PDA

View Full Version : Server crawls to a halt scanning large files with AMON


itpartners
May 27th, 2007, 09:23 PM
Hi everyone,

We have a server running NOD32 (tested 2.5 and 2.7). It has some large online library/infobase files that are around 600MB. If we don't exclude these, NOD32 will scan the files and spend lots of CPU time doing it, slowing access to to the file and also potentially slowing down other operations on the server.

We have of course excluded the files (interesting side: if a program access C:\PROGRA~1\file, a NOD32 exclusion for "C:\Program Files\file" won't exclude it!), but wonder what in particular about AMON's scanning causes this delay?

Thanks
Craig

HiTech_boy
May 28th, 2007, 12:55 AM
It depends on the file types . If they are some which are emulated by the advanced heuristics , it will take some more time but protection is better .

You can very easily exclude the folder(s) which need not to be scanned or play with other options like making AMON not scan all file (but selected extensions) or disabling run-time packers , just to see if there is a difference.

Marcos
May 28th, 2007, 02:32 AM
A slowdown shouldn't occur if files are being open or accessed. On create, AMON is set to use Advanced Heuristics for an in-depth code emulation as well as runtime archive / sfx archive extraction which may cause a slowdown. You can try playing with these options, but disabling AH and runtime packers permanently is not recommended.