View Full Version : How good is NOD32 V3 Spyware/Malware detection
Albinoni
July 25th, 2008, 09:40 AM
I have and using Superantispyware which I think is very good but at the same time I also have NOD32 V3, should I uninstall Superantispyware and just use NOD32 V 3.0 also as my antispyware detection or also keep Superantispyware.
MrGSM
July 25th, 2008, 09:58 AM
Superantispyware work in realtime detection?
Thankful
July 25th, 2008, 12:16 PM
You can run NOD32 in real time and Superantispyware Free on demand like many forum members.
ambient_88
July 25th, 2008, 12:32 PM
{QUOTE-> Superantispyware work in realtime detection? <-QUOTE}
SUPERAntispyware has a professional version, which includes real-time protection.
SoCalReviews
July 25th, 2008, 12:46 PM
I kind of like the combination of...
NOD v3.x or v2.7x
ZAP
SAS Pro
...You could consider simply getting the subscription license for SAS Pro for the real time ASW protection, scheduled scans and automatic updating. IMO the lifetime subscription is the deal of the century as long as it is available.
Kosak
July 25th, 2008, 01:56 PM
Hello,
NOD32 and firewall is suficient resident protection. You can use other on-demand scanner for check (free of charge), but there is no reason for buying antispywares, etc.
Regards
ambient_88
July 25th, 2008, 03:20 PM
{QUOTE-> Hello,
NOD32 and firewall is suficient resident protection. You can use other on-demand scanner for check (free of charge), but there is no reason for buying antispywares, etc.
Regards <-QUOTE}
I disagree. NOD32, as well as other AVs, does not provide sufficient protection anymore. A layered approach is necessary in order to maximize protection.
So yes, I strongly suggest that you keep SAS running in real-time.
InfinityAz
July 25th, 2008, 04:50 PM
I'm going to agree with ambient_88. While using NOD32 v3, I was infected for the second time in the last month.
In both cases, NOD32 caught the trojan but didn't stop the adware and spyware from infecting my system and causing problems. It wasn't able to successfully remove the infections but fortunately I had an image and was able to restore.
I am starting to lose faith in NOD, especially when Avast free was able to stop both infections cold. I was not running any additional AS at the time.
Kosak
July 25th, 2008, 05:07 PM
I have got samples, which aren't detected by Avast or other AV software. A lot of users think that spyware, which is detected by NOD isn't spyware, but trojan. It isn't true, because NOD signs spyware under "trojan" - Win32/Spy.%family%.%variant%. Another thing is detection of Registry keys/values by antispywares. NOD doesn't check it, but clean them after detection of file. When NOD doesn't detect spyware application, which communicate with remote pc, your firewall should inform you about that. Therefore I recommend use firewall only in interactive mode.
InfinityAz
July 25th, 2008, 08:29 PM
{QUOTE-> ...A lot of users think that spyware, which is detected by NOD isn't spyware, but trojan. It isn't true, because NOD signs spyware under "trojan" - Win32/Spy.%family%.%variant%. Another thing is detection of Registry keys/values by antispywares. NOD doesn't check it, but clean them after detection of file. ... <-QUOTE}
Kosak,
Thanks for the clarification. However, the adware and spyware did infect my machine and even after NOD said it removed it, it was present and running on reboot.
Kosak
July 25th, 2008, 08:48 PM
These threats have got many new variants every day and it isn't possible to catch everything. Follow this (http://www.wilderssecurity.com/showpost.php?p=1286558&postcount=14) post about adware XPAntivirus.
After download these types of malware used to write DLLs into BHO, Winlogon, etc. keys and download other files, so I recommend to scan computer in safe mode or use UnDLL (http://nod32.it/tools/undll.php). Undetected files you can send for analysis, here (http://training.eset.com/kb/index.php?option=com_kb&Itemid=29&page=articles&articleid=141) is guide. But you have to accept that analysis step-by-step of every received file is impossible.
ambient_88
July 25th, 2008, 09:57 PM
{QUOTE-> These threats have got many new variants every day and it isn't possible to catch everything. <-QUOTE}
That is why a layered approach is more important than ever. Having two or more defenses is better than one.
Ohmy
July 26th, 2008, 03:37 AM
{QUOTE-> That is why a layered approach is more important than ever. Having two or more defenses is better than one. <-QUOTE}
Does that include to everyone?
I don't really like layered approach, beacause my laptop isn't fast...
Someone
July 26th, 2008, 04:09 AM
Hi
{QUOTE-> Does that include to everyone?
I don't really like layered approach, beacause my laptop isn't fast... <-QUOTE}
I believe it's for everyone.
Kosak
July 26th, 2008, 08:48 AM
As I wrote "NOD32 and firewall is suficient resident protection. You can use other on-demand scanner for check (free of charge), but there is no reason for buying antispywares, etc.", in my opinion it's friendly solution.
When you check information about eg. Win32/PSW.OnLineGames, you discover that it collect information about you, so it's spyware too. :)
Albinoni
July 26th, 2008, 12:54 PM
{QUOTE-> I have got samples, which aren't detected by Avast or other AV software. A lot of users think that spyware, which is detected by NOD isn't spyware, but trojan. It isn't true, because NOD signs spyware under "trojan" - Win32/Spy.%family%.%variant%. Another thing is detection of Registry keys/values by antispywares. NOD doesn't check it, but clean them after detection of file. When NOD doesn't detect spyware application, which communicate with remote pc, your firewall should inform you about that. Therefore I recommend use firewall only in interactive mode. <-QUOTE}
I think what Kosak is saying here is true. A trojan by rights does not effect your PC but is used as a sneaky application/software or how you put it, to help put Spyware on your PC.
Basically they work in conjunction with one another and if there was no Trojan to help carry and pass the spyware there would be no spyware.
ambient_88
July 26th, 2008, 01:12 PM
{QUOTE-> I think what Kosak is saying here is true. A trojan by rights does not effect your PC but is used as a sneaky application/software or how you put it, to help put Spyware on your PC.
Basically they work in conjunction with one another and if there was no Trojan to help carry and pass the spyware there would be no spyware. <-QUOTE}
A system that is infected will be affected regardless of the type of malware. A trojan can help install malicious software, however, you have to understand that there are other types of trojan out there. Some does not aid in the installation of malicious software, rather they wreak havoc in the system by deleting/overwriting critical system files.
Woody777
July 26th, 2008, 10:42 PM
I have used NOD32 as my sole active spyware detection utility for the period of 1.5 years. In that time I have been infected by 1 or 2 spywarewares which were detected by a few free antispywares I have ,mostly Malware bytes anti malware. It is my feeling that pruchaseing an antispyware utility is waste of money & the use of antispyware scanners operateing in real time are a waste of memory. I think that the use of HIPS is by far more useful in detecting malware that any spyware utilitys if you are using NOD32.
acr1965
July 26th, 2008, 11:37 PM
I have used Nod32 2.7 in the past along with SAS Pro at the same time. During that time I had zero spyware and noticed no system impact. There never were any conflicts either. Now I run Avira Personal Premium alongside SAS Pro with the same results.
aakash
July 27th, 2008, 01:55 AM
{QUOTE-> Does that include to everyone?
I don't really like layered approach, beacause my laptop isn't fast... <-QUOTE}
You may want to try using Software Restriction Policies (SRP) to help strengthen your protection. This capability if built into Windows, so you don't need any third party utilities. Here is a link written by a MS MVP that helps set this up:
http://www.mechbgon.com/srp
emperordarius
July 27th, 2008, 02:38 AM
NOD32 has never been excellent at spyware, and can miss a few trojans often. So I reccomend using SUPERAnti Spyware, but you could also do some scans with BOClean, it may find some trojans that NOD32 misses.
ambient_88
July 27th, 2008, 01:50 PM
{QUOTE-> I have used NOD32 as my sole active spyware detection utility for the period of 1.5 years. In that time I have been infected by 1 or 2 spywarewares which were detected by a few free antispywares I have ,mostly Malware bytes anti malware. It is my feeling that pruchaseing an antispyware utility is waste of money & the use of antispyware scanners operateing in real time are a waste of memory. I think that the use of HIPS is by far more useful in detecting malware that any spyware utilitys if you are using NOD32. <-QUOTE}
The use of antispyware or any useful security utilities in real-time is not a waste of memory. I agree with you, though, about using HIPS instead of blacklist scanners. They are far more powerful and effective provided that the user configures them properly.
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.