(possible) bug reports v2.0 Beta1

[Paul Wilders]

Hi ladies and gents,

In order to make things easier to deal with, please post (possible bug reports in regard to v2.0Beta1 over on this thread. Avoid double posting and the same reports/questions please.

Those already having posted elsewhere: please post over here once more, and delete the former post/part of the post concerning these issues.

Please keep in mind, Christmas is coming up; the guys from Eset are off duty/on holiday - at least many of them. Thus replies could take a bit longer as usual.

Thanks in advance!

regards.

paul

[Phil]

I don't know if this will work or not -- trying a c/p. Hey -- I'm lazy and it's WAY past my bedtime. ;D

{QUOTE-> quoting: root link=board=35;threadid=5692;start=0#37436 date=1040698796]
Hi. Am trying the beta and I use Poco for an email client
I set up NOD to monitor pop3, and when I try to check my mail, I get the following message.

1 message waiting on server;
Encountered error while fetching headers for message 1:
Access violation at address 20B1249A in module 'imon.dll'. Read of address
02704000
No messages deleted, 1 message left on server;
Logging off...
<-QUOTE}

Root,

I am trialing Poco and have the same problem with a *little* bit different message (XX's put in place of personal info):

<quote>
Checking mail for XXXX (12/24/2002 2:01:07 AM)...
Logging into XXXXX POP server as user XXXX...
1 message waiting on server;
Encountered error while fetching headers for message 1:
Access violation at address 20B1249A in module 'imon.dll'. Read of address
01554000
No messages deleted, 1 message left on server;
Logging off...
</quote>

I don't have *any* problem using OE6 to get mail -- only with Pocomail. ESET needs to get this fixed because I am beginning to like Poco.

XP Pro SP1 -- no other virus app installed -- nothing else running in systray except Kerio 2.1.4. I can't get mail with fw enabled *or* disabled.


Phil

[JacK]

Hello,

When setting nod32.exe to scan automatically downloaded
files through a d/l manager (Stardownloader) it starts scanning all HDD.

Rgds,

[Gordon7000]

NOD32 v2 Beta1 and Pocomail bug

I also am experiencing the same problems as above with NOD32 v2.0 Beta1 and Pocomail trial version. Hope ESET can get this fixed sometime soon.

Best regards for Christmas

Gordon

[Mele20]

Oh dear!!! I don't know if this is considered a bug, but it is a terrible thing...bug or not! I wondered why my computer was so sluggish after installing the beta version. I nearly flipped just now when I checked my system resources just after booting when they are at the highest. With the earlier version of NOD32, system resources after boot was always at 86 %. This beta version has dropped system resources to 62%!!! UGH! :( :( :( This is LETHAL on a W98SE system. I will have to uninstall and go back immediately to the old version.

This needs immediate attention from Eset. I really hate this as this new version looks so great. But I cannot operate my box if resouces are that low at start. I hope this can be fixed, otherwise, I will have to go back to NAV 2003 as resources are at 82% after boot with it.

THIS IS JUST HORRIBLE NEWS!!! At least I know now why my computer is acting so poorly.

NOD32 has NOT kept its famous small footprint on W98SE boxes at least!!!! I have never seen a worse resource hog!

[Gordon7000]

Possible conflict with Smart Explorer 6.1.1.8 and NOD32 v.2 Beta1

I use the enhancement for Internet Explorer, known as Smart Explorer.

Every time I disconnect from the Internet (I'm a dial-up user), Smart Explorer produces the following error message:

SMARTEXPLORER caused an invalid page fault in
module KERNEL32.DLL at 017f:bff7b997.
Registers:
EAX=00000000 CS=017f EIP=bff7b997 EFLGS=00000246
EBX=0000010c SS=0187 ESP=044afac4 EBP=044afae8
ECX=044afb14 DS=0187 ESI=03a1df50 FS=639f
EDX=0000010c ES=0187 EDI=03a1df50 GS=0000
Bytes at CS:EIP:
ff 76 04 e8 26 89 ff ff 5e c2 04 00 56 8b 74 24
Stack dump:
03a0e00c 03a1222a 03a1df50 038f0c00 03a0e00c 20b00000 03a13443 0000010c 03a0e00c bff76f14 20b062c5 0000010c 0000ffff 00000080 044afb14 00000004

This has only begun happening since NOD32 v.2 Beta1 was installed. I did not happen with NOD32 version 1.

I am using Win98 (original), Kerio f/w, and Proxomitron with JD5000. NOD32 is my only operational a/v program.

Rgds.,

Gordon

[Ghost]

It affects WinMe just as badly, resource-wise.

On ResourceMeter, simply starting the program changed the figures from

System: 49% User: 49% GDI: 58% to

System: 26% User: 46% GDI: 26%

That's totally un-acceptable, and, truthfully, makes me wonder why in the world they released it like that (even for beta-testing), since they had to have known about it beforehand.

I can only conclude that no Win9X systems are planned for coverage by Eset in the future.

Come to think of it, why release the beta now at all, if most of them were going to be off for the holidays and un-available to answer questions and/or provide help?

This is what we waited for for so long?

How disappointing.

[root]

Did a little more checking and found out with IMON enabled, Wingate 5.0 does not work either.
Let me know if you need more info.

[Stan999]

Doesn't work with WinME on a computer running MS ICS as the ICS host. Blocks access to the Internet. Stopping all the modules doesn't help. If I stop ICS then reboot all works fine. Not a firewall problem. I removed the firewall and it didn't help. This is on a cable modem connection.

[ipje]

Problem with opera 6.05 : when I want to test nods internet protection I recieve a warning when I want to download the eicar.com testfile with IE. But when I do the same with opera6.05 I recieve no warning and a window pops-up with this message "X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*"
The "" are not included.

[Acadia]

{QUOTE-> quoting: Mele20 link=board=35;threadid=5699;start=0#37501 date=1040735741]
I nearly flipped just now when I checked my system resources

This is LETHAL on a W98SE system. I will have to uninstall and go back immediately to the old version.

NOD32 has NOT kept its famous small footprint on W98SE boxes at least!!!! I have never seen a worse resource hog!
<-QUOTE}

Hello, NOD, do we have to upgrade when the final new version arrives or may we keep the old version and still receive the weekly virus dats (or whatever you call them)? Thank you.

[hayc59]

{QUOTE-> quoting: Mele20 link=board=35;threadid=5699;start=0#37501 date=1040735741]
Oh dear!!! I don't know if this is considered a bug, but it is a terrible thing...bug or not! I wondered why my computer was so sluggish after installing the beta version. I nearly flipped just now when I checked my system resources just after booting when they are at the highest. With the earlier version of NOD32, system resources after boot was always at 86 %. This beta version has dropped system resources to 62%!!! UGH! :( :( :( This is LETHAL on a W98SE system. I will have to uninstall and go back immediately to the old version.

This needs immediate attention from Eset. I really hate this as this new version looks so great. But I cannot operate my box if resouces are that low at start. I hope this can be fixed, otherwise, I will have to go back to NAV 2003 as resources are at 82% after boot with it.

THIS IS JUST HORRIBLE NEWS!!! At least I know now why my computer is acting so poorly.

NOD32 has NOT kept its famous small footprint on W98SE boxes at least!!!! I have never seen a worse resource hog!
<-QUOTE}

This is something that needs to be addressed asap!!! or your going to loose alot of win98/98se customers. up to and including my three computers at home!! thanks and hope it gets worked out real soon :'( :'([/me]

[Paul Wilders]

As I posted on a different thread on this forum:

Keep in mind this is a Beta Version, and by no means the Official NOD v2.0 release. Anyone feeling the need to sort of beta-test/test drive: keep in mind you are bound to encounter bugs - it's called a Beta version for good reasons.

All not wanting to test drive a Beta version, are advized to stick to their installed version, and wait for the Official Release from NOD32 v2.0

Mele, hayc59,

{QUOTE-> This is something that needs to be addressed asap!!! or your going to loose alot of win98/98se customers. up to and including my three computers at home!! thanks and hope it gets worked out real soon <-QUOTE}

Please see the above mentioned. Since we are not talking about an Official Version 2.0 release - which would have been announced and availabe for download as such on all NOD32 sites, Eset is not to blame here. As soon as the Official version has been released, this might be a different story.

regards.

paul

[Technodrome]

"Keep in mind this is a Beta Version, and by no means the Official NOD v2.0 release. Anyone feeling the need to sort of beta-test/test drive: keep in mind you are bound to encounter bugs - it's called a Beta version for good reasons."

I totally agree with Paul!


Technodrome

[Phil]

System XP SP1, P4, 512MB PC800 RDRAM

Little bug -- maybe, maybe not. Could be by design but I hope not.

RAM Usage: On, boot, Nod32krn uses 8400K and Nod32kui uses 4400K. As you go into the GUI the usage of Nod32kui increases and when you use "Help", it increases a good bit. As you scan and/or check mail with attachments, Nod32krn increases a less amount. After a couple of scans and going into help today, Nod32krn is at 9000K and Nod32kui is at 11000K. Last night I had a combined total of over 28000K. The problem is neither one releases their memory until the next boot -- they just keep growing. I would think at least Nod32kui would release mem when you close down the GUI but it doesn't happen. As an aside and comparison, the most NAV2002 *ever* used was 17000K combined.

As a related note and maybe of use to you 9x users is GDI and USER handles (resources to you 9x folks). Nod32kui is a PIG! :o

I will call this "Graphics mode" and "Ugly mode". ;D ;D

Graphics mode: GUI GDI handles = 717, GUI USER handles = 270 (WOW)
Ugly mode: GUI GDI handles = 401, GUI USER handles = 226

This is FAR more than *any* other app I have on my system. The most GDI handles I could find in any other app was 201. You 9x users might want to try turning graphics off to see if that will release any of your resources. It's worth a shot.

Other than the above (RAM usage being the biggie) and the problem with Pocomail, I must say I REALLY like the look, feel, and operation of the new beta. When ESET gets the bugs sorted, this is going to be a WINNER! 8)

Phil

[Blackspear]

I'm unable to install new Nod32 V2.0 Beta. I get the following error message when trying to install V2.0, I have unistalled origional Nod and rebooted...

Cheers.

[Blackspear]

Ok, solved the problem, after trying to install 5 times, removed Eset folder from Program Files, rebooted into Safe Mode, then installed. Installation went perfect from here ;D

Not sure why could NOT install in normal Windows XP-Pro SP1, but hey got around it, many ways to skin a cat ;D

Cheers.

[Blackspear]

What's with the warning message still showing, now at the Winsock level, surely this message is no longer required?

Cheers.

[Mele20]

I can't read either of your error messages using Mozilla. They are in such a tiny font that even a hand held magnifying glass doesn't make the print large enough to read. Using the zoom feature of Mozilla does not affect the size of them either. :(

[Blackspear]

LOL, Mele20, so how do I capture a screen shot and post it without posting it into Word and then saving the image as a JPEG ???

Cheers.

[Budman]

I just tried installing on a Win95 machine. I kept getting an error stating "ps_upd.dll" is missing and can not install. Did I download a bad copy or is this something missing on the Win95 machine?

Thanks,
Buddy

[Ghost]

DO NOT INSTALL THAT SUCKER ON YOUR WIN95 MACHINE!

Read some of the other posts about the problems, okay?

[Kleist]

{QUOTE-> quoting: Blackspear link=board=35;threadid=5699;start=15#37592 date=1040774335]
What's with the warning message still showing, now at the Winsock level, surely this message is no longer required?

Cheers.
<-QUOTE}

It is a Windows bug, not related to NOD32.

To fix, delete the registry key
HKEY_LOCAL_MACHINE\Software\Clients\Mail\PreFirstRun

[Kleist]

{QUOTE-> quoting: Ghost link=board=35;threadid=5699;start=15#37617 date=1040783169]
DO NOT INSTALL THAT SUCKER ON YOUR WIN95 MACHINE!

Read some of the other posts about the problems, okay?
<-QUOTE}

Read MY post about NO problems, okay?

I have dl and install both versiona, dual boot XP/W95. I can report no CPU or RAM problems, but I have P4/2.8GHz with 2048MB RAM, so perhaps I am not "average user". :-)

Is it for certain this beta is PUBLIC?

It is not announce on any NOD32 or Eset web site, in the world.

Only it can be downloaded from forum links!

[Blackspear]

Thanks Kleist, that worked perfectly, it's an annoying bug that EVERY client of mine has asked me about.

Cheers.

[dot]

Hello,
there is some problem when Nod32 amon scan some kind of e.exe file. I experience mouse freeze when click on some .exe files. Nod v2.0 bets1 has the same problem too. The real-time monitor freezes windows everytime when scanning .exe files.

[Kleist]

{QUOTE-> quoting: Blackspear link=board=35;threadid=5699;start=15#37644 date=1040798425]
Thanks Kleist, that worked perfectly, it's an annoying bug that EVERY client of mine has asked me about.

Cheers.
<-QUOTE}

You are very welcome!

It is a problem of Outlook. If you install Office but choose to use Outlook Express (and what sane person would not?) many times Office will try to create Outlook for the default, and the error box appears.

It is possible in XP to delete Outlook from the computer. A wise move! :-)

[Paul Wilders]

kleist,

{QUOTE-> Is it for certain this beta is PUBLIC?

It is not announce on any NOD32 or Eset web site, in the world. <-QUOTE}

As I posted in this thread, it's a Beta indeed...

{QUOTE-> Only it can be downloaded from forum links! <-QUOTE}

It is available from the Slovakian Eset website.

regards.

paul

[Kleist]

{QUOTE-> quoting: Forum Admin link=board=35;threadid=5699;start=15#37658 date=1040811517]
kleist,

{QUOTE-> Is it for certain this beta is PUBLIC?

It is not announce on any NOD32 or Eset web site, in the world. <-QUOTE}

As I posted in this thread, it's a Beta indeed...

{QUOTE-> Only it can be downloaded from forum links! <-QUOTE}

It is available from the Slovakian Eset website.

regards.

paul
<-QUOTE}

Yes, I was looking at a page in my cache. When I clear it, I see the files.

But it is strange if English language beta is not seen on any English language NOD32 web site in the world, yes?

[Paul Wilders]

{QUOTE-> But it is strange if English language beta is not seen on any English language NOD32 web site in the world, yes? <-QUOTE}

Could have been a matter of time. Eset HQ resides in Slovakia; with the holidays coming up, other distributors might be running behind a bit.

regards.

paul

[Mele20]

Well if this is truely an Eset public beta, then I don't think anyone can claim, you included Paul, that there is much hope for us W98 and ME users. For Eset to officially release a public beta (not just a beta, but a public one...one step removed from Gold Master), where no W98 and ME users can use it says to me that they know this already. Why would they release it as the public beta with such a severe problem not first corrected? Unless we have just been written off? :( :( Maybe this is why they chose to release it at the most idiotic time conceiveable.

(Can I ask why I cannot post using this -"W98/ME"? The preview shows up in red and shows W98/Mele20)!!!

[FanJ]

{QUOTE-> quoting: Mele20 link=board=35;threadid=5699;start=30#37661 date=1040816347]
(Can I ask why I cannot post using this -"W98/ME"? The preview shows up in red and shows W98/Mele20)!!!
<-QUOTE}

Hi Mele,

That is a strange "surprise" from the board software ;D
I and others have also noticed it.

Regards, Jan.

[Ghost]

Mele - If you'd have written it "Me" instead of using two capital letters, it would have worked right.

Using two capital letters seems to make it think you want it to use your name.

[Ghost]

{QUOTE-> quoting: Kleist link=board=35;threadid=5699;start=15#37641 date=1040797486]


Read MY post about NO problems, okay?


<-QUOTE}

Kleist - Prior to your post here and at DSL, there were no posts indicating "NO" problems in regard to the new Beta and anyone using a 9X system - from anyone, anywhere.

And, yes, the fact that you've got a P4/2.8GHz with 2048MB RAM may well have something to do with that. (Insert a little processor/RAM-total envy here --> :) ).

However, you need to go back and read Phil's post here (first page of this thread) and (if you know how) check your own computer for the same types of RAM-usage, number of hooks involved, whether the program releases the RAM when you're done with it without re-starting, etc. (If you don't consider those types of things problems, I don't know what you would consider to be a "problem").

I'd also like to ask if you've done any serious multi-tasking with the Win95(?)8(?) OS since installing the Beta.

You need to clear something up for me, though. On this site, you say your "dual-boot" is XP/Win95 - on the DSL site, you say your dual-boot is XP/W98.

Which is it?

You also say "I have dl and install both versiona" - what exactly does that mean? (I'm sensing a language problem there).

Finally, what program (if any) are you using for an anti-trojan program?

Actually, everyone 9X that's having problems should report what programs they have running in SYSTRAY (especially "on-access", "resident" AT programs, to help nail down any possible conflicts with other software - as well as any people who are not having any apparent resource-related problem with the new beta.

[Stan999]

{QUOTE-> quoting: Phil link=board=35;threadid=5699;start=0#37576 date=1040767876]
System XP SP1, P4, 512MB PC800 RDRAM

Little bug -- maybe, maybe not. Could be by design but I hope not.

RAM Usage: On, boot, Nod32krn uses 8400K and Nod32kui uses 4400K. As you go into the GUI the usage of Nod32kui increases and when you use "Help", it increases a good bit. As you scan and/or check mail with attachments, Nod32krn increases a less amount. After a couple of scans and going into help today, Nod32krn is at 9000K and Nod32kui is at 11000K. Last night I had a combined total of over 28000K. The problem is neither one releases their memory until the next boot -- they just keep growing. I would think at least Nod32kui would release mem when you close down the GUI but it doesn't happen. As an aside and comparison, the most NAV2002 *ever* used was 17000K combined.

Phil
<-QUOTE}

I have been running it on a PIII 600, 256MB, WinXP Pro for
two days without rebooting. I've have seen NOD32kui and NOD32krn go up to around 12000k

However, this morning I took a look and both are back down to around 6000k. This is without rebooting. So it is releasing memory on mine.

See: http://webpages.charter.net/gunn1943/nod32beta.JPG

[Straight Shooter]

;)I think I found an on demand scanning bug on this beta..

Okay, I have Win XP Home, 512 K Ram Athlon Processor, Compaq notebook..

So, I set NOD32 to scan all files.. All extensions, and all file types...

I double click on the On Demand Scaner.. It seems to prematurely quit on me before a full scan is complete. When it does that it also closes itself out.. I have to try repeatedly to get a full scan. It will do it, but I to try, maybe 4-5 times..

It's not a steady problem. It doesn't happen all the time..

[optikl]

{QUOTE-> quoting: dot link=board=35;threadid=5699;start=15#37654 date=1040808001]
Hello,
there is some problem when Nod32 amon scan some kind of e.exe file. I experience mouse freeze when click on some .exe files. Nod v2.0 bets1 has the same problem too. The real-time monitor freezes windows everytime when scanning .exe files.


Are you by chance running BOClean? I ran into this problem. On XP, specifically. The two don't appear to be compatable on my Compaq XP SP1. <-QUOTE}

[MickeyTheMan]

Install went much better under win2k than under 98SE, except for one thing.
Resident protection from AMON not started.
And under setup/security tab, box is greyed out, so i can't get it enabled, and if i click on START, i get message that it's unable to load resident protection.

Update:
Reinstalled on top of previous install and amon now works.

Next step, is to get it to work under win98SE as i use one copy of Becky under both OS and new settings use port 110 with new version, and i'm still under older version with different ports under 98. Darn.

[B]

{QUOTE-> quoting: optikl link=board=35;threadid=5699;start=30#37698 date=1040840999]
{QUOTE-> quoting: dot link=board=35;threadid=5699;start=15#37654 date=1040808001]
Are you by chance running BOClean? I ran into this problem. On XP, specifically. The two don't appear to be compatable on my Compaq XP SP1. <-QUOTE}
<-QUOTE}

There is a long story between BOClean and NOD32. I don't want to go into that now; I could tell some of the history, but I will not now, I don't want at the moment here now take one side or the other; the situation has been changed...........
Anyhow: make sure you're running the latest BOClean version, and try to disable Fasthook in BOClean in case you meet a problem..

[tosbsas]

Strange log behaviour:

I am on win2k - tried the eicar testfiles - amon checked it and find something in the zip file. After checking another file - right hand menu - the eidcar keeps showing up - why?

I deleted it - keeps showing up as unable to find or something like that

After restart everything is gone

Ruben

[tosbsas]

Strange tmp files are back - after scanning a file, a :temp file is left in my temo directory - why

Ruben

[Ledendo]

Strange bug on a win98 system: AMON checks the floppy drive on boot and then the drive led keeps on as if it was going on to check, although no audible attempts are made.

[Nom de Plume]

The Beta is running fine on XP Pro, however there is no right click option in explorer. I cannot scan just one file. Is this by design? Can anyone else use the right click option in explorer?

[Mele20]

>Actually, everyone 9X that's having problems should report what programs they have running in SYSTRAY (especially "on-access", "resident" AT programs, to help nail down any possible conflicts with other software - as well as any people who are not having any apparent resource-related problem with the new beta.


OK. good idea:

Cookie Crusher version 2.6
Desk Sweeper
Windows Task Scheduler
Visioneer 7600 USB scanner (not always enabled)
Proxomitron version 4.4

(No firewall, trojan scanner or "backup" av program).


Check my post in the thread "NOD working fine in W98" by Marti. The above is irrelevant now. Resource problem solved! :) :)

[Blackspear]

{QUOTE-> Posted by: Nom de Plume Posted on: Today at 05:36:45pm
The Beta is running fine on XP Pro, however there is no right click option in explorer. I cannot scan just one file. Is this by design? Can anyone else use the right click option in explorer?
<-QUOTE}

Works perfect on my system...

Cheers

[Technodrome]

{QUOTE-> quoting: Nom de Plume link=board=35;threadid=5699;start=30#37716 date=1040859405]
The Beta is running fine on XP Pro, however there is no right click option in explorer.
<-QUOTE}

There is...and it works fine.



Technodrome

[marti]

I had to turn off "IMON" due to many Internet Explorer error messages. I'm running Win98SE. Works fine without that feature.

[MickeyTheMan]

http://mickeytheman.digitalrice.com/files/nodbrowser.gif
http://mickeytheman.digitalrice.com/files/nodnav.gif
http://mickeytheman.digitalrice.com/files/nodspy.gif

Under 98SE, spyblocker, browser as well Naviscope conflict with NOD.
As a result i loose connectivity to the net with new version.

[Kleist]

{QUOTE-> quoting: Ghost link=board=35;threadid=5699;start=30#37670 date=1040825963]
{QUOTE-> quoting: Kleist link=board=35;threadid=5699;start=15#37641 date=1040797486]


Read MY post about NO problems, okay?


<-QUOTE}

Kleist - Prior to your post here and at DSL, there were no posts indicating "NO" problems in regard to the new Beta and anyone using a 9X system - from anyone, anywhere.

And, yes, the fact that you've got a P4/2.8GHz with 2048MB RAM may well have something to do with that. (Insert a little processor/RAM-total envy here --> :) ).

However, you need to go back and read Phil's post here (first page of this thread) and (if you know how) check your own computer for the same types of RAM-usage, number of hooks involved, whether the program releases the RAM when you're done with it without re-starting, etc. (If you don't consider those types of things problems, I don't know what you would consider to be a "problem").

I'd also like to ask if you've done any serious multi-tasking with the Win95(?)8(?) OS since installing the Beta.

You need to clear something up for me, though. On this site, you say your "dual-boot" is XP/Win95 - on the DSL site, you say your dual-boot is XP/W98.

Which is it?

You also say "I have dl and install both versiona" - what exactly does that mean? (I'm sensing a language problem there).

Finally, what program (if any) are you using for an anti-trojan program?

Actually, everyone 9X that's having problems should report what programs they have running in SYSTRAY (especially "on-access", "resident" AT programs, to help nail down any possible conflicts with other software - as well as any people who are not having any apparent resource-related problem with the new beta.
<-QUOTE}

Dual boot=selection between 2 hard drive, 1=XP/1=W98.

"W95" was my brain fart. I have W95 on another plug-in drive, but not tested with NOD32.

Yes, I have done many multi-tasking, but of course for ony 2 days. There is still some time for future problems to arise, if any are present.

I use Pest Patrol for trojan.

I think I am not good for reporting NOD32 CPU and RAM problems. My system is too great to show performance hits which will be apparent in many systems. For example, I find zero performance difference between "graphics" and "no graphics" mode, but others have reported a significant difference.

I think it is better for entry level and slightly higher users to report, because this is the main body of users in the world. If I report to Eset, "No performance hit on (my spec) he will say "Of course not!" (I recall some years past, Symantec's answer to NAV performance hit compaints was "Install more RAM.) :-)

And of course you are right, as much detail as possible is essential for Eset to examine thoroughly the conflicts and performance hits.

In closing, may I offer, "No program is as lightning fast as Eset's NOD32. Even when run on very old PCs there is no decrease in performance."
(from Virus Bulletin, January 2003)

I estimate Virus Bulletin is not using a 386/33 with 64 MB RAM. :-)

I am now gone for some days. My vacation. Good Luck with your testing, and a fine 2003 to you and all readers.

[Nom de Plume]

Further info on the missing right click option in explorer. If you install NOD using the "advanced option" rather than the recommended "typical option" there is a check box to install the right click option. The comment "there is and it works fine" is not that enlightening.

[Straight Shooter]

:o
Another bug I think I found...

I should have made screenshots, but I didn't (Sorry)

I recieved 3 evidently infected 3 emails, all at the same time, and in the same email address..

When I openned up OE to that email address, Win XP gave me an error message, that OE had to close..

No matter what I could not get OE to open to that address..

So, I shut off IMON.. Now tOE didn't close up on me.. I could tell they were viruses.. No message on th eletter body, the same wierd email address (from), and they all had attachments.. I deleted them and then emptied the deleted items bin..

Then I reinstalled IMON, everything okay now...

Does IMON have a problem in the reading of emails that are infected?

[Mele20]

I have a minor problem to report. I have unchecked splash screen at boot, but I still get the splash screen. Is there another setting I need to attend to? W98SE.

[Technodrome]

{QUOTE-> quoting: Nom de Plume link=board=35;threadid=5699;start=45#37738 date=1040871023]
The comment "there is and it works fine" is not that enlightening.
<-QUOTE}

Using "typical option" installation you should be able to see right click option in explorer.

I just wanted you to know that this option is still available…


Technodrome

[rayg]

I don't think these have been reported before:

System: Windows XP Pro SP1 512Mb Ram P4 1.5Ghz CPU

•***Docs: Red Cross? – Main window first item in the help file. - The "Red Cross" Does not exists anymore :(.

"To open the NOD32 Control Center, click on the “red cross” icon located on the system taskbar. If the icon is unavailable, click on: Start -> Programs (All programs) -> Eset -> NOD32 Control Center."

•***Docs: Spelling “Desahbled” Imon setup screen

"This feature can be desahbled or limited to infected e-mails only."

•***Docs: Nod32 main window – red cross again.

"To execute the On-demand scanner manually, click on the NOD32 icon located on your computer Desktop. To schedule execution of the On-demand scanner using the Scheduler/Planner, open the NOD32 Control Center main dialog window by clicking on the “red-cross” icon located at the main"

•***Errors: logging on as administrator I get these errors when I start nod32 scanner:

Scanning Log
NOD32 version 1.337 (20021217) NT
Checking CRC of the NOD32.EXE file: status OK
Scanning operating memory...
Operating memory is OK.
Error occured while scanning active boot sector of the 1. physical disk. Error reading sector.
Error occured while scanning MBR sector of the 5. physical disk. Error reading sector.
Error occured while scanning MBR sector of the 6. physical disk. Error reading sector.
Error occured while scanning MBR sector of the 7. physical disk. Error reading sector.

•***Spelling: “Occured” in the log entry above has two “r”s according to my spell checker

•***The on demand scanner log when opened as above does not include the date/time as displayed in the originating entry in the “On demand logs” page. When copying info to add to reports this would probably be useful.

•***On the NOD32 log window the right click option copies ALL of the text in the window even if only part of it is selected.

[marti]

The Program needs a "you have the latest update" message. I have it set to automatically update; when I use the "update" function it shows "downloading" on the status line then it goes back to "waiting."

[rayg]

Marti,

This is what I see in the "Update log area"

<26/12/2002 14:25:14> Update: Your NOD32 version is up-to-date. No update necessary.
<26/12/2002 14:25:13> Update: Update attempt triggered automatically
<26/12/2002 13:25:14> Update: Your NOD32 version is up-to-date. No update necessary.
<26/12/2002 13:25:13> Update: Update attempt triggered automatically
<26/12/2002 12:25:03> Update: Your NOD32 version is up-to-date. No update necessary.
<26/12/2002 12:25:02> Update: Update attempt triggered automatically
<26/12/2002 12:24:22> Update: Your NOD32 version is up-to-date. No update necessary.
<26/12/2002 12:24:07> Update: Update attempt triggered manually
<26/12/2002 11:24:04> Update: Update attempt terminated with error (Server connection failure)
<26/12/2002 11:24:03> Update: Update attempt triggered automatically
<23/12/2002 23:01:09> Update: Your NOD32 version is up-to-date. No update necessary.
<23/12/2002 23:00:49> Update: Update attempt triggered manually
<23/12/2002 22:53:05> Update: Update attempt terminated with error (Server connection failure)
<23/12/2002 22:53:04> Update: Update attempt triggered automatically

Isn't this what you are refering too? or am I missing something?

[marti]

Ray,

This is what I see:

Status "waiting"

I click on the Update Now option and see

Status "downloading"

then the display goes back to "waiting"

[rayg]

Marti,

Take a look at Logs/NOD32 Log.

You may need to exapnd the item on the menu - you should see what I see then. You are looking at the "Update Screen" which is "waiting" 'till the next auto update. The status there changes to downloading (so you say) when it is doing something but it happens so fast for me I cannot see what it says - I see "waiting", a quick flash, and then "waiting" agaim - so I have to look at the log file to see what happened.

[marti]

Ray,

Yes I can read the update log, but the old version had a message when you were up-to-date.

Waiting -- downloading -- waiting is not very informative. :D

[Technodrome]

{QUOTE-> quoting: marti link=board=35;threadid=5699;start=45#37783 date=1040914876]

Waiting -- downloading -- waiting is not very informative. :D
<-QUOTE}

But you are able to see version number and update date!


Technodrome

[marti]

{QUOTE-> quoting: Technodrome link=board=35;threadid=5699;start=45#37784 date=1040915248]But you are able to see version number and update date! <-QUOTE}True. I just like to see "no new version" or "you are up-to-date", or something. :D

[rayg]

Marti,

By definition with the auto update working NOD32 must be up to date. However I take your point it may be better to have

"Next update check due at: hh:mm"
"Previous check status: <failed|successful>"

This would then indicate you were up to date (or possibly not) I think without having to look at the log file screen. It is difficult to say you are out of date with a failure tho' as there may not have been an update to download.

[Technodrome]

{QUOTE-> quoting: marti link=board=35;threadid=5699;start=60#37785 date=1040915421]True. I just like to see "no new version" or "you are up-to-date", or something. :D
<-QUOTE}

Marti,

Damn man you r so picky! ;D ;D ;D


Technodrome

[TAG97]

{QUOTE-> quoting: marti link=board=35;threadid=5699;start=45#37776 date=1040913303]
The Program needs a "you have the latest update" message. I have it set to automatically update; when I use the "update" function it shows "downloading" on the status line then it goes back to "waiting."
Hi Marti:
I just manualy check for update and got pop up saying
"Your NOD32 version is up-to-date. No update necessary"
That is the message that you aren't getting on your PC ?
Regards
Tim



<-QUOTE}

[marti]

Hi Tim,

That's correct. No words indicating the program is up-to-date. The released version had them, the beta does not.

[Technodrome]

This is what I got as well! I use XP.



Technodrome

[tosbsas]

In win2k don't get any popUp either

Ruben

[marti]

Win98SE -- no popup However, my screen doesn't look like that, as I had to turn Windows graphics off.

[tosbsas]

Have you set silent mode???

Ruben

[marti]

{QUOTE-> quoting: tosbsas link=board=35;threadid=5699;start=60#37810 date=1040922859]
Have you set silent mode???

Ruben
<-QUOTE}Yes. Is that it?

[Technodrome]

Yes that is it!


Technodrome

[marti]

Arrggg. All these posts just to find out that "silent mode" is the culprit. Thanks for the help.

[passintime]

After installing the beta I can no longer access the internet. I am using xp sp1, adsubtract, proxomitron, ZA and IE. Even if I close all of these programs, I still can't access the internet. I have checked all configurations for all appz and their all correct. As soon as I uninstall the beta, I get access again. Any suggestions? Thanks passintime

[Technodrome]

possible: BUG under XP! ;D

When you do on Demand Scan using the "scan" not "clean" button you are unable to clean virus by using the right click "clean" option! Not biggie…But just to let you know.


Technodrome

[Technodrome]

{QUOTE-> quoting: passintime link=board=35;threadid=5699;start=60#37839 date=1040933133]
After installing the beta I can no longer access the internet. I am using xp sp1, adsubtract, proxomitron, ZA and IE. Even if I close all of these programs, I still can't access the internet. I have checked all configurations for all appz and their all correct. As soon as I uninstall the beta, I get access again. Any suggestions? Thanks passintime
<-QUOTE}

Try to disable IMON!


Technodrome

[Mele20]

I agree with Marti. I was quite confused when I tried updating and saw a flash and the message "waiting". Waiting for what? So I hit the update button again and this time after the flash, I saw "downloading" for a second or two and then it switched back to "waiting". Huh? Did it download the new definitions or what? (I figured we should be getting new definitions since there has been discussion on DSLR about a new one that other av have already included and I don't see in the 12/17 NOD def). Finally, I thought to go look in the logs where I was told it was up to date.

The current version of NOD has a screen that pops up after you try to manually update, and there is no update available, that says "your definitions are up to date". The beta version needs this popup screen.

[tosbsas]

hey don't blame Nod when you went "silent" Look in the setup - silent option will supress all information that doesn't need user action - I love it

ruben

[Mele20]

Oh! OK. I didn't really understand what that meant "go silent". I checked it because Marti showed it checked in her screenshots and she was helping those of us with W98x systems so that we could resolve the terrible resource problem. If I uncheck the "silent" mode, is that going to affect resources???

[marti]

Sorry Mele, was not trying to confuse you. The screen shot was to illustrate the "windows graphics off" mode only.

I too was confused about "silent mode," as you can see by my posts in this thread.

[Mele20]

I'm assuming it is "silent mode", which I still had checked when I just ran a full on demand scan, that caused NOD to stop everytime it found an archived zip file with a virus, but not popup a notification to me asking what I wanted it to do. I had it minimized so the only way I could tell that I needed to bring up the screen was because I could no longer hear the CPU working! It would have sat there forever, stuck on that detection, otherwise! So, I'm unchecking "silent mode".

[tosbsas]

Seems to me that there are definitly problems with win98. Here on win2k silent works like a charm

Scanning too

Ruben

[passintime]

Technodrome, thanks for the response. For some odd reason nothing seems to work. It seems to be looking for ip 127.0.0.1 (with adsubtract and proxomitron open) or 66.111.104.94.(with them closed) Even when I close adsubtract and proxomitron and change my settings in IE, I still can't connect to the internet. I guess I'll have to wait for the real deal. Thanks passintime

[Blackspear]

Hey Passintime, 127.0.0.1 also called "localhost" is the internal address that Nod32 uses for routing of Email, so emails are forced through Nod32 for virus checking...

Hope this helps...

Cheers ;D

[Luthorcrow]

Ok, this isn't a bug but something strange. I use a batch file to open all my security programs at once. Unless I am on-line must of these programs are off unless doing an on demand scan. This batch file worked fine with NOD32 but with NOD32 2.0 Beta it won't. I get the following error (see attached: error message, batch file content, and working icon properties). I've tried retyping the file path and even copying it from the working desktop icon. Despite the file path and file name being right it just won't start from the batch file.

I know Sygate for instance required an additional command -start at the end to work. Is there some trick like this for the new beta?

Otherwise, no problems with Wk2 Sp3, Sygate Pro 5, IE 6, and Netcaptor.

Really like the all in one interface

[Tassie_Devils]

Sorry luthorcrow, but no idea. The path seems fine to me, but obviously something is missing.

Cheers.

PS: WOW man, that sure is some colour scheme mate. I thought a Vampire had crapped itself upon scrolling to the bottom, LOL.

I almost had to put my "sunnies" on. Heh!

[Straight Shooter]

???
I think the email scanner (beta) either has a SERIOUS problem or I am doing something wrong...

I noticed this before, but I did not save the emails..

When I get infected email, Outlook Express will not open up the emails, it simply won't even open up..

If it can't open up, then I cannot delete the emails, clean the virus, etc..

I have to disconnect IMON to get to the email, but then if I do that, then I am running OE with no protection.. That's not good..

Before I disconnect IMON, I will wait to see if anyone knows about this..
I am posting a screenshot..

Thanks
Shooter

[Straight Shooter]

8)

The regular version of NOD32 does not have any conflict with the MailSafe email protection of the latest version of Zone Alarm, but I am wondering, does the beta have a conflict? I disabled IMON to let an infected email in the inbox, (otherwise it was blcoking my other emails.. When I did that, ZAPRO quaranteed the attachment.. With the regular NOD32 version, ZAPRO wouldn't even kick in..The POP3 MAil scanner of NOD32 took care of everything...

[ipje]

:)I must say I don't have big problems with this Beta version. E-mail is scanned very good and no problems with Becky (the problem was me, doing something wrong ;D)
I only have this problem downloading files with Opera 6.05, the files are not being scanned with this Beta-version. IE works great with this version. I hope this problem will be solved with the final release.

[Paul Wilders]

copy and paste from Mele's post dated December 27, 2002 - in order to keep error reports centralized:

What is the difference between :
Number of found viruses
Number of Active viruses

I just ran an on demand scan set to scan all files and extensions. It found 6 viruses and 16 active viruses. Since all of them are either eicar test files zipped or are zipped dbx files, none of them are "active" ...at least not in the sense that I use the word. They can't do any harm so how are they "active"?

The on demand scanner, set to scan all files and extensions, is scanning LESS THAN ONE-HALF the number of files it should be scanning!!! Plus, it takes FOREVER to do the scan because it stops on every damaged file and every found virus and doesn't notify me. i have it running minimized. It sits stopped on one of these files until I notice my CPU is not making any noise and I maximize the scanner to see what is happening. It takes 38 minutes to scan 17,251 files! With the current scanner, it takes less than 9 minutes to scan almost 40,000 files!

OOPS! I hadn't finished my post and accidently hit the post button.

I have run the on demand scanner five times now and it behaves the same each time. I can't see any configuration that I am missing that would stop it from hanging nor that would make it scan all my files. I have it configured (at least I think I do) just the same as the current scanner was configured.

It is misleading, seems to me, to claim it found six viruses and sixteen active ones when it actually finds only two -justasb and firehocker that are zipped. It appears to double and triple count the viruses as the zipped email attachment that contains these two (and two others that NOD doesn't detect because they are corrupt, but NAV does detect one), is located in more than one place on the C drive. Plus, it seems to be counting Eicar files as viruses. I really can't figure out how comes up with a total of 16 "active" viruses from this one attachment. The current version didn't tell me I had 16 active viruses. This is confusing.

I just figured out part of the problem. I have been scanning from WITHIN the NOD32 Control Center. If I go and click on NOD32 on the desktop (which is a pain to do as I seldom use my desktop and have all items there hidden), the scanner doesn't hang on detected viruses, etc. I also found that the checkmark to scan all files had AGAIN become unchecked...this has happened in IMON and AMON modules also. I have to keep rechecking it. (I have also clicked on confirm each time). So that is why it was not scanning all files.

Doing the scan from the desktop icon, NOD reported 6 viruses. Said nothing about 16 active viruses so I am puzzled about that. I note that this last scan scanned 58,074 files ...quite a bit more than the 40,000 approx. that the current scanner scans. Plus, it took 22:50 seconds, whereas, the current scanner scans the 40,000 files in 8 minutes approximate. Why so much longer to scan (even though it is scanning a few more) with the beta version?
« Last Edit: December 27, 2002, 09:45:35 AM by Mele20 »

Forum Admin

[RabidGerbil]

Gi'day All,

I've found a minor problem with NOD32 2.0 Beta.

I've been testing email security with http://www.gfi.com/emailsecuritytest and have struck a problem with IMON and Malformed File Extension Vulnerability test. My email client is The Bat! and when I try to download this particular email, TB! locks up. If I disable IMON, TB! downloads email no problem. I can download all other emails no problem regardless of IMON status.

I'm using WinXP pro, outpost pro firewall and The Bat email client.

I'm a new NOD32 user and am very pleased with how the new version is shaping up. Looks like I made right choice! ;D

[Straight Shooter]

I have the same similar problem you have, except I have narrowed it down to two types of emails I recieve..

1. Some kind of Virus...

2. Websites included with email...

I can forward the email with a website to a Nod tech support person, but I will wait until they read this.. then act upon it

I have Outlook Express, Service Pack 1, win XP Home, all the latest patches ...

This is a very serious problem fro me.. I have eliminated ZAPRO 3.5169 as being the cause of my problem.. I hope this gets fixed when they release the final version of Nod32 ver 2. The only way I can get me email is to shut IMON down, which defeats the purpose of having IMON..

:P

[Straight Shooter]

I wish they hadn't gone on vacation before releasing the eagerly awaited beta..

another bug, which I think was reported before. Some web sites seems to load more slowly..

Much more slowly... 8)

[Mele20]

Right clicking on an entry in the On Demand Scanner logs works properly if the file is clean or if the file is an eicar test file. However, if the file contains an actual virus, NOD32 Control Center hangs. The only way out is to use c/a/d which closes NOD32. So, if you want information on the flagged items, it is not accessible. If you want to delete the viruses you have to run the on demand scanner again choosing clean. This takes a long time as NOD32 is very SLOW in scanning using the beta version. Takes TWICE as long as it did with the current version.

I should add this:
Dell Pentium III 450MHz
W98SE
224 MB RAM
Proxomitron 4.4, Desksweeper, Cookie Crusher 2.6 running during scan

[mccracky]

{QUOTE-> quoting: Luthorcrow link=board=35;threadid=5699;start=75#37966 date=1040981881]
Despite the file path and file name being right it just won't start from the batch file.
<-QUOTE}

That >>Can't find D:\Program<< looks supspiciously like your batch file is having problems with the long file name including spaces. Try it with the DOS file name (something similar to D:\Progra~1).

[Marcos]

Hi folks,

thanks for notifying us about problems with Imon and Pocomail.
Our engineers will take a look into the problem. You will be informed
about their findings on this forum as soon as they declare.



Mark

[mccracky]

Just a suggestion: Rather than all possible bug reports for the Beta going to this one topic, why not start another forum Nod32v2beta along side the NOD32 forum? Then the bug reports could be grouped better under their specific topics and you wouldn't need to scroll through all the posts for help with your specific problem. The current NOD32 forum (where this topic is) would be for the currently released version and the new forum for the v2.0beta. Thoughts?

[herold]

Hallo @all,

I have problems running nod32 2.0 beta and tauscan 1.6 on my system.

If tauscan is checking CAB-archives a Runtime Error occures, after uninstalling nod32 2.0 beta, tauscan works without problems.

Next problem is that nod32 Scanner list all existing JAR-Files on my System like this: CRC-checksum is incorrect, file possible damaged
I can´t believe this.

Next problem IMON:
The default setting ist Port 110. OK
If I add Ports in this form:
110, 995, ...
IMON ignore all added Ports after 110

Last problem is a scheduler problem. If I prepare the scheduler to start nod32 Scanner at defined time. Nod32 Scanner starts but no scaning of C: instead he is telling me C: is invalid.


Some Problems, but hey, it is just a beta.

So long 8)

PS. System Info: P III 500 MHz, 384 MB RAM, Win2k SP 3, Tauscan, Outpost, T-DSL Speedmanager running at Startup

[Straight Shooter]

The right click scanning dowsn't allow me to clean even the eicar virus.. It just doesn't work..

Strangely enough, even when set to scan all files, the on demand scanner is just as fast as ever..

WinXP Home, Athlon , 512 ram,

[Phil]

{QUOTE-> quoting: Straight Shooter link=board=35;threadid=5699;start=90#38541 date=1041261651]
The right click scanning dowsn't allow me to clean even the eicar virus.. It just doesn't work..
<-QUOTE}

You can't "clean" the eicar test file 'cause it's just a test file. If you cleaned it, there would be nothing left. ;D

I'm not sure about NOD because I have not needed to use the "clean" function, but here's the deal with other av apps I have used. Let's say you get a doc file or something similar that is infected with a virus. Then you would use the "clean" function in an attempt to remove the offending code and leave you with the original file intact so it could be used. Make sense now?

Phil

[Straight Shooter]

Yup.. Sorry.. I confused "Clean" and "Delete"...
:P

[marti]

IMON and NMS won't stay off! I removed the beta version and installed it again; nothing was changed. During the installation I selected custom install and specifically said "NO" to IMON and "NO" to "NMS." Both of them were on after I rebooted.

I don't want to use IMON and I don't need NMS.

[Straight Shooter]

Well, of course, I had another email virus today, and IMON screwed up my OUtlook Express, the same way I described a couple of posts ago...Outlook Express would close down down as soon as it hit a certain point.

Determined to find out what the virus is, the first thing I did was totally disable ZAPRO...
That way the ZAPRO mailsafe would not interfere...

Then I had to disable IMON...

Then I started Outlook Express again, and went to the Security Settings under Tools", and then I did an on demand full system scan. I checked the box that says "all emails" or watever it says..

Lo, and behold! I have a screenshot now.!!

It didn't come as any surprise that Klez was the virus! I have been getting hit by Klez almost 2-3 times a day lately... I could not clean it from NOD and I could not quarantee it.. I could not delete it from the on demand scan (I used the "Clean" button when I scanned. What gets to me is that it would not even quarantee it. Although I can't stand Norton, Norton can quarantee Klez from an email...

So, here is the screen shot, and a MAJOR BUG That ESET has on it's hands...

[Straight Shooter]

This post is an echo to Marti's above post.. Well, yeah, I'd like to use IMON and NMS, because I HAVE to have an email virus scanner! That's where most of my viruses arrive from.. However, I would like IMON to work. I know this is a beta. If IMON is not fixed to work well, and the virus disinfection is not at least improved, by public release time, I am going to have a big problem on my hands... The way the beta works, it reminds me of the way PC-Cillin worked, when I trialed it before I bought NOD back in May...

:o :o ::)

[marti]

I don't want to use them and they keep coming back! You ( Straight Shooter) want them and they are not working correctly. Arrggg!

[Paul Wilders]

Gents,

It's a Beta indeed. Be assured the Official Release will have addressed glitches. In case you encounter problems - for whatever reason - using the Beta, don't put your safety on jeopardy and switch back to the former Official Release. Test driving is OK, but never put your system at risk, unless you have a test engine at your disposal ;).

regards.

paul

[Straight Shooter]

;D That's what I just did...

I feel I have contributed my input to the beta. I love the look, the way the menu's flow off each other (I don't think CNET will, but who cares!) and the very low impact on system resouces.. I also like the Configurability! The NMS and IMON are very good ideas, they just need to be worked on... and in the on demand menu, you can actually fill in a checkbox to scan for emails! That's cool! I just wished I either knew how to configure or maybe that is a bug too, the idea of automatic qaurantee of a virus from email.. But since I get Klez almost twice daily (isn't that ridiculous) I HAVE to switch back to classic NOD for now.. I am looking forward to the new version!

[Paul Wilders]

Shooter,

Seems a wise choice for the moment ;)

regards.

paul

[Mele20]

>Next problem is that nod32 Scanner list all existing JAR-Files on my System like this: CRC-checksum is incorrect, file possible damaged
I can´t believe this

I am seeing the EXACT same problem. All existing JAR-Files are reported as having incorrect CRC-checksum and possibly damaged. I find that hard to believe!
W98SE

Could we PLEASE have some way of grouping the bug reports? It's getting cumbersome to go through every page like I just did to find the report about this.

[mccracky]

{QUOTE-> quoting: Mele20 link=board=35;threadid=5699;start=105#38665 date=1041333142]
Could we PLEASE have some way of grouping the bug reports? It's getting cumbersome to go through every page like I just did to find the report about this.
<-QUOTE}

I again repeat my request: Rather than all possible bug reports for the Beta going to this one topic, why not start another forum Nod32v2beta along side the NOD32 forum? Then the bug reports could be grouped better under their specific topics and you wouldn't need to scroll through all the posts for help with your specific problem. The current NOD32 forum (where this topic is) would be for the currently released version and the new forum for the v2.0beta.

[Mele20]

I am so impressed!! I just got to see IMON in all its glory. Someone sent me yaha.N (aka yaha.K which is currently infecting Hotmail) and I was d'l a file, at the time, when suddenly IMON pops this screen up saying that it had intercepted this infected email. It gave the details and had quarantined it. Now mind you, this email got NOWHERE NEAR my inbox! THAT IS SO GREAT. I deleted it. I LOVE IMON!

I was just thinking...what if this had been a false positive? Could I read it? It never reached my inbox...so how does that work?

[igi]

If you press close button (bottom of dialog), you will see warning message and then, IMON deliver email to inbox in original form ;)

[Mele20]

Thanks igi for the explanation. That makes sense. Now I know what to do if I want the mail delivered anyway.

[jan]

Hi all,

thanks for all your valuable feedback - we are processing your comments to the bug list and fixing them now. I posted more at:

http://www.wilderssecurity.com/showthread.php?t=5692

We keep you informed.

Once again thanks for helping us to make NOD better for YOU! :)

rgds,

jan

[MickeyTheMan]

Works fine here under win2k, but i can't get it to work at all under 98SE
Creates problems with Naviscope, Spyblocker and my browser quits on me.
I have gif's posted at Becky's http://www.morelerbe.com/cgi-bin/ubb-cgi/ultimatebb.cgi?ubb=get_topic&f=14&t=001770&p=

[Straight Shooter]

Another idea for the beta - version 2

I've heard this from others, and frankly, I think it's a good idea to ..

add a progress meter or progress indicator for the on demand scanner...

Like you know, 13,333 files scanned, 23% complete...

or something like that..

[Luthorcrow]

My only complaint about the Beta was this (tested for about 10 days) is that the default on demand scan was faster (about 2 and half minutes rather than 3 and half with the regular NOD32) but the full scan was signicantly longer (22 minutes instead of 12 minutes with the current version).

Otherwise I found the new interface to be a vast improvement.

My specs:
P4 1.5ghz
Intel 850GB
512megs PNY RD800
60gig WD600AB

[Mele20]

I'm glad to see that I am not the only one who has gone from about 9 minutes for a full on demand scan with the current version to 22 minutes for the same with the beta version. I do have more files (about 18,000 dbx backup files that I didn't exclude), than when I last did an on demand scan with the current version, still 22 minutes is much longer than I expected for a total of 58,000 files. That's approaching NAV 2003's record slowness.

W98SE
Pentium III
450MHz

[Luthorcrow]

{QUOTE-> That's approaching NAV 2003's record slowness.
<-QUOTE}

Ya, but it doesn't even touch AVP 4.0's record of 42-46 minutes. It was even slower with the most recent build. That's when I pulled the plug (it was also getting buggy).

But still 12 to 22 is a big jump.

Other specs
27gigs(just under 90,000 files) of drive spaced used at time of those scans

[Feivel]

i have an annoying problem with NOD's beta that MUST be simple to solve, I gotta be overlooking it. Whenever I reboot (or turn on) my computer, NOD32 does a scan with ALL profiles. Believe me that it gets pretty annoying if you have alot of profiles. Between AMON and a daily scan of my C drive (not to mention my other scans), A scan of anything more than memory and the MBR is unecessary. How do I turn off the scans at boot?

[Ron_P]

Don't know if this was mentioned..upon first boot of the day, update works fine. Any subsequent checks do nothing. Hitting abort pops up a box but doesn't change the "Abort" button back into "Update"

PIII 700m and AMD 1.4
XP SP1
512, 384 RAM

R

[MickeyTheMan]

{QUOTE-> quoting: MickeyTheMan link=board=36;threadid=5699;start=105#39349 date=1041647666]
Works fine here under win2k, but i can't get it to work at all under 98SE
Creates problems with Naviscope, Spyblocker and my browser quits on me.
I have gif's posted at Becky's http://www.morelerbe.com/cgi-bin/ubb-cgi/ultimatebb.cgi?ubb=get_topic&f=14&t=001770&p=

<-QUOTE}
Actually IMON creates problems as well under win2k.
I have tried every possible way i could think of.
But if i activate it then i get message that it can't create listener socket with error 10106.
Then Spyblocker is affected with port 80
Naviscope also

There is a conflict at the winsock and sockets level

[tosbsas]

maybe thats why sb-chat client will not connect either

Ruben

[tosbsas]

Funny thing too - when using SamPal - kind of Proxy - I get two messages that nod has checked the email (:--))

Ruben

[Brian Evers]

This new NOD32 beta causes News Interceptor to crash on my computer now when I double click on a news item to open in my browser (which is Opera 7, beta too, hehe).

I am running WinXP Pro SP1
Athlon XP 2.38ghz
1 gb 380mhz ddr ram

[sig]

The following was cut and pasted (at Paul's request) from my post in the "OE deleted items folder" thread in this forum:

>Mele queried, "Dumb question, but if you have IMON enabled, and an email with a virus is downloaded, why does IMON put it into Deleted Items.dbx? Why isn't the file removed from the system? "

Not a dumb question IMO at all. If IMON had a "delete and send to total oblivion" option that would not retain the infected emails in the Deleted Items mailbox, there would be no chance for someone running into what Mele encountered. (Or what evidently what Blackspear's friend encountered too.)

That's something I think Eset should consider as a user friendly option that prevents this sort of thing from happening.

So far I can see potential users reading this thread and another at BBR and thinking, "Whoa, NOD can't delete an infected email without deleting the whole mailbox?? I'm staying away from that POS AV." The finer points of how it happens will be missed, but the end result of the mishap will be remembered.

So why not design IMON (or even AMON if it works similarly) so that "delete" means truly deleted from the email client? And not, as at present, where "delete" only means it's sent to the deleted item folder and the true deletion you have to do yourself?

From the consumer's point of view, I think when a scanner offers to delete an infected email, my first choice is that I want it deleted from my email client altogether so that I don't have to go back and manually "delete" it again myself. It's easier for the users. And since the users pay the bills, why not accommodate the users?

[vk6zx]

Using Windows XP, I have found that when you add a server for updates that is a cd drive location, e.g. d:\Updates, when you chnage to that server location it is shown only as d:/ and is NOT able to update.

[marti]

More on NOD32 beta deleting an entire Outlook Express folder instead of just the infected file.

Mele lost many stored files during a complete system scan when she told NOD32 to delete an infected email that was stored in Outlook Express. NOD deleted the entire contents of the folder, instead of just the infected email.

I was able to reproduce the error.

Two guys tested an on-line scanner and KAV, and were able to ONLY delete the infected email, thus leaving the rest of the emails in the folder.

Links:
http://www.dslreports.com/forum/remark,5653738~root=security,1~mode=flat

http://www.dslreports.com/forum/remark,5653908~root=security,1~mode=flat

- Fixed links to DSLR posts - LWM

[Paul Wilders]

Issue on hand has been answered by Eset/Jan over here (http://www.wilderssecurity.com/showthread.php?t=6158;start=15)

regards.

paul

[jan]

{QUOTE-> More on NOD32 beta deleting an entire Outlook Express folder instead of just the infected file.
<-QUOTE}

We are checking it here now.

rgds,

jan

[dave s]

Using the new beta with XP Pro and Outlook 2002 causes Outlook to intermittantly crash (only while typing a reply to a message though). It happens with 7 out 10 message replies.

I've uninstalled the beta and re-installed v. 1.348 several times with 2 hour or more gaps between the programs with the same results-- no crashes with v. 1.348 and frequent crashes with the beta. No hardware/software changes have been made to the rig during these trials.FWIW, I've now had v1.348 installed for 24 hours with no crashes (operates flawlessly like it has for the last 13 months).

If I can provide any more info, please let me know. Reinstalling the beta to recreate the crashes for collecting crash data wouldn't be a problem either.

Thanks for an otherwise incredible product!

best regards,

Dave

[jan]

Hey Dave,

I sent you an IMON fix - hope it helps...

See this thread (http://www.wilderssecurity.com/showthread.php?t=6336).

Best wishes, :D

jan

[dave s]

Thanks Jan,

Got it installed and so far...no sign of the problem with new email replies generated! I'll know more in 24 hours with a few more email replies out the door. Looking forward to reporting positive results!

regards,

dave

[Fedorov999]

About a month ago when I first tried v1 you all checked The All Seeing Eye product as I reported the mouse pointer freezing/stuttering while loading, due to the unpacker the ASE program uses you reported.

I notice the same problem with v2 beta with AllSeeingEye and also with Acronis TrueImage when I load that up...

Many operations in general usage of WinXP seem to cause the mouse pointer to stutter, again, presumably this is NOD unpacking all these packed executables etc....???

Well I've loaded AllSeeing Eye and Acronis TrueImage tonight while testing Dr.Web, RAV and the other AV products and NOD32 is the *ONLY* AV product that causes the mouse/processor to stutter while these programs load/unpack - it's actually quite annoying when you've used NAV for so many years and it never does this and now all of a sudden my pointer is stuttering with many applications/windows.

I look forward to some improvements in this area :)

Fedorov.

[jan]

Hi Fedorov999 and all who posted in this thread,

we'll look at that - see this link (http://www.wilderssecurity.com/showthread.php?t=6113).

rgds, :D

jan

[dave s]

Just wanted to report progress with my NOD32Beta/Outlook problem posted several messages earlier.

After installing the latest (version 3) imon.DLL-12 hours have elapsed and no Outlook crashes whatsoever!!!


I also wanted to say thanks to Jan and ESET for not only the finest products, but the best customer service anywhere!! Most companies only dream about giving the level of customer support that ESET actually delivers.

regards,

dave

[rodzilla]

> Most companies only dream about giving the level of customer support that ESET actually delivers.

Thanks on behalf of the team, Dave!

(We've come a long way since Mele branded us as the world's worst!) :)

[Fedorov999]

Okay a few things now I've been running this beta a few days... I've already reported the freezing mouse pointer issues with certain programs (unpacking packed exe's)....

I use Sygate Personal Firewall Pro on my WinXP SP1 machine and I notice the AMON window *always* has the SMC.EXE file listed as being scanned by it - presumably cos my firewall is busy doing it's job all the time :)

Another mouse freezing issue... burning some discs using latest version of Alcohol 120% 1.4.0 build 114, I noticed my mouse stuttering yet again while surfing web pages - the AMON screen is toggling between scanning SMC.EXE (sygate) and ALCOHOL.EXE..... disabling AMON stops the mouse pointer problem while Alcohol is burning my discs :)

I tested burning the same files using latest version of Nero and didn't get the problem.

Hope this helps!

Fedorov.

[Trevor Marsh]

Hi All, I've been using the Beta version for a couple of weeks now and here are a few "niggles" that I have noticed. (As I say these are niggles rather than full blown bugs on my system)

When in "Graphic Mode" it seems to randomly default back to non-graphic mode in *some* control panels, although for some weird reason not all.

Amon slows down Win XP when shutting down. If Amon is disabled manually before shutting down then shuttdown time is normal.

Auto-update feature seems to have ramdom problems connecting to the up-date server. Also no matter what times up-dates are set for it still seems to try up-dateing every 30 mins.

Amon somtimes stays with the "Splash Screen" on my desktop for longer than it should, sometimes upto 30 seconds after it appears. Other times it's only 3 to 5 seconds.

Plus Points

The new integrated control panel is a vast improvement on the retails "three seperate moduals" approach.

E-mail scanning at the winsocks level is also a nice development.

This will be a very nice "upgrade" when all the "niggles" have been rectified. Keep up the good work Eset


Trev

[Fedorov999]

I use a cool product called Pictures2Exe available at http://www.wnsoft.com/

It creates EXEcutable slideshows that I use to send out to customers, please see that attached Scan log as NOD32 thinks all the EXE's I have created with this tool contain the Suomia trojan.

Kind regards,

Fedorov.

[Fedorov999]

I presume someone from development is noting all these reports :)

I'm finding AMON agressively interfering with mouse movement in many areas of my daily usage, even simple things like Amon agressively scanning as I open the Add/Remove programs window or sometimes I even notice it when I'm moving up and down through my Start menu items.

I ain't used to having my mouse stuttering around just cos my hard drive is busy doing stuff after years of using NAV which while it may be way over-bloated these days, has always sat happily in my system tray not interfering with mouse and file operations etc...

I'm a developer myself so if any of your team want any more info or me to test a newer version of AMON just let me know please.

Regards, Fedorov.

[jan]

Hey Fedorov,

>It creates EXEcutable slideshows that I use to send out to customers, please see that attached Scan log as NOD32 thinks all the EXE's I have created with this tool contain the Suomia trojan.

Thanks for the alert - I sent you a private message - we need to check the files.

>I presume someone from development is noting all these reports

Yes, as I wrote here (http://www.wilderssecurity.com/showthread.php?t=6113) we are not sleeping :), but processing and fixing the bugs.

rgds, :D

jan

[tosbsas]

When automatic update is not working and when I try manual update, sometimes update will not work - and can't be aborted - even after pressing abort button, and confirming it will not go back to update now.

I am on win2k pro and rapppoe

Ruben

[jan]

Hey Ruben,
{QUOTE-> quoting: tosbsas link=board=36;threadid=5699;start=135#46505 date=1044272075]
When automatic update is not working and when I try manual update, sometimes update will not work - and can't be aborted - even after pressing abort button, and confirming it will not go back to update now.
<-QUOTE}

Any error messages? :)

Thx.

jan

[tosbsas]

No, it just stays on abort - and can only be stopped by restart the pc

Ruben

[tosbsas]

Maybe I found a beginning of a reason - afetr restart I deleted the whole log - than update worked again as it should

Ruben

I remember that helped last time too

[jan]

Hi Fedorov,
{QUOTE-> quoting: Fedorov999 link=board=36;threadid=5699;start=135#45801 date=1043942786]
I use a cool product called Pictures2Exe available at http://www.wnsoft.com/
It creates EXEcutable slideshows that I use to send out to customers, please see that attached Scan log as NOD32 thinks all the EXE's I have created with this tool contain the Suomia trojan.
<-QUOTE}

sorry for the "Beta" delay - thanks for alerting us - it's a false alarm - it's being fixed in the update.

rgds, :)

jan

[tosbsas]

New beta ??? When , where ;D

[jan]

Hi tosbsas,
{QUOTE-> quoting: tosbsas link=board=36;threadid=5699;start=135#46898 date=1044462391]
New beta ??? When , where ;D
<-QUOTE}

The new Beta will be released when a certain group of problems is fixed => there is not an exact date for its release. I just can say it will be in a couple of days. The problems not solved in the Beta2 will be fixed in the upcoming releases.

I hope not only developers can understand that ;)

Thanks - we want to make NOD better for YOU ALL. :)

jan

[tosbsas]

Hey great - I will be on holidays so there is a chance when I come back to have a new Nod32 (:--))

Will we able to install on top or is it going to be uninstall and install??

Ruben

[Andreas1]

Hi all,
i have two things: one bug (or misconfiguration by myself ;)) and one feature wish.

1 - i have a certain folder with all its subfolders excluded from Amon, but still upon System start, i get a lot of alerts for that folder when Windows populates the start menu. (BTW, the alerts are all legitimate, it's a subfolder tools\blackhats\etc. - never had to use any of them, but i feel less vulnerable when i have a certain set of tools at my disposal...) When you tell me where to look, i'll try and provide more info.

2. While i also like the approach to integrate the former three modules into a singular environment, there is some tradeoff (i think): Quite often, i don't want to have any scanner loaded due to resource scarcity. Then i still want to be able to get updates (commandline option) and maybe to do on-demand scanning (is it necessary to have the NOD kernel service loaded to do this?). btw, my system is Win98SE.

Any thoughts?

TIA,
Andreas

[M. Kabat]

Hi,

I've been testing NOD32 beta for a several weeks on WinXP Pro now without any problems. But yesterday I installed a new nVidia Detonator driver (v41.09) and NOD totally screwed up the TCP/IP protocol. A few necessary services refused to load, followed by socket errors. Uninstall of NOD resolved the problem (I've trided uninstalling the graphics driver first, but that didn't help; even a system restore to a week earlier did not work). Maybe it's just a coincidence, but the problems started after the required reboot from the graphics driver, and everything is fuctioning ok now with the new graphics driver and the first version of NOD. Maybe some can look into this...

Greetings,
Marek

[Smokey]

{QUOTE-> quoting: M. Kabat link=board=36;threadid=5699;start=150#47277 date=1044664975]
Hi,

I've been testing NOD32 beta for a several weeks on WinXP Pro now without any problems. But yesterday I installed a new nVidia Detonator driver (v41.09) and NOD totally screwed up the TCP/IP protocol.
<-QUOTE}

You realize v41.09 is a beta-version and not very reliable?

[Marek]

Yes I do, but that counts for NOD also. And sice the driver works without problems with NOD 1, I think maybe the effect is the result between a conflict beteen the two beta programs. But eventually it was NOD which screwed up the system, not the driver, but I really can't figure out how this could have happened. I mean why would NOD screw up TCP/IP when anew graphics driver is installed, which has nothing to do with it? But just like I said, maybe it was a coincidence and NOD would have screwed up the protocols anyway.... I'll test it again when a new WHQL graphics driver is released to see if the error occurs again.

Greetings,
Marek

[Fedorov999]

FYI, I've been running 41.09 for a couple of months now and they are 100% stable, only thing I can suggest is you DISABLE Amon prior to installing drivers, many companies/products recommend you do this with resident AV scanners to avoid conflicts.

Also, invest in either PowerQuest DriveImage OR Acronis TrueImage and *always* take an image of your WinXP partition prior to removing/installing any new drivers.

It takes me 1min 30secs to restore my WinXP C: partition should I ever break it :)

Fedorov.

[Marek]

AMON was disabled during Detonator installation.

Marek.