PDA

View Full Version : How to get Cloud working


Thankful
June 8th, 2011, 10:16 AM
My cloud feature is not showing reputation information for processes. It is NOT speeding up my scan times. What else do I have to do besides enabling the cloud? Thanks.

xxJackxx
June 8th, 2011, 10:49 AM
Mine showed nothing for processes for about 30 seconds but then it loaded. Maybe you are not giving it enough time to download the information? Mine loaded when I clicked "Open in new window". I don't know if that loaded the info or if it was just a coincidence of timing.

Thankful
June 8th, 2011, 11:09 AM
Thanks for responding. Mine just loaded after about 10 minutes, all 14 processes. However, I don't see the scans accessing information from the cloud such as with Hitman Pro. Such functionality will require a large collection of files which will take some time to create.

Galaxykiss
June 8th, 2011, 12:00 PM
i don't think it is so useful as it can only show the info of the proccesses but the user can't do anything such as terminate or delete them.

anyway, my cloud is work but I have to wait for 5 sec.

xxJackxx
June 8th, 2011, 12:22 PM
It doesn't appear to be realtime. I launched some extra processes with the window open and I had to close it and open it again to get them to show up.

Thankful
June 8th, 2011, 12:35 PM
-{ Quote: "It doesn't appear to be realtime. I launched some extra processes with the window open and I had to close it and open it again to get them to show up." }-So how can you say it is "fully functional"?

yongsua
June 8th, 2011, 01:11 PM
-{ Quote: "So how can you say it is "fully functional"?" }-

IMO,the "cloud" probably works like an "on demand checker" just like an on demand scanner.It is not "realtime" just as xxJackxx mentioned in his post. Hope you understand.

Thankful
June 8th, 2011, 01:17 PM
-{ Quote: "IMO,the "cloud" probably works like an "on demand checker" just like an on demand scanner.It is not "realtime" just as xxJackxx mentioned in his post. Hope you understand." }-Nobody seems to understand. If I look at my on-demand logs, I see no reference to the cloud.

Matthijs5nl
June 8th, 2011, 01:20 PM
-{ Quote: "Nobody seems to understand. If I look at my on-demand logs, I see no reference to the cloud." }-
No ofcourse not, why would it? It also doesn't refer to local stored signatures and generic signatures. Why should it refer to any cloud connection? It is just working the background.

Thankful
June 8th, 2011, 01:33 PM
-{ Quote: "No ofcourse not, why would it? It also doesn't refer to local stored signatures and generic signatures. Why should it refer to any cloud connection? It is just working the background." }-And the supposed faster scanning times? I guess I'm not supposed to see them either ? Right?

xxJackxx
June 8th, 2011, 02:22 PM
-{ Quote: "So how can you say it is "fully functional"?" }-

I was talking about the display. Refreshing it updates the list. Sitting there watching it does not.

Matthijs5nl
June 8th, 2011, 03:07 PM
-{ Quote: "And the supposed faster scanning times? I guess I'm not supposed to see them either ? Right?" }-
My scan times also haven't speed up in comparison to version 4. But I guess there are maybe some small changes to what is being scanned, since it scans more objects in roughly the same time, so in fact the scan did speed up.

Thankful
June 8th, 2011, 03:49 PM
Why is the risk level of java.exe "red" in the cloud? Is this such an unusual file for the cloud to identify?

trjam
June 8th, 2011, 04:02 PM
I think Marcos answers that question here (http://www.wilderssecurity.com/showpost.php?p=1870291&postcount=4) . Basically somewhere down the line, or over the rainbow, it will work.:dry:

The part about evolution scare me though when you think about how long it took man to do this. :)

Thankful
June 8th, 2011, 04:10 PM
-{ Quote: "I think Marcos answers that question here (http://www.wilderssecurity.com/showpost.php?p=1870291&postcount=4) . Basically somewhere down the line, or over the rainbow, it will work.:dry:

The part about evolution scare me though when you think about how long it took man to do this. :)" }-
Thanks for responding. This brings me back to my original point. The cloud is not "fully functional" and therefore I question the review of this Beta by AV-Test.

yongsua
June 8th, 2011, 11:54 PM
-{ Quote: "Thanks for responding. This brings me back to my original point. The cloud is not "fully functional" and therefore I question the review of this Beta by AV-Test." }-


I still don't understand why you still think it is not fully functional.It is already started and functioning to collect data.I think what you mean by "fully functional" is you would like to see this feature works perfectly,really can see and feel the reduction of scanning time.Then only you can call it as "fully functional"?

Thankful
June 8th, 2011, 11:58 PM
-{ Quote: "I still don't understand why you still think it is not fully functional.It is already started and functioning to collect data.I think what you mean by "fully functional" is you would like to see this feature works perfectly,really can see and feel the reduction of scanning time.Then only you can call it as "fully functional"?" }-
See: http://www.wilderssecurity.com/showpost.php?p=1884627&postcount=14

yongsua
June 9th, 2011, 12:21 AM
-{ Quote: "See: http://www.wilderssecurity.com/showpost.php?p=1884627&postcount=14" }-

Ya,Thanks.Main point here:
-{ Quote: "At this point it is not safe to flag files with low reputation as bad and we're yet to see if that will ever be possible as such detections would cause FPs on less common files." }-

So it is not fully functional,right?:-[

xxJackxx
June 9th, 2011, 07:29 AM
-{ Quote: "So it is not fully functional,right?:-[" }-

I wouldn't call it that. They shouldn't be automatically calling unknown files bad. IE9 does this and it gets annoying. I'm sure the database for this thing needs to be build upon but that does not mean it does not function correctly.

trjam
June 9th, 2011, 10:13 AM
Also this is a beta, duh. If everything worked perfectly, it would be a release.:dry:

Cut Eset some slack, they do know what they are doing and, where they are headed.:thumb:

Marcos
June 9th, 2011, 10:23 AM
-{ Quote: "
So it is not fully functional,right?:-[" }-
It is. It's not our aim to alert the user about every single file that doesn't have good reputation or we'd end up producing tons of FPs and alerting the user dozens of times, not long until it becomes annoying (similar to firewall or HIPS prompting every while and then for an action).
Quite the contrary, ESET has been effectively using cloud data to MINIMIZE the occurrences of FPs and MAXIMIZE the chance of recognizing new born, not yet known malware so cloud is already bearing fruit and benefits to both ESET and its customers.

yongsua
June 9th, 2011, 10:30 AM
-{ Quote: "It is. It's not our aim to alert the user about every single file that doesn't have good reputation or we'd end up producing tons of FPs and alerting the user dozens of times, not long until it becomes annoying (similar to firewall or HIPS prompting every while and then for an action).
Quite the contrary, ESET has been effectively using cloud data to MINIMIZE the occurrences of FPs and MAXIMIZE the chance of recognizing new born, not yet known malware so cloud is already bearing fruit and benefits to both ESET and its customers." }-

Thanks Marcos.You had change back my mind.I keep telling Thankful that the "cloud" is fully functional but I can't:(

Marcos
June 9th, 2011, 10:30 AM
-{ Quote: "Thanks for responding. Mine just loaded after about 10 minutes, all 14 processes." }-
That's weird, it should normally take only a few seconds to get a response from the cloud servers. I'm gonna look into it further as soon as I return from a conference tomorrow.

xxJackxx
June 9th, 2011, 11:09 AM
-{ Quote: "...It's not our aim to alert the user about every single file that doesn't have good reputation or we'd end up producing tons of FPs and alerting the user dozens of times..." }-

Thanks for the clarification. I much prefer this than the way some other vendors are doing it. :thumb:

Thankful
June 9th, 2011, 11:24 AM
How about having "java.exe" show up as 'green' rather than "red"? Also, do something with the "number of people" column so we have an indication things are working as they should.

Matthijs5nl
June 9th, 2011, 11:31 AM
-{ Quote: "How about having "java.exe" show up as 'green' rather than "red"? Also, do something with the "number of people" column so we have an indication things are working as they should." }-
More possibilities, such as sorting, have already been announced for later versions. I guess that will include some kind of legend too.

toxinon12345
June 9th, 2011, 12:18 PM
-{ Quote: "How about having "java.exe" show up as 'green' rather than "red"? Also, do something with the "number of people" column so we have an indication things are working as they should." }-
maybe your EXE or any DLL file loaded has been infected, or simply is a relatively new unknown file

Thankful
June 9th, 2011, 12:33 PM
-{ Quote: "maybe your EXE or any DLL file loaded has been infected, or simply is a relatively new unknown file" }-Infected? No.
I just downloaded Java Update 26. I would think such an important file would be recognized quickly. I guess not.