PDA

View Full Version : to eset developers


outcast
November 30th, 2008, 10:32 AM
hi. i was using Eset smart security about 8 months ago. i test it very fast antivirus. but its cleaning feature very bad. i downloaded a rar file about 2gb. after download fnish i scanned that file for virus eset found 1 virus file in archive and i push clean. after that eset delete all archive.i lost 2gb archive and i obliget to download it again. kaspersky only delete virus file in rar, zip, etc.also eset can not clean registered activex or dll malware. kaspersky can delete them. also eset can not detect keyloggers (iclude legal keyloggers). eset firewall is not difference windows firewall. if you look the test results eset failed. also basic leak test eset didnt pass. antispam feature limited only microsoft junk email list.i have no idea about phishing feature.antispy feature is not good as eset said.while im using eset, it did not detect any spy, but i searched my computer with spybot it detect a few spy. i think eset should improve all features their product. isorry for my english i hope you can understand what i want to say. have a good works. thanks

stratoc
November 30th, 2008, 10:38 AM
i tested kav last week works ok apart from
overclock spu = bsod
tweeked graphics driver = bsod
overclock grx = bsod
any other security program = bsod

pick what you like, what works for you all system are different, if it doesn't work don't buy, simple as...

ASpace
November 30th, 2008, 11:37 AM
{QUOTE-> after download fnish i scanned that file for virus eset found 1 virus file in archive and i push clean. <-QUOTE}

It will be stupid for AV to do it . It will need to manually unpack the archive , clean what it can and then re-pack it . So , if it finds a threat inside , it will ask you and you decide what to do .

{QUOTE-> also eset can not clean registered activex or dll malware <-QUOTE}

v4 can

Here is a recent example of EAV v4 :
C:\WINDOWS\system32\byXNhhIb.dll - Win32/Adware.Virtumonde application - cleaned by deleting (after the next restart) - quarantined [1,2]

And after reboot , it has really been removed.

v4 has an extra driver called ESET Helper which handles the cleaning.


{QUOTE-> also eset can not detect keyloggers (iclude legal keyloggers). <-QUOTE}

You are wrong . ESET detects legal/commercial keyloggers as pottentially unsafe applications . You must manually enable detection of them.

h++p://www.ardamax.com/downloads/setup_akl.exe multiple threats connection terminated - quarantined Threat was detected upon access to web by the application: C:\Program Files\Internet Explorer\iexplore.exe.
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.exe probably a variant of Win32/KeyLogger.Ardamax potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.004 probably a variant of Win32/Keylogger.Ardamax potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.006 Win32/KeyLogger.Ardamax.NAL potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.007 Win32/KeyLogger.Ardamax potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » AKV.exe a variant of Win32/KeyLogger.Ardamax potentially unsafe application


{QUOTE-> also basic leak test eset didnt pass <-QUOTE}

Leak tests - nonsense . Read this carefully:
http://www.wilderssecurity.com/showthread.php?t=220332&highlight=leak+tests


{QUOTE-> antispam feature limited only microsoft junk email list <-QUOTE}

ESS v4 integrates in Outlook Express , Windows Live , Office Outlook , Thunderbird.

{QUOTE-> i have no idea about phishing feature. <-QUOTE}

Phishing protection is included as signatures . ESET can detect phishing emails , for example .

{QUOTE-> while im using eset, it did not detect any spy, but i searched my computer with spybot it detect a few spy <-QUOTE}

Spybot S&D is a dedicated antispyware application so it can detect some of the non-malicious entries . ESET will detect only malicius entries . For example - Spybot S&D will detect a spyware's folder or picture files (PNG , JPEG) as infected , even though a folder with a spyware name or pictures poses no security risk to your machine.

outcast
November 30th, 2008, 12:42 PM
{QUOTE-> It will be stupid for AV to do it . It will need to manually unpack the archive , clean what it can and then re-pack it . So , if it finds a threat inside , it will ask you and you decide what to do. <-QUOTE}

this method is really time lost. if archive include more than thousand file extracting and repacking will take an hour. right ?


{QUOTE-> v4 can

Here is a recent example of EAV v4 :
C:\WINDOWS\system32\byXNhhIb.dll - Win32/Adware.Virtumonde application - cleaned by deleting (after the next restart) - quarantined [1,2]

And after reboot , it has really been removed.

v4 has an extra driver called ESET Helper which handles the cleaning. <-QUOTE}

ok eset fixed their mistake :)


{QUOTE-> You are wrong . ESET detects legal/commercial keyloggers as pottentially unsafe applications . You must manually enable detection of them.

h++p://www.ardamax.com/downloads/setup_akl.exe multiple threats connection terminated - quarantined Threat was detected upon access to web by the application: C:\Program Files\Internet Explorer\iexplore.exe.
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.exe probably a variant of Win32/KeyLogger.Ardamax potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.004 probably a variant of Win32/Keylogger.Ardamax potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.006 Win32/KeyLogger.Ardamax.NAL potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » POL.007 Win32/KeyLogger.Ardamax potentially unsafe application
h++p://www.ardamax.com/downloads/setup_akl.exe » NSIS » AKV.exe a variant of Win32/KeyLogger.Ardamax potentially unsafe application <-QUOTE}

i enabled detecting potentially unsafe application. but eset cant detect legal keylogger (power spy keylogger)


{QUOTE-> Leak tests - nonsense . Read this carefully:
http://www.wilderssecurity.com/showthread.php?t=220332&highlight=leak+tests <-QUOTE}

i think they agree with me. eset firewall is not good


{QUOTE-> ESS v4 integrates in Outlook Express , Windows Live , Office Outlook , Thunderbird. <-QUOTE}

i mean eset hasnt got spam list (black list email sender)


{QUOTE-> Spybot S&D is a dedicated antispyware application so it can detect some of the non-malicious entries . ESET will detect only malicius entries . For example - Spybot S&D will detect a spyware's folder or picture files (PNG , JPEG) as infected , even though a folder with a spyware name or pictures poses no security risk to your machine. <-QUOTE}

you are right but maybe eset should make simple registry monitor

outcast
November 30th, 2008, 12:48 PM
{QUOTE-> i tested kav last week works ok apart from
overclock spu = bsod
tweeked graphics driver = bsod
overclock grx = bsod
any other security program = bsod

pick what you like, what works for you all system are different, if it doesn't work don't buy, simple as... <-QUOTE}

i dont mean kaspersky is better than eset. but kaspersky features better than eset like malware cleaning,antispam and also firewall (i think). but kaspersky is using much system resources. i want to use eset if they improve their product.

ASpace
November 30th, 2008, 12:55 PM
{QUOTE-> this method is really time lost. if archive include more than thousand file extracting and repacking will take an hour. right ? <-QUOTE}

Right . That is what I'm saying .

{QUOTE-> i enabled detecting potentially unsafe application. but eset cant detect legal keylogger (power spy keylogger) <-QUOTE}

If you believe something should be detected , simply send it to them - samples@eset.sk .



{QUOTE-> i think they agree with me. eset firewall is not good <-QUOTE}


No . Matousec tests aren't all dedicated to firewalls but include HIPS tests . That is why they aren't correctly testing all the products - some of them have no HIPS/behaviour analysis in realtime . Have you downloaded/executed some of them by yourself ?

outcast
November 30th, 2008, 01:38 PM
{QUOTE->
No . Matousec tests aren't all dedicated to firewalls but include HIPS tests . That is why they aren't correctly testing all the products - some of them have no HIPS/behaviour analysis in realtime . Have you downloaded/executed some of them by yourself ? <-QUOTE}

yes i downloaded this (http://www.matousec.com/projects/security-software-testing-suite/) and try to test eset. as i already said eset cant detect running keylogger and it can captured my keyboard typed (i set eset to high security). but im not expert for this. i have to trust to tester. because im using online banking and shopping. im really interesting eset because of i dont want to give my system resources to my security software. eset is really light and fast product i have tried

ASpace
November 30th, 2008, 03:48 PM
{QUOTE-> but im not expert for this. i have to trust to tester. <-QUOTE}

No , you don't have to . These tests don't represent the reality .
Actually , there are quite a lot tests on the Net , will you trust them all ?!

I guess you are not a M.D. , too , will you trust all comments/advises re. your health you find on the Internet ? I doubt .

MasterTB
November 30th, 2008, 04:11 PM
{QUOTE->
i mean eset hasnt got spam list (black list email sender)
<-QUOTE}

Have you really used ESS?? Black list for the Spam filter is present since the first beta of v3.
There is a button for sending addresses to the Spam Blacklist in ESS's toolbar for every supported client labeled "Spam Address"...
And if yor client is not supported you can ask for support to ESET. Agree there should be support for more clients, like Opera's M2 integrated mail client, but with the ones actually present the park is pretty much covered.
Also it now offers the possibility of using global address books and as always adding addresses to white lists from your own address books is there.

outcast
November 30th, 2008, 04:23 PM
{QUOTE-> No , you don't have to . These tests don't represent the reality .
Actually , there are quite a lot tests on the Net , will you trust them all ?!

I guess you are not a M.D. , too , will you trust all comments/advises re. your health you find on the Internet ? I doubt . <-QUOTE}

you are absolutely right. but eset advertising av-comperatives awards. we have to trust something. dont we ? try to think like this :). anyway thank you for trying to help me. i dont want to force you :)

ASpace
November 30th, 2008, 04:26 PM
{QUOTE-> you are absolutely right. but eset advertising av-comperatives awards. we have to trust something. dont we ? <-QUOTE}

But AV-Comparatives , VirusBulletin , WebCoast , AV-Test.org - these are repurable institutions that all/most vendors trust and recognise . Matousec is not in the same boat , and I suppose won't soon be .


No , you are not forcing me ... whatever . Have a nice day!

outcast
November 30th, 2008, 04:35 PM
{QUOTE-> ButMatousec is not in the same boat , and I suppose won't soon be . <-QUOTE}

i didnt know this. thanks for your warning. thank you for your patience. have a nice work