

Overall, since Smart-mode has been improved, and the on-demand scanner can deal with archived/packed files checking in new installs and downloads, I cannot see how disabling archive/packed file scanning in SpiderGuard has reduced the level of protection in the new version compared to previous ones.

Ideally for full protection we would select;

In SpiderGuard's settings;

Scan Options; OTHER; Run and open file + create and write
File Types; All +Archives+E-mail files

In Dr Web ini file; CHECKPACKFILES=YES

BUT I would like to use my machine as intended with as little effect on performance as possible. Using ALL AntiVirus Guards is always a balance between performance and protection, SpiderGuard is no different in this respect to all other RTM's.

I am sorry that some users are having problems and agree with them that if they are not happy with Dr Web in its present state then they should switch to another AV. I must be lucky; apart from some high CPU usage in the early stages of this version, my only slight problem has been some very large Media files on one of my computers which took a very long time to check with the on-demand scanner. I have only seen a slight delay (a few seconds) with some packed files but nothing to worry about as yet. But if this became a problem I would simply turn off the checking of these files.

BUT IMO, even now it is the best Dr Web version I have used.

*It has improved its security level, with a better Smart-mode, improved heuristics and unpacking engine.

*SpiderGuard is as light as before (on my computer), as it still has no visible detrimental effects on system performance on any of my machines.

[shorty1]

Agreed. Good post Blackcat.

[Technodrome]

Good post Blackcat!


tD

[Benvan45]

Now it seems that some users, not having a slowdown at all, are changing the configuration in order to sail around 'the slowdown' at forehand.

I am too much of a novice to understand all these changes maybe needed to enable a proper use of Dr. Web after the upgrade.
I have always looked for a good product with easy configurations as I don't think it's right, that one has to study a complex manual or whatever, before being certain of a sufficient protection. Most AV scanners are marketed as no nonsense products and I really believe, that's the way it should be...............
I am thinking of the average pc user (which I am.....), looking for a good and solid and easy to configure AV scanner. I have recommended Dr. Web many times to friends and neighbours, because of the speed, automatic updates, e-mailscanning and configuration.
But now it seems needed for those people, to jump into ini files etc. in order to get a smooth running product.

It beats me all together and this winds it up for me. I feel very happy with 'the other' scanner, without frigging around in the ini files.

;) Good luck!

Putin

[Blackcat]

{QUOTE-> It beats me all together and this winds it up for me. I feel very happy with 'the other' scanner, without frigging around in the ini files. <-QUOTE}
Completely agree, putin ;)

I have suggested that "scanning packed files" should not be enabled as default with SpiderGuard but be a selection choice in SG Settings, similar to archives or email files. This is because newbies, in particular would simply stick to the default settings of SG and at the present time with version 4.33, this may very well not be the best settings for performance.

My post above was only to highlight that this present version does offer greater and not less protection than before and only some slight tweaking of the settings is needed for most people to achieve the best balance between performance and protection for SpiderGuard.

[Firefighter]

{QUOTE-> I am thinking of the average pc user (which I am.....), looking for a good and solid and easy to configure AV scanner. I have recommended Dr. Web many times to friends and neighbours, because of the speed, automatic updates, e-mailscanning and configuration. But now it seems needed for those people, to jump into ini files etc. in order to get a smooth running product.

;) Good luck!

Putin <-QUOTE}To be honest, DrWeb may not be the best alternative to an average user. But if you want the best value for money and an ELITE GUARD protection against NEW threats (sorry, I just noticed that my keyboard was in FireFighter Mode), full coverage protection to ALL files that are in your puter and finally a low impact to your resources, my first candidate is the Old Good Doctor, DrWeb 4.33. ;D

As a typical Russian product, you may have ONCE need some add adjustments, but after that they are awesome. ;)

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> To be honest, DrWeb may not be the best alternative to an average user. But if you want the best value for money and an ELITE GUARD protection against NEW threats (sorry, I just noticed that my keyboard was in FireFighter Mode), full coverage protection to ALL files that are in your puter and finally a low impact to your resources, my first candidate is the Old Good Doctor, DrWeb 4.33. ;D

As a typical Russian product, you may have ONCE need some add adjustments, but after that they are awesome. ;)

Best regards,
Firefighter! <-QUOTE}

Agreed, but who on earth is going to do the 'odd' adjustments, if they don't usually know what an ini file is? The old version was a lot easier, wasn't it?

Take care! ;)
Putin

[Firefighter]

{QUOTE-> Agreed, but who on earth is going to do the 'odd' adjustments, if they don't usually know what an ini file is? The old version was a lot easier, wasn't it?

Take care! ;)
Putin <-QUOTE}I have made my changes to here, it's the file in the middle. Unfortunately my WinXP is a Finnish version. 7 kt is the same as 7 kb I think.

Best regars,
Firefighter!

[Benvan45]

{QUOTE-> I have made my changes to here, it's the file in the middle. Unfortunately my WinXP is a Finnish version. 7 kt is the same as 7 kb I think.

Best regars,
Firefighter! <-QUOTE}

Yes, I know where to make the changes, but I meant 'the average user' wouldn't know where and how.

Good luck! ;)
Putin

[Firefighter]

{QUOTE-> Yes, I know where to make the changes, but I meant 'the average user' wouldn't know where and how.

Good luck! ;)
Putin <-QUOTE}That's why I don't recommend DrWeb to an average user, even though I'm only a father of 3 kids. ;D

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> That's why I don't recommend DrWeb to an average user, even though I'm only a father of 3 kids. ;D

Best regards,
Firefighter! <-QUOTE}

3 kids.?.....you have been playing around more with your girl than with Dr. Web!!!
;D

Take care! ;)

Putin

[Firefighter]

{QUOTE-> 3 kids.?.....you have been playing around more with your girl than with Dr. Web!!!
;D

Take care! ;)

Putin <-QUOTE}Actually they are all between 17...20 years old and this laptop is my oldest 20 years old son's, who is in the obligatory military service now. ;D

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> Actually they are all between 17...20 years old. ;D

Best regards,
Firefighter! <-QUOTE}

Nice ages, beginning to know more than Daddy, usually!! Enjoy them, time is tight!

;) Putin

[Firefighter]

{QUOTE-> Nice ages, beginning to know more than Daddy...

;) Putin <-QUOTE}I think that this time has passed away many years ago. ;D Today they are calling me as a moron and a fossil!

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> I think that this time has passed away many years ago. ;D

Best regards,
Firefighter! <-QUOTE}

Usually it starts at a very young age nowadays, you're right! ;D

;) Putin

[bellgamin]

Great posts by BC, as always.

To *enjoy* a REAL slowdown, try re-formating a hopelessly infected hard drive, then reinstalling all your programs, & then re-downloading all the updates thereto. Now THAT's a slowdown. :o

As for me & my house, we shall keep DrWeb on FULL alert.

[Firefighter]

{QUOTE-> Usually it starts at a very young age nowadays, you're right! ;D

;) Putin <-QUOTE}Btw, my youngest child, a 17 years old girl, is afflicted with arakhnofobia, is that the reason why she can't use this puter?

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> Btw, my youngest child, a 17 years old girl, is afflicted with arakhnofobia, is that the reason why she can't use this puter?

Best regards,
Firefighter! <-QUOTE}

That must be it! Just remove the bugger and your daughter will be very happy!

;D Putin

[Firefighter]

{QUOTE-> That must be it! Just remove the bugger and your daughter will be very happy!

;D Putin <-QUOTE}Do you think I'm mad? With what I'm playing with after that, when I already have 3 kids! ;D

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> Do you think I'm mad? With what I'm playing with after that, when I already have 3 kids! ;D

Best regards,
Firefighter! <-QUOTE}

There are ways to avoid all that! But if you rather play with the doctor, it's up to you. I would go for the other option if I would would live in the Icelandic environment, a cosy Iglo, a bearskin around my waist, a pretty woman stirring in a black pot on a fire and a very large mattress on a haystack!

;D Putin

[Firefighter]

{QUOTE-> I would go for the other option if I would would live in the Icelandic environment, a cosy Iglo, a bearskin around my waist, a pretty woman stirring in a black pot on a fire and a very large mattress on a haystack!

;D Putin <-QUOTE}It's not always so Icelandic environment here in Finland. ;D

Best regards,
Firefighter!

[Benvan45]

{QUOTE-> It's not always so Icelandic environment here in Finland. ;D

Best regards,
Firefighter! <-QUOTE}

Sorry, I meant Finnish environment, what a mistake!
What a beauty, is that your Castle? I would swap with you any time, just let me know.

;) Putin

[Firefighter]

{QUOTE-> What a beauty, is that your Castle? I would swap with you any time, just let me know.

;) Putin <-QUOTE}No, I'm not that rich. ;D Actually it's one of our national treasures, where lived about 250 soldiers and their families on the 1600's.

Btw, that 250 was almost 1 ‰ from the whole population in Finland in that time.
;D

Best regards,
Firefighter!

[SG1]

Yes, is the good DrWeb (4.33) fixed?

I planned to buy a few apps shortly, incl. Process Guard and Port Exlporer, and I don't want to get into a real tussle with conflicts/uninstalling in Safe Mode.

SG1 (Pat)

[Blackcat]

{QUOTE-> Yes, is the good DrWeb (4.33) fixed? <-QUOTE}
Most users here, after some tweaking of the SG settings, seem to have the usual, stable and low footprint AV as with previous versions.
{QUOTE-> I planned to buy a few apps shortly, incl. Process Guard and Port Exlporer, and I don't want to get into a real tussle with conflicts/uninstalling in Safe Mode. <-QUOTE}
Initial problems with Process Guard seem to have been fixed (http://www.wilderssecurity.com/showthread.php?t=100373&page=2&highlight=DrWeb) and I am not aware of any conflicts with Port Explorer.

BUT as all systems are different, I would trial PG and PE with Dr Web first before making a definite buying decision.

[Mongol]

Just follow Serge Popovs recommended tweaks and Process Guard should run like a fine watch. See post 22 in the following link: http://www.wilderssecurity.com/showthread.php?t=100373&highlight=drweb+processguard

hope this helps...;D