Hello .650

[WilliamP]

NOD32 .650 has been released. How do I find the release notes?

[solcroft]

I'm waiting only for one thing: the inclusion of the Win32/Statik heuristics algorithm into the other scanning modules.

Hope this is it.

[proactivelover]

good new's

[lucas1985]

{QUOTE-> I'm waiting only for one thing: the inclusion of the Win32/Statik heuristics algorithm into the other scanning modules. <-QUOTE}
Have you tested them? How good are they?

[piranha]

{QUOTE-> NOD32 .650 has been released. How do I find the release notes? <-QUOTE}


.650 is released yes but only in english at this time. Seems too soon for the release notes :-\ Anyway, they dont say all about new release anyway..... so :dry:

[Thankful]

http://www.eset.com/support/news.php

{QUOTE-> ESET Smart Security and ESET NOD32 Antivirus v3.0.650.0 have been released in Czech, Slovak and English. This release contains the following changes:

• Fixed problem with updating from a mirror http server when NTLM authentication is used.
• Fixed problem with display of license expiration date.
• Fixed integration issue with Microsoft Windows Mail under Windows Vista.
• Fixed firewall issues. <-QUOTE}

[agoretsky]

Hello,

Information about ESET Smart Security and ESET NOD32 Antivirus v3.0.650.0 can be found in the Support News (http://www.eset.com/support/news.php) section of ESET's web site.

Regards,

Aryeh Goretsky

[solcroft]

{QUOTE-> How good are they? <-QUOTE}
Moderately. Nothing to get excited over in terms of results, but heck, NOD32 needs all the help it can get.

I'm having somewhat of a hard time finding samples that trigger this algorithm, and testing it is annoying because I have to upload the samples somewhere and download them. From what little I've seen, I'm speculating that it adds detection for certain packer combinations (whether it's an unpacker or packer detection I have no idea) that NOD32 currently chokes on. It's been catching mostly fake codecs and samples that were later detected as Win32/Pacex.Gen variants, for the time being.

[lucas1985]

Thanks solcroft :)
Pacex and Genetik detections have become fairly common.

[proactivelover]

eset are always on 1st place in heuristics

[solcroft]

{QUOTE-> eset are always on 1st place in heuristics <-QUOTE}
Hardy har har.

Tell that to Sophos and Avira. F-PROT looks set to kick ESET's behind as well. And of course, let's not even mention Ikarus...

[proactivelover]

Sophos,AVIRA,F-PROT AND IKARUS have lot of FP'S too

[solcroft]

{QUOTE-> Sophos,AVIRA,F-PROT AND IKARUS have lot of FP'S too <-QUOTE}
Oh, really? And who's the judge of "many"? Let's be honest: you don't use those products, and you've never seen any.

Take Avira during the last AV-C retrospective test. 3000+ more detections for only 16 more FPs. I think the verdict is clear.

[ronjor]

{QUOTE-> the verdict is clear <-QUOTE}It is clear. This is off topic for these forums.

[Ade 1]

{QUOTE-> Oh, really? And who's the judge of "many"? Let's be honest: you don't use those products, and you've never seen any.

Take Avira during the last AV-C retrospective test. 3000+ more detections for only 16 more FPs. I think the verdict is clear. <-QUOTE}

Go and use them then.

[solcroft]

{QUOTE-> It is clear. This is off topic for these forums. <-QUOTE}
In that case, then so are comments like those found in post #10.

[ronjor]

Let's get back on topic then.

[solcroft]

{QUOTE-> Go and use them then. <-QUOTE}
I think we can discuss very simple and obvious facts without having to resort to defensive childishness. Right?

[solcroft]

{QUOTE-> Let's get back on topic then. <-QUOTE}
Very well.

[DavidCo]

Back on topic
As 0.650 is available for download do I......
1. download and install over?
2. or will it be rolled out as an automatic update?

[ASpace]

Installer file (the MSI) for build 3.0.650 is 19.5 MBs , smaller than 3.0.642 , which is bigger (as far as I can remember) ;D

[DavidCo]

HiTech_boy

0.642 is 19.8Mb on disk, perhaps some code optimisation etc for 0.650
So is your advice to download and install over???

OK, who's already done and is it stable.

[prius04]

3 installs, overwriting .642, here - XP Home, Pro, and MCE - stable, no issues. :)

I got 19.985 MB for the installer file, though. ???

[DavidCo]

prius04
The files sizes are about the same then.
The file size 'on disk' is greater than the file size of the installer.
Disk manufacturers calulate meg, gigs etc in round numbers (1000's etc) as opposed to 'real' size of 1024. It makes the disks seem bigger;)
So - 19.8 x 1000/1024 = 19.4 approx.

;D

[prius04]

DavidCo,
Quite right! Thanks for spelling that out. :)


Anyway, here's a list of the changes in .650:

• Fixed problem with updating from a mirror http server when NTLM authentication is used.
• Fixed problem with display of license expiration date.
• Fixed integration issue with Microsoft Windows Mail under Windows Vista.
• Fixed firewall issues.

[ablatt]

I don't believe any of the module dates or versions changed from 642.

At least not that I can see from right-clicking on the tray icon and choosing 'About'.

For example the Advanced Heuristics module is still dated 20080212.

[prius04]

Interesting. I didn't check too closely but I recall that .642 was released toward the latter part of February and a bunch of the files in the ESET directory, after installing .650, appear to be dated 3/13.

[GAN]

Anyone know if the fix for Event ID:6004 is included with this release?