View Full Version : questions for you dr web users
lodore
February 2nd, 2007, 10:55 AM
hello,
i tried dr web on my test pc today.
first off i tryed to install all componants but it got stuck on the mail guard and i had to stop the install. i then went to add/remove programs and it only wanted to install and uninstall so i had to do a manual registtry clean and delete the folder manually. but dr web was still listed in program files.
but you know how crappy windows ME is;D
probaly one bad install after 1000's of sucessful installs.
i will finish off later with some questions
lodore
xuerge
February 2nd, 2007, 11:26 AM
Hi,lodore
Compared with you,i didn't get any serious trouble with dr.web.Since i didn't need a mail-guard,i didn't install that componet.
Dr.Web worked perfectly on my pc!High detection rate,with few fp's.However,i must say that Dr.Web's CPU usage is quite a problem.It used to increase to 100% suddenly when i downloaded .rar files from websites.When i had excluded .rar files in real-time protection,the CPU usage would sometimes increase to more than 90% when unraring .rar files.
Another problem was that Dr.Web's real-time protection would not report some viruses when i opened some folders which contained viruses.But on-demand scanning it reported indeed.
xuerge
fredra
February 2nd, 2007, 01:24 PM
Hi iodore and xuerge
There are a few experienced DR WEB users who should drop in to address your concerns...CSJ or SHORTY1 (to name a few).
They seem to be very knowledgeable with the functionality of the good Doctor.
I use DR. Web, however, I have not seen the problems you have outlined (that does not mean it does not happen), but thoce two contributors will be able to provide some assistance.
Cheers :)
lodore
February 2nd, 2007, 02:00 PM
ok in the end it installed fine without installing the mail guard.
but it seems to silent for me and i want to know a few things.
1. if the normal on access scanner blocks any malware how can i get it to popup with an alert?
i checked the log and it told me that 3 infections where found and blocked but didnt tell me what.
i know it was just 3 eicar test viruses but i would like it setup to popup with a message with options on what to do or just a box telling me so and so virus was blocked rather than just how many where found and stopped in numbers. some screenshots would be nice.
btw im using the 4.33 beta from the beta login site.
also where is the spidergate?
ive got spider guard,spider updater,dr web scanner(on demand) and the one to set tasks.
its quite nice now i know i can rightr click the spider guard and open each menu from that one rigtht click menu.
thanks
lodore
Blackcat
February 2nd, 2007, 04:28 PM
{QUOTE-> im using the 4.33 beta from the beta login site. <-QUOTE}
With any beta some initial problems are to be expected!
{QUOTE-> i know it was just 3 eicar test viruses but i would like it setup to popup with a message with options on what to do or just a box telling me so and so virus was blocked rather than just how many where found and stopped in numbers. <-QUOTE}
SpIDerGuard should pop up with a Window saying that an infection has been found and then it will give you a choice of options. At least it does do this with any malware in the full version. But even the beta should do this.
If you want to give Dr Web a proper testing I would recommend the trial version over any beta.
Have you uninstalled completely your previous AV's that you used and not just disabled them and carried out a registry clean. IME, Dr Web is very sensitive to previously installed AV's.
And SpIDerGate is not present in the latest beta.
Blackcat
February 2nd, 2007, 04:40 PM
SpIDerGuard full version and Eicar test-file; plenty of options and on default Settings of Actions of SG.
lodore
February 2nd, 2007, 05:15 PM
that box only came up when it was in system restore.
i ran an ondemand scan of the file and it found the eicar test virus then the box that you show me comes up showing the eicar test virus in system restore.
btw i renamed the file to eicar.cab and another one i renamed eicar.com
i had scan archives scanning on.
lodore
Blackcat
February 2nd, 2007, 06:02 PM
Select archives in the File Types settings of SG and the on-access scanner Window comes up immediately with eicar.com and the two eicar.com zip files.
lodore
February 2nd, 2007, 06:18 PM
any screen shots of the settings you use?
lodore
Blackcat
February 2nd, 2007, 06:33 PM
lodore, I am just using the default settings.
But as stated previously, I would still recommend you try the present trial full version rather than any beta.
lodore
February 2nd, 2007, 06:43 PM
ok then.
do dr web have uninstaller tools?
or do i juts uninstall in add/remove programs then install a realaased version?
lodore
Blackcat
February 2nd, 2007, 06:52 PM
No specific removal tools so just use the program's uninstaller from the start menu entry.
But since it is a beta I would also, after rebooting, remove the Dr Web entry in the Programs folder and then run a good registry cleaner after the uninstall. Then you can install the demo (http://solutions.drweb.com/home/demo/) version.
Bob D
February 2nd, 2007, 07:07 PM
{QUOTE-> i checked the log and it told me that 3 infections where found and blocked but didnt tell me what.
i know it was just 3 eicar test viruses but i would like it setup to popup with a message <-QUOTE}
This caused some raised eyebrows here as well. (Running 4.33 non-beta).
I thought maybe it was just an anomaly here, or I was the only one that experienced it.
{QUOTE-> SpIDerGuard should pop up with a Window saying that an infection has been found and then it will give you a choice of options <-QUOTE}
Apparently if your Spider Guard "Actions" settings are:
Infected Objects:
Primary Action: Cure
What to do if action failed: Move to quarantine
In such cases, it seems infected objects are moved (quiet as a spider) to your quarantine file without a peep.
Call me old fashioned, but I would REALLY like to know if an infected file has been found.
Workaround:
What to do if action failed: Report
I may post on the Dr Web forum, as I found this lack of infection notice disconcerting.
I CAN see SOME rationale to this logic, however, i.e.: on your kid's puter. You really DON'T want them to make any potentially harmful decisions.
Infected = quarantine. NO user interaction or override of DW's detection.
Blackcat
February 3rd, 2007, 02:44 AM
{QUOTE->
Apparently if your Spider Guard "Actions" settings are:
Infected Objects:
Primary Action: Cure
What to do if action failed: Move to quarantine
In such cases, it seems infected objects are moved (quiet as a spider) to your quarantine file without a peep.
Call me old fashioned, but I would REALLY like to know if an infected file has been found.
Workaround:
What to do if action failed: Report
<-QUOTE}
But since the default Action setting for Infected Objects is REPORT, then all new users should see a SpIDerGuard warning Window.
It is much safer using any AV to make sure that the default settings are set to some sort of user Interaction.
Blackcat
February 3rd, 2007, 03:00 AM
{QUOTE-> I may post on the Dr Web forum, as I found this lack of infection notice disconcerting.
I CAN see SOME rationale to this logic, however, i.e.: on your kid's puter. You really DON'T want them to make any potentially harmful decisions.
Infected = quarantine. NO user interaction or override of DW's detection. <-QUOTE}
But I can see your point here, Bob. I have the same problem with my kids; they would not know what to do with any report Window popping up.
lodore
February 3rd, 2007, 06:18 AM
the thing is nod32 does the same thing if set to clean automatically.
with kis6.0 if a virus is got rid of automatically then it comes up with a red popup at the bottom of the screen saying something like virus detected, cleaned. or cleaned failed, delete sucucess full.
lodore
Blackcat
February 3rd, 2007, 06:36 AM
lodore,
are you seeing the popup malware Window of SpiderGuard now with the beta version?
lodore
February 3rd, 2007, 06:56 AM
yes I am on default settings.
i downloaded the demo dr web from the link you gave.
oddly thou it still got stuck on installed spider guard.
but if i installed it without spider guard after uninstalling and using a decent registry cleaner then it installs fine.
Thanks blackcat
lodore
C.S.J
February 3rd, 2007, 06:57 AM
lodore,
spiderguard settings:
all files and email files should be ticked, do not tick archives.
leave the rest on default.
scanner settings:
all files, tick archives and email.
infected objects: cure
incurable: delete
suspicious: move
achives: report
mail: report
containers: report
adware: delete
dialers: delete
jokes: delete
riskware: report
hacktools: delete
those are the settings i use lodore.
Blackcat
February 3rd, 2007, 07:44 AM
{QUOTE-> lodore,
spiderguard settings:
all files and email files should be ticked, do not tick archives.
<-QUOTE}
Chris,
It is probably better for any Dr Web newbies reading this thread to state that these are your preferred selections and not definite recommended settings.
C.S.J
February 3rd, 2007, 08:01 AM
actually it is recommended settings blackcat,
there are no limits on archive scanning, if you enable it in guard and download a 500mb pc demo etc, your spiderguard will scan the archive causing your machine to hang for 10 mins, as it stands now, you dont need that feature ticked, and it is recommended you do not if you download large archive files such as pc demos.
this particular setting was recommended to me from the dr.web team, serge popov because i do download large archive files.
Blackcat
February 3rd, 2007, 09:04 AM
{QUOTE-> actually it is recommended settings blackcat,
this particular setting was recommended to me from the dr.web team, serge popov because i do download large archive files. <-QUOTE}
Agreed. These are the best (recommended) settings for the way you use your machine.
But I was talking about general recommended settings, in particular the tick all files and email files. So initially, for a newbie, it may be better to stay with the default settings of not selecting all files, emails and archives. Because of the potential general hit on performance of real-time archive scanning I agree that the default for these files should be kept as it is i.e do not scan archives. No argument there.
But, IMO, all new Dr Web users should stay with the default settings at first and only change these if they feel the need to for their particular system. For example, with regular on-demand scans and scanning any new downloaded files from the context menu, I feel safe just using the scan by format. In contrast you prefer an all file settings. Horses for courses ;)
In fact Dr Web's CEO recommended the default settings by format to me; the scan option he uses on his machine :D
C.S.J
February 3rd, 2007, 09:21 AM
i dont agree,
spiderguard: scan by format and scan all files makes ZERO difference in system performance,no extra ram usage, no extra cpu usage, so why would one select a less-secure option?
archives can be selected for spiderguard, but as i mentioned, if you plan on download large .rars or .zips, i dont recommend it at all, so i turn it off..... if you do, your system will hang after download is complete.
Serge Popov
February 3rd, 2007, 10:40 AM
{QUOTE->
Apparently if your Spider Guard "Actions" settings are:
Infected Objects:
Primary Action: Cure
What to do if action failed: Move to quarantine
In such cases, it seems infected objects are moved (quiet as a spider) to your quarantine file without a peep.
Call me old fashioned, but I would REALLY like to know if an infected file has been found.
Workaround:
What to do if action failed: Report
I may post on the Dr Web forum, as I found this lack of infection notice disconcerting.
I CAN see SOME rationale to this logic, however, i.e.: on your kid's puter. You really DON'T want them to make any potentially harmful decisions.
Infected = quarantine. NO user interaction or override of DW's detection. <-QUOTE}
With SpIDer Guard for Windows NT you can actually receive notifications. In order to enable notifications:
1) Open drweb32.ini in a text editor (notepad would be ok) and add/change "Acknowledge" key in "[SpIDerGuardNT]" section. It must be set to "Yes".
2) Open SpIDer Guard control applet (tray menu -> control). Open "Notifications" tab and select events you wish to be notified.
This does not work for SpIDer Guard for Windows9x.
Serge Popov
February 3rd, 2007, 10:44 AM
{QUOTE->
there are no limits on archive scanning,
<-QUOTE}
You may wish to use these drweb32.ini options to limit archive scanning:
[SpIDerGuardNT]
MaxFileSizeToExtract
MaxCompressionRatio
CompressionCheckThreshold
C.S.J
February 3rd, 2007, 10:47 AM
cheers serge,i know that.
rather just leave it off for the guard :)
Bob D
February 3rd, 2007, 10:50 AM
Good to hear from you Serge
{QUOTE-> With SpIDer Guard for Windows NT you can actually receive notifications. In order to enable notifications:
1) Open drweb32.ini in a text editor (notepad would be ok) and add/change "Acknowledge" key in "[SpIDerGuardNT]" section. It must be set to "Yes".
<-QUOTE}
I thought there must be a variable in the .ini file.
Will try it when I have time.
Thanx for the heads-up.
Bob D
February 3rd, 2007, 02:19 PM
{QUOTE-> Serge Popov
1) Open drweb32.ini in a text editor (notepad would be ok) and add/change "Acknowledge" key in "[SpIDerGuardNT]" section. It must be set to "Yes". <-QUOTE}
It's set to "Acknowledge Yes" by default
{QUOTE-> 2) Open SpIDer Guard control applet (tray menu -> control). Open "Notifications" tab and select events you wish to be notified. <-QUOTE}
So THAT'S it!
I naively assumed "When to send a notification" only applied to remote recipients via email / across network.
Thanx
C.S.J
February 3rd, 2007, 02:28 PM
your notification settings if enabled show things like this........
http://show.imagehosting.us/show/1929488/0/nouser_1929/T1_-1_1929488.JPG (http://www.imagehosting.us/index.php?action=show&ident=1929488)
lodore
February 3rd, 2007, 02:33 PM
thats what i wanted to see thanks for showing the notification thing chris.
lodore
C.S.J
February 3rd, 2007, 03:00 PM
no problem lodore,
if you have your spiderguard settings set correctly, you will never ever see the spiderguard box in the centre of the screen with the options such as shutdown etc, which one user complained he didnt like.
that box will only show if you have anything set to 'report' in your spiderguard settings, if you dont, and you enable notifications, it just pops up at the bottom and performs the action you stated automatically, as shown in the above screenshot.
hope that answers the question.
lodore
February 3rd, 2007, 03:03 PM
it sure does answer my question.
i always like av's to clean automatically but want a notfication about what it found and what it did with it.
but i didnt play with it much since i was to busy trying out linux live cd's lol
lodore
C.S.J
February 3rd, 2007, 03:14 PM
a few more examples of the notifications and spiderguard settings,
infected object (rootkit detection) - cure
http://show.imagehosting.us/show/1929553/0/nouser_1929/T0_-1_1929553.JPG (http://www.imagehosting.us/index.php?action=show&ident=1929553)
Hacktools - delete
http://show.imagehosting.us/show/1929554/0/nouser_1929/T0_-1_1929554.JPG (http://www.imagehosting.us/index.php?action=show&ident=1929554)
suspicious files - move to quarentine
http://show.imagehosting.us/show/1929556/0/nouser_1929/T0_-1_1929556.JPG (http://www.imagehosting.us/index.php?action=show&ident=1929556)
as you can see, if set up right, no report box in the centre of the screen, and depending on your settings, it does whatever you want it to, for the malware-type threat, pretty cool really, this is the way i prefer and have it set up myself, i prefer the automatic way, than the report and choose way.
although some others will prefer to choose as it happens with the report box, either way... it does the job :D
by the way, this is the released version but im sure its on the latest beta aswell.
lodore
February 3rd, 2007, 03:24 PM
cool
do you have the spidermail installed?
because my install would get stuck if i installed it with the spidermail the isntall would get stuck.
but if i uninstalled and unticked spidermail it installed fine.
also whats the different between the scanning mail tickbox in the spiderguard and spidermail?
lodore
C.S.J
February 3rd, 2007, 03:30 PM
sure do,
never had problems with install or uninstall of dr.web, ever.
so dont really know what to suggest to you for the spidermail.
when i tried to send an email to my address including a virus, it was spiderguard not spidermail that popped up with the notification when trying to send OUTGOING mail to myself.
if it does its job, im not really bothered :)
lodore
February 3rd, 2007, 03:54 PM
I was installing it on windows Me thou and it is an unstable OS.
but in the past i installed dr web beta on the same pc same os and the spidermail installed fine.
but the beta and the realased version spidermail now gets stuck lol.
so i installed it without
lodore
C.S.J
February 3rd, 2007, 04:24 PM
if you have installed the beta on it before and now it doesnt install, it sounds like a corrupt windows.
maybe try cleaning all entries of dr.web and downloading the package again, if it still doesnt have it, its a definate corrupt windows.
lodore
February 3rd, 2007, 05:55 PM
it did ask me for the windows cd at one point lol.
but hey what do i expect with windows ME;D
i could reinstall windows me at some point.
lodore
bazz
February 5th, 2007, 10:36 AM
{QUOTE-> lodore,
spiderguard settings:
all files and email files should be ticked, do not tick archives.
leave the rest on default.
scanner settings:
all files, tick archives and email.
infected objects: cure
incurable: delete
suspicious: move
achives: report
mail: report
containers: report
adware: delete
dialers: delete
jokes: delete
riskware: report
hacktools: delete
those are the settings i use lodore. <-QUOTE}
Thx C.S.J !!!!!!!
Finally i have "Perfect Settings :D"
C.S.J
February 5th, 2007, 02:17 PM
and.......
right click the spider, control > notifications.
tick all 3 if you want it to do everything automatically (check your automatic spiderguard settings for this to make sure each file is handled accordingly)
lodore
February 5th, 2007, 02:52 PM
@chris can you show me your drweb.ini file when you get the notifications in the system tray?
and the options in the program when you have the notifications in the system tray
thanks
lodore
C.S.J
February 5th, 2007, 03:03 PM
not asking much are you lodore,
[Windows]
LngFileName = ""
ScanFiles = All
FilesTypes = EXE,COM,DLL,SYS,VXD,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,386,FON,DO?
FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,PP?,OBJ,LIB,PIF,HLP,MD?,INI,MBR
FilesTypes = IMG,CSC,CPL,MBP,SH,SHB,SHS,SHT*,CHM,REG,XML,PRC,ASP,LSP,MSO,OBD
FilesTypes = THE*,NWS,SWF,MPP,OCX,VS*,DVB,CPY,BMP,RPM,ISO,DEB,AR?,ZIP,R??,GZ
FilesTypes = Z,TGZ,TAR,TAZ,CAB,LHA,LZH,BZ2,MSG,EML,7Z,CPIO,TBB
UserMasks = "*.EXE","*.COM","*.DLL","*.SYS","*.VXD","*.OV?","*.BAT","*.BIN"
UserMasks = "*.DRV","*.PRG","*.BOO","*.SCR","*.CMD","*.386","*.FON","*.DO?"
UserMasks = "*.XL?","*.WIZ","*.RTF","*.CL*","*.HT*","*.VB*","*.JS*","*.INF"
UserMasks = "*.PP?","*.OBJ","*.LIB","*.PIF","*.HLP","*.MD?","*.INI","*.MBR"
UserMasks = "*.IMG","*.CSC","*.CPL","*.MBP","*.SH","*.SHB","*.SHS","*.SHT*"
UserMasks = "*.CHM","*.REG","*.XML","*.PRC","*.ASP","*.LSP","*.MSO","*.OBD"
UserMasks = "*.THE*","*.NWS","*.SWF","*.MPP","*.OCX","*.VS*","*.DVB","*.CPY"
UserMasks = "*.BMP","*.RPM","*.ISO","*.DEB","*.AR?","*.ZIP","*.R??","*.GZ"
UserMasks = "*.Z","*.TGZ","*.TAR","*.TAZ","*.CAB","*.LHA","*.LZH","*.BZ2"
UserMasks = "*.MSG","*.EML","*.7Z","*.CPIO","*.TBB"
HeuristicAnalysis = Yes
CheckPackedFiles = Yes
CheckArchives = Yes
CheckEMailFiles = Yes
InfectedFiles = Cure
SuspiciousFiles = Move
IncurableFiles = Delete
ActionAdware = Delete
ActionDialers = Delete
ActionJokes = Delete
ActionRiskware = Move
ActionHacktools = Delete
ActionInfectedArchive = Move
ActionInfectedMail = Move
ActionInfectedContainer = Delete
RenameFilesTo = #??
MoveFilesTo = "infected.!!!"
ExcludePaths =
ExcludeFiles =
VirusBase = "*.vdb"
LogToFile = Yes
OverwriteLog = No
LogScanned = Yes
LogPacked = Yes
LogArchived = Yes
LogFileName = "C:\Documents and Settings\Chris Jackson\DoctorWeb\DrWeb32w.log"
LogFormat = ANSI
ShowProgressBar = Yes
ScanPriority = 50
TestMemory = Yes
TestStartup = Yes
AutoSaveSettings = Yes
ScanSubDirectories = Yes
PromptFloppy = No
TestBootSectors = Yes
PromptOnAction = No
PlaySounds = No
UseDiskForSwap = Yes
AlertWav = "alert.wav"
CuredWav = "cured.wav"
DeletedWav = "deleted.wav"
RenamedWav = "renamed.wav"
MovedWav = "moved.wav"
FinishWav = "finish.wav"
ErrorWav = "error.wav"
UpdateAllFiles = No
UpdateVirusBasesOnly = No
OnUpdateRun = ""
UpdateRebootMode = prompt
ScanFDD = No
ScanHDD = Yes
ScanCD = No
ScanNet = No
LimitLog = Yes
MaxLogSize = 512
RestoreAccessDate = No
WaitAfterScan = No
LogStatistics = Yes
EnableDeleteArchiveAction = No
DisableHotReconfigure = No
[SpIDerGuardNT]
DisableEnhancedProtection = No
LngFileName = ""
FilesTypes = EXE,COM,DLL,SYS,VXD,OV?,BAT,BIN,DRV,PRG,BOO,SCR,CMD,386,FON,DO?
FilesTypes = XL?,WIZ,RTF,CL*,HT*,VB*,JS*,INF,PP?,OBJ,LIB,PIF,HLP,MD?,INI,MBR
FilesTypes = IMG,CSC,CPL,MBP,SH,SHB,SHS,SHT*,CHM,REG,XML,PRC,ASP,LSP,MSO,OBD
FilesTypes = THE*,NWS,SWF,MPP,OCX,VS*,DVB,CPY,BMP,AR?,ZIP,R??,GZ,Z,TGZ,TAR,TAZ
FilesTypes = CAB,LHA,LZH,BZ2,MSG,EML,7Z,TBB
UserMasks = "*.EXE","*.COM","*.DLL","*.SYS","*.VXD","*.OV?","*.BAT","*.BIN"
UserMasks = "*.DRV","*.PRG","*.BOO","*.SCR","*.CMD","*.386","*.FON","*.DO?"
UserMasks = "*.XL?","*.WIZ","*.RTF","*.CL*","*.HT*","*.VB*","*.JS*","*.INF"
UserMasks = "*.PP?","*.OBJ","*.LIB","*.PIF","*.HLP","*.MD?","*.INI","*.MBR"
UserMasks = "*.IMG","*.CSC","*.CPL","*.MBP","*.SH","*.SHB","*.SHS","*.SHT*"
UserMasks = "*.CHM","*.REG","*.XML","*.PRC","*.ASP","*.LSP","*.MSO","*.OBD"
UserMasks = "*.THE*","*.NWS","*.SWF","*.MPP","*.OCX","*.VS*","*.DVB","*.CPY"
UserMasks = "*.BMP","*.AR?","*.ZIP","*.R??","*.GZ","*.Z","*.TGZ","*.TAR"
UserMasks = "*.TAZ","*.CAB","*.LHA","*.LZH","*.BZ2","*.MSG","*.EML","*.7Z"
UserMasks = "*.TBB"
ScanFiles = All
HeuristicAnalysis = Yes
CheckPackedFiles = Yes
CheckArchives = No
CheckEMailFiles = Yes
InfectedFiles = Cure
SuspiciousFiles = Move
IncurableFiles = Delete
ActionAdware = Delete
ActionDialers = Delete
ActionJokes = Delete
ActionRiskware = Move
ActionHacktools = Delete
ActionInfectedArchive = Report
ActionInfectedMail = Move
ActionInfectedContainer = Move
ActionIfRenameFailed = Delete
ActionIfMoveFailed = Delete
ActionIfDeleteFailed = Lock
ActionIfReportFailed = Lock
RenameFilesTo = #??
MoveFilesTo = "infected.!!!"
ExcludePaths =
ExcludeFiles =
VirusBase = "*.vdb"
LogToFile = Yes
OverwriteLog = No
LogScanned = No
LogPacked = Yes
LogArchived = Yes
LogFormat = ANSI
TestMemory = Yes
TestStartup = Yes
PromptOnAction = Yes
PlaySounds = No
UseDiskForSwap = Yes
LimitLog = Yes
MaxLogSize = 512
RestoreAccessDate = No
UpdateFlags = "drwtoday.vdb"
UpdatePeriod = 1m
GuardMode = Smart
ScanBootOnShutDown = Yes
LogStatistics = Yes
Acknowledge = Yes
AllowWildcards = No
AllowRelativeFileNames = No
EnableDeleteArchiveAction = No
DisableHotReconfigure = No
[DOS]
ScanFiles=All
LngFileName=""
[SpIDerMailHome]
LngFileName=
HeuristicAnalysis=Yes
CheckArchives=Yes
CheckPackedFiles=Yes
CheckAdware=Yes
CheckDialers=Yes
CheckJokes=Yes
CheckRiskware=Yes
CheckHacktools=Yes
VirusActivityControl=Yes
ScanTimeout=250
MaxFileSizeToExtract=30720
MaxCompressionRatio=Infinite
MaxArchiveLevel=64
ShowAlerts=Yes
ActionInfected=Delete
ActionSuspicious=Move
ActionNotChecked=Skip
DeleteMessagesOnServer=Yes
InsertXAntiVirus=Yes
PathForMovedFiles=Infected.!!!
EnginePath=
VirusBasesPath=
MaximumLoadEngines=10
PreloadEngines=1
UnusedEngineUnloadTimeout=420
UpdateFlag=drwtoday.vdb
UpdatePeriod=300
LogFileName=%USERPROFILE%\DoctorWeb\spiderml.log
EnableLog=Yes
EnableLogScanInfo=Yes
MaximumLogSize=500
EnableIconAnimation=Yes
LimitLog=Yes
HideIcon=Yes
NoBalloons=No
HookModeAuto=Yes
HookCheck=Yes
Hook1=*:143
Hook2=*:119
Hook3=*:110
Hook4=*:25
---------------------
http://show.imagehosting.us/show/1933660/0/nouser_1933/T1_-1_1933660.JPG (http://www.imagehosting.us/index.php?action=show&ident=1933660)
Infected: Cure (Primary Action - uses your notification for automatic removal)
suspicious: Move to Quarentine
adware: delete
delete the rest too, apart from Riskware which i have set to Move.
remember when changing PRIMARY ACTION, to click change and THEN apply or it will not be applied.
---------------------
to enable notifications:
Right Click spider > Control > Notifications
click the 3 at the top,
http://show.imagehosting.us/show/1933657/0/nouser_1933/T1_-1_1933657.JPG (http://www.imagehosting.us/index.php?action=show&ident=1933657)
there you go, ;D
lodore
February 5th, 2007, 03:22 PM
thanks chris
it seems i just have to change the log file name because i dont have C:documents and settings/chrisjackson folder on my windows ME pc=D
btw the menus look alot nicer in xp than they do in windows ME
lodore
C.S.J
February 5th, 2007, 03:24 PM
lol well yeah, ME sucks....
btw dell has said it could take 4 weeks - 8 weeks for my vista, im furious with em!
lodore
February 5th, 2007, 03:26 PM
well duh windows Me sucks
omg 6-8weeks
well look on the plus side at least by that time drweb could be made vista compatible and you wont have to use another AV while waiting for the dr if you got it say tomorrow.
the waiting is annoying but the last few times ive had to wait ages for stuff i get extra stuff
lodore
C.S.J
February 5th, 2007, 03:29 PM
im not the most patient of people,
i want my vista and my vista dr.web, it should all be out and delivered now, others have done ::)
lodore
February 5th, 2007, 03:38 PM
have you emailed drweb to ask and say where the hell is vista compatible drweb!?
lodore
C.S.J
February 5th, 2007, 03:42 PM
nah cant be bothered to, will only be told to just wait.
although serge did say weeks ago that it was already 99% working,
i thought it would have arrived by now.
vBulletin® Copyright ©2000-2008, Jelsoft Enterprises Ltd.