PDA

View Full Version : NOD versus Dr Web


n8chavez
July 20th, 2006, 02:13 AM
What is the difference between the memory scanning capabilities of Dr Web and NOD32? I mean as far as on-demand scanning is concerned. This is considered to be a strongpoint by Dr Web, but I'm just curious on NODs approach.

Firecat
July 21st, 2006, 02:04 PM
-{ Quote: "What is the difference between the memory scanning capabilities of Dr Web and NOD32? I mean as far as on-demand scanning is concerned. This is considered to be a strongpoint by Dr Web, but I'm just curious on NODs approach." }-
I've never seen the memory scanner of NOD32 "in action" - I mean, I never saw it individually scanning all processes so I don't really know.

But if I remember correct, NOD32's memory scan only scans processes and services, while Dr.Web (or at least Virus Chaser) scans processes, DLLs, services, any files that are accessed by these services and so on. :-\

steve1955
July 21st, 2006, 02:16 PM
another bloody THIS AV vs THAT AV thread!

Firecat
July 21st, 2006, 02:25 PM
-{ Quote: "another bloody THIS AV vs THAT AV thread!" }-
Oh well, sometimes people like to poke around different products, and compare. What I do recommend is that if something works, then stick with it. The methods of working are always different, but the end result should be ---> Malware detected. Once that is done, there is no need for anything else (except maybe automatic registry cleaning from the AV).

Bubba
July 21st, 2006, 02:59 PM
-{ Quote: "another bloody THIS AV vs THAT AV thread!" }-Steve....what may or may not help to understand is that initially this thread was placed in the Nod32 Forum with a vaild memory type question by n8chavez that related to Nod32. I personally do not believe the question n8chavez posed was intended nor do I feel it's "another" ABC AV vs XYZ AV no matter which forum it now resides in. Hopefully those that are knowledgeable about Nod and DrWeb can answer n8chavez question and no one is tempted to direct the thread toward this AV vs that one that you alluded to. If it does....it's fairly simple to remedy.

Bubba

steve1955
July 21st, 2006, 04:27 PM
Sorry but these type threads seem to be coming thick and fast at the moment(at all times really!)its just my opinion,but I think most of them are started just to "wind people up"(like you said this may be a valid thread/question but others have made me rather cynical:-sorry!)

n8chavez
July 21st, 2006, 04:29 PM
-{ Quote: "another bloody THIS AV vs THAT AV thread!" }-

As has been stated, my intention was to not start another "which is better" thread. That's why I was very specific about my question.

-{ Quote: " Sorry but these type threads seem to be coming thick and fast at the moment(at all times really!)its just my opinion,but I think most of them are started just to "wind people up"(like you said this may be a valid thread/question but others have made me rather cynical:-sorry!) " }-

That's why I started this thread in the NOD forum, because I was hoping to get information. And I wasn't trying to "wind people up." As many around here know I have licences for many AVs (NOD32, Dr Web, VBA32, KAV 5) for that would not help me one way or the other. I am way pickier than most and my worst enemy when it comes to things like this. But then again, that's half the fun. :)

-{ Quote: " But if I remember correct, NOD32's memory scan only scans processes and services, while Dr.Web (or at least Virus Chaser) scans processes, DLLs, services, any files that are accessed by these services and so on. " }-

That is the difference I was wanting to know. As you mentioned, there in no evidence of NOD scanning the memory like there is with the doc. That's what I thuoght; that NODs memory scanner is not as good as Dr Webs.

JerryM
July 21st, 2006, 06:57 PM
If these threads bothered me that much I would ignore them instead of getting all "worked up" over them.

Jerry

FirePost
July 21st, 2006, 07:57 PM
-{ Quote: "As you mentioned, there in no evidence of NOD scanning the memory like there is with the doc. That's what I thuoght; that NODs memory scanner is not as good as Dr Webs." }-Here is some evidence NOD scans memory as claimed. What processes are scanned I have no idea, but I also hardly think a display of "Look at what I am looking at now!" makes a scanner better.
-{ Quote: "Scan performed at: 7/19/2006 11:57:33 AM
Scanning Log
NOD32 version 1.1667 (20060718 ) NT
Command line: C:\WINDOWS\system32\ishost.exe C:\WINDOWS\system32\ismon.exe
Operating memory - Win32/TrojanDownloader.Zlob.VB trojan
" }-

NOD32 cant cleane this Trojan (Log Posted) (http://www.wilderssecurity.com/showthread.php?t=139739)

mercurie
July 22nd, 2006, 12:22 AM
-{ Quote: "If these threads bothered me that much I would ignore them instead of getting all "worked up" over them.

Jerry" }-My thought as well. ;)

A side by side comparison question in my mind not really a which is best question. After all I am here reading it and checking responses it has my interest. :)

The Mods. do a good job of tending to the sheep around here so I would rather let them get worked up not me. ;D