An AMON security tab setting Q

[HandsOff]

Hi-

Does anyone know what effect checking the box allow manual stopping has, and why it is not checked by default.

I can only guess that the option is there because there are activities that are hard to perform with AMON active, and someone might forget to temporarily disable it befor hand. But, I'm not sure, and I wonder what the disadvantages of checking the box would be.


-HandsOff

[Brian N]

It's to prevent unloading the AMON module.
If you wanna disable it for a sec or two, just hit the disable button/line.

[HandsOff]

I guess I still don't get it...

as you point out you can disable amon even without having the box checked...so what does checking the box do? Unless it is hard to turn amon off during a flurry of activity, like maybe converting a large batch of files or something...but then...wouldn't it be better to check the box then? So you would have that option?


-HandsOff

[ronjor]

Each module has a help file. Loads of info in there. From the help file:

{QUOTE-> AMON has three states:

Running and enabled (Loaded in memory and performing on-access scanning).
Running and disabled (Loaded in memory but not performing on-access scanning).
Stopped and disabled (Not loaded in memory).
If AMON is stopped (its driver is not loaded in memory), its icon in the main window of the NOD32 Control Center is gray. This state is not recommended since no active on-access antivirus protection is available on the computer. To start AMON, click its icon and the Start button located in the AMON window (to make AMON start automatically on system startup, select the appropriate option in AMON setup).


If AMON is loaded in the memory but its scanning is disabled (not a recommended state), its icon is red. To enable AMON, click its icon to open AMON window and click “File system monitor (AMON) enabled” check-box. This action will bring AMON’s icon into the normal (recommended) state. To double check AMON’s performance, click AMON icon to open its main window. The main AMON window contains information on the number of scanned files. Have a look at this number and remember it. Then run/stop any application and check the number of scanned files again. If AMON is running properly, the value of the parameter has increased.


If you wish to turn off AMON temporarily, we strongly recommend to untick the appropriate check-box in the AMON panel rather than clicking the Stop button which would completely unload AMON from memory and you may not be able to reload it without rebooting your machine first. To make the Stop button unavailable and prevent from unloading AMON accidentaly, we recommend to enable the appropriate security option in AMON setup. <-QUOTE}

[HandsOff]

Okay, I think I get it, and the color symbology is a good one to know, in order to recognize an undesireable condition.

I know you didn't say this, but I've seen programs where if you chose unload the realtime protection instead of disable, the effect was that when you restarted it was still disabled. You had to go back to the options settings and change it, or it assumed you meant, unload it for good!


- Handsoff

[ronjor]

Amon is the heart of NOD32. Speaking for myself,I wouldn't want it disabled for any reason.

{QUOTE-> AMON is the most important line of antivirus defense. It is critically important to keep it running at all times using the most current version of the virus signature databases. AMON monitors all potentially threatening actions on protected computers such as opening, executing, creating, or renaming files. <-QUOTE}

[Brian N]

If you really wanna disable AMON (I do it sometimes myself when moving extracters around) just click this.
No need to unload it.

[Blackspear]

{QUOTE-> Amon is the heart of NOD32. Speaking for myself,I wouldn't want it disabled for any reason. <-QUOTE}Agreed ;D

[HandsOff]

{QUOTE-> Amon is the heart of NOD32. Speaking for myself,I wouldn't want it disabled for any reason. <-QUOTE}


Which brings up a question that just doesn't seem to have a right answer to me...I hear people all the time say that you should disable your antivirus when you install programs. You see all kinds of downloads that say to disable your firewall (including Microsoft update downloads).

The problem is...those seem like just the kind of events which you would be most likely to introduce malware.

There is a third catagory, that seems to be becoming an issue and that is doing backups. My typical behavior is to leave everything running and hope for the best. Sometimes a file will not download unless the firewall is off. What is one to do?

Plus...what condition would necessitate turning off your firewall for a download? Everyone knows the threats are out there...any download can be made safe...why would someone put you in that position?


-HandsOff

[ronjor]

{QUOTE-> those seem like just the kind of events which you would be most likely to introduce malware. <-QUOTE}
Seems like a true statement.
I turn neither NOD or my firewall off for any reason, including backups. So far, so good.

[Blackspear]

{QUOTE-> ...I turn neither NOD or my firewall off for any reason... <-QUOTE}I'll second this, have NEVER turned of NOD32 to install a single thing, it remains on at ALL times, same with my firewall.

Cheers ;D

[ASpace]

{QUOTE-> ...I hear people all the time say that you should disable your antivirus when you install programs. You see all kinds of downloads that say to disable your firewall (including Microsoft update downloads).
<-QUOTE}

What ? This is stupid and moreover - wrong . This was valid for the time of 10 years ago . Nowadays you don't need to turn off your antivirus since it provides you with real-time protection and Prevention is always better than cure
if you disable AV's real-time and you install trojan then it would be much difficult to remove it rather than leaving the real-time on

Moreover , NOD32 is the fastest anti-threat software in the world and it will never slow down the process . Note that NOD32 is different from Kaspersky , Panda and Norton , NOD32 is not intrusive and it is excellent. The same is valid for your firewall as well .

I stay behind the opinions of Blackspear and Brian N :thumb:


NOD32

[HandsOff]

Well it seems like there is pretty strong agreement here that AMON should be on during installs.

The one that is a little harder is backups. Ghost Regdefend was the first real troublemaker, but NOD32, and especially Kerio, seem to cause a lot of errors. On the other hand, I doubt they are serious. usually just internal logs for the apps or something like that. I don't really like seeing errors on the logs, but that probably will not effect anything. Anyone ever notice this? (obviously you need to be using a backup program that compares and validates the backups).


-HandsOff