PDA

View Full Version : Questions about IMON


huangzhengliang
January 4th, 2007, 04:35 AM
Is IMON the part of NOD32 that scans all web-related stuff?
Like when you view large photos, you see NOD32 downloading stuff from the system tray? Where the photos don't get displayed until they are fully downloaded and scanned?
This is one thing I dislike coz my browser shows a blurry picture at first and sharpens as more is downloaded. This allows me to preview the pic and decide whether or not to complete the download.
I suppose this is a minor thing. NOD32 is still good, not saying it's bad. ; )

Brian N
January 4th, 2007, 05:29 AM
{QUOTE-> Is IMON the part of NOD32 that scans all web-related stuff?
Like when you view large photos, you see NOD32 downloading stuff from the system tray? Where the photos don't get displayed until they are fully downloaded and scanned?
This is one thing I dislike coz my browser shows a blurry picture at first and sharpens as more is downloaded. This allows me to preview the pic and decide whether or not to complete the download.
I suppose this is a minor thing. NOD32 is still good, not saying it's bad. ; ) <-QUOTE}
Just lower the numbers, or disable the option(s) completely.
You need to experiment with these settings so that it works best for you.

This works for me.

huangzhengliang
January 4th, 2007, 06:29 AM
what's passive compatible mode? a low-security setting which could open holes but have its benefits?

Brian N
January 4th, 2007, 09:12 AM
Quote from the help file:
{QUOTE-> Client compatibility setup provides an option to toggle between active and passive mode (better efficiency and better compatibility respectively) used for a particular application.

IMON works in two modes: „passive“ and „active“. In passive (higher compatibility) mode, portions of a downloaded file are continuously passed on to the target application whilst IMON stores a temporary copy of each of the fragments. When the last fragment is detected, the whole file is scanned for viruses. If an infiltration is detected, a warning window appears and the connection with the particular server is terminated. A disadvantage of that is that the already downloaded portion of the file may already contain a fundamental portion of a malicious code. What's more, if the application repeatedly attempts to download infected file, it may use the already downloaded data and request only the rest of the file. In such case, IMON may not find nothing suspicious in the remaining portion.

In active (higher efficiency) mode, IMON first downloads and scans whole file and then passes it on to the target application. This procedure is safer because in the case of an infiltration the application does not receive any portion of the downloaded file. A disadvantage is that the application receives all data at once, therefore it cannot show the download status properly. Therefore, if the download lasts for more than 5 seconds, a small window showing the dowload progress pops up beneath the system tray. Active mode is not suitable for certain types of data which requires a continual data flow (e.g. multimedia, streaming video/audio). <-QUOTE}

Carver
January 4th, 2007, 01:26 PM
IMON/IMON SETUP/HTTP/Client compatibility

□Switch to pasive (compatible) mode for files larger than 252048 kB

□Switch to pasive (compatible) mode for files being downloaded that take more than 1500 seconds

These setting should help. Put a checkmark in the box.

huangzhengliang
January 5th, 2007, 08:37 AM
Even if I have it on passive (compatible) mode and a virus gets undetected at the time of download, it will be when my scheduled weekly full system scan comes on?

ASpace
January 5th, 2007, 08:54 AM
Even earlier . If IMON does not detect something AMON will be there to put that nasty malware in the quarantine ;)