NOD32 Downloading???

[Outpost Is Great]

This seems to happen to about half of the websites I go to. A little pop up comes in the bottom right hand corner of my computer and it says IMON is downloading something. Why is it doing this????

[ronjor]

Do you have any links you can point to? Evidently, something is being downloaded and the http scanner is scanning it.

[Outpost Is Great]

{QUOTE-> Do you have any links you can point to? <-QUOTE}

Sometimes it happens to me when I go to deviantart and download a skin or theme.

[ronjor]

Look in the Imon help file for HTTP scanning. Set higher compatibilty for your browser rather than higher efficiency. See if it helps.

[Outpost Is Great]

{QUOTE-> Look in the Imon help file for HTTP scanning. Set higher compatibilty for your browser rather than higher efficiency. See if it helps. <-QUOTE}


Thanks that worked. One question I gotta ask you though is what's the difference between higer efficiency and higher compatibility? Would I be in less of a risk to trojans/worms if I chose higer compatibility?

[ronjor]

Higher efficiency should keep malware off your hard drive. There is a chance, using higher compatibility, that malware could reach your hard drive. The realtime scanner, Amon, would catch it however.

I use higher compatibility as I feel it gives me better performance.

From the help file:

{QUOTE-> Compatibility Setup
Client compatibility setup provides an option to toggle between active and passive mode (better efficiency and better compatibility respectively) used for a particular application.

IMON works in two modes: „passive“ and „active“. In passive (higher compatibility) mode, portions of a downloaded file are continuously passed on to the target application whilst IMON stores a temporary copy of each of the fragments. When the last fragment is detected, the whole file is scanned for viruses. If an infiltration is detected, a warning window appears and the connection with the particular server is terminated. A disadvantage of that is that the already downloaded portion of the file may already contain a fundamental portion of a malicious code. What's more, if the application repeatedly attempts to download infected file, it may use the already downloaded data and request only the rest of the file. In such case, IMON may not find nothing suspicious in the remaining portion.


In active (higher efficiency) mode, IMON first downloads and scans whole file and then passes it on to the target application. This procedure is safer because in the case of an infiltration the application does not receive any portion of the downloaded file. A disadvantage is that the application receives all data at once, therefore it cannot show the download status properly. Therefore, if the download lasts for more than 5 seconds, a small window showing the dowload progress pops up beneath the system tray. Active mode is not suitable for certain types of data which requires a continual data flow (e.g. multimedia, streaming video/audio). <-QUOTE}

[webyourbusiness]

these skins and themes are probably largish - so you're just seeing it scanning - zip and rars take longer to scan also...

hth

Greg

[ragnarok]

thats right, just a normal scanning in "higher efficiency" mode when surfing through "loaded" web pages, or even when downloading files of certain size, nothing to worry about, if you dont wanna see those windows popping up from the systray just click on one of them when they appear, this should hide them for at least one eternity...;D