PDA

View Full Version : nod32 vs dr web??


zfactor
March 19th, 2005, 05:35 PM
i am now a happy nod32 user really like the program. i know someone using dr web. i have not ever ran this av and he is asking me why should he switch or should he just stay with what he has. i now myself may be a little biased because i do really like nod. so i need everyone here to give me thier thoughts on this so i can better help him out. like the main differences or issues and detection rates if possible he now can get a discount apperently from dr web for renewal but is considering nod. his dad uses the computer for his business (major attorney HUGE lawfirm) keeps much important data on it while he does back it up frequently does not want any issues. i appreciate it and thank you all in advance.

Firecat
March 19th, 2005, 05:37 PM
Oh no...I remember a NOD32 vs. Dr Web thread...It became a flame thread.

Both programs are very good, but NOD is better at signature database, heuristic engine of both are very good, although Dr.Web may occasionally have false positives.

Regards,
Firecat

Randy_Bell
March 19th, 2005, 05:40 PM
-{ Quote: "Oh no...I remember a NOD32 vs. Dr Web thread...It became a flame thread. Both programs are very good, but NOD is better at signature database, heuristic engine of both are very good, although Dr.Web may occasionally have false positives." }-No flames intended here at all, but my impression is that Dr. Web has better trojan detection if that is important to you; but you can always supplement your AV with a dedicated AT. ;)

BlueZannetti
March 19th, 2005, 05:51 PM
I guess I'd step back a bit.

If he is a major attorney for a HUGE law firm, I'd expect AV coverage on the machine if it were a firm PC. Check that before doing anything. Even if it doesn't have an AV installed, compatibility with any customized applications should be verified if it's going to sit on a firm LAN.

If it's a home or personal machine used in a work context, these cautions can be tuned down just a bit.

Blue

Firecat
March 19th, 2005, 05:53 PM
NOD has very few compatibility problems with applications....

zfactor
March 19th, 2005, 05:59 PM
this is his "home" office pc. he does regularly log into his office pc's to access those files but this is the one he works at from home. his son uses it when he's not it is a really great custom alienware machine so he does a lot of gaming etc... whe his dad is not using it. he does have his own but its "only" a 3.0 p4 so his kid wants to always use the better machine. his dr web home key will expire the end of the month and he was looking into nod. i just didnt know what to tell him.

hid did is NOT very tech savy... uses it for what he needs and thats all nothing more. they have symantec av at the office. while they could just install it at home they are "extremely honest" people and would not do that. his son does not like symantec so somehow he decided on dr web instead when he was looking i guess he got sort of deal on it with something he bought or ordered. thanks

zfactor
March 19th, 2005, 06:00 PM
p.s i do not want to start a flame thread here just a legit question cause i have never used dr web. and his dad will not let him install nod to try it out so im trying to get info

Firecat
March 19th, 2005, 06:02 PM
-{ Quote: "p.s i do not want to start a flame thread here just a legit question cause i have never used dr web. and his dad will not let him install nod to try it out so im trying to get info" }-
I know zfactor,

But sometimes certain people have the tendency to just come out and start flaming...whether it was intended by the thread starter or not. Lets hope this thread goes smoothly.

:):):)

Regards,
Firecat

zfactor
March 19th, 2005, 06:05 PM
thanks firecat by the way congrats i just read the thread!! i really enjoy this forum so far and all the input yours included thanks

Firecat
March 19th, 2005, 06:07 PM
Read THE thread? Which thread? ???

Your always welcome zfactor.

Firecat :)

Stan999
March 19th, 2005, 06:13 PM
-{ Quote: "No flames intended here at all, but my impression is that Dr. Web has better trojan detection if that is important to you; but you can always supplement your AV with a dedicated AT. ;)" }-

It looks to me like they are about the same as far as trojan detection
according to http://www.av-comparatives.org/

zfactor
March 19th, 2005, 06:19 PM
http://www.wilderssecurity.com/showthread.php?t=71540
this one!!

hollywoodpc
March 19th, 2005, 06:19 PM
Ok guys . Back to the questions at hand .
Z man . Both are good . Dr. web has shown improvements as of late . The trojan detection rate of NOD is about to get even better . You have gracefully said you have respect for me . That said , look what I use . Does that help ? I know you want specifics but , too many for me to go into . Do not know how to tell you to get them to switch . Sounds like it may be an uphill battle no matter what you try to do . I wish you good luck though . If you look at most tests , you will see NOD usually fairs better .

bellgamin
March 19th, 2005, 06:37 PM
I am a user & fan of DrWeb, so regard my comments accordingly.

NOD is good, & getting better faster than most other top-ranked AV's. It also has a great support forum right here at Wilders.

Support for DrWeb is not as good as Nod's support. On the other hand, DrWeb works hand-in-glove with AdInf, one of the very best Integrity Checkers. That partnership will give good intrusion detection plus excellent malware protection. A very powerful duo!

DRW & NOD are about equal. DrWeb+AdInf is better than NOD alone, but it's 2 programs versus one. On a head-to-head basis, I recommend NOD -- good support carries the day. (Much as it pains me to say it.)

zfactor
March 20th, 2005, 03:33 AM
thanks all of you i think i will try to get him to switch, which is what i wanted anyway ;D but was hoping there would be a deciding factor in there to help the desicion if ya know what i mean. ill see what i can do thanks to all of you

jlo
March 20th, 2005, 04:26 AM
Hi,

I am a Nod32 user and like it for its advanced Heuristics. I also tried Dr Web and was also impressed with how light the product runs and regular updates.

I think he will be happy with either. If he has been with Dr Web for the last year and likes then why not let him keep it?

Cheers

Jlo

Benvan45
March 20th, 2005, 04:31 AM
Have used Nod for some time, but keep on falling back on Dr Web and stick with it now. Super light, fast, updates are great. Beta Malware detection file available. Simple interface etc. etc. Handles e-mail infections just great, instead of all the screens popping up in Nod.
Suits my system better than Nod32.

Good luck ;) Putin

BlueZannetti
March 20th, 2005, 05:08 AM
-{ Quote: "....his son uses it when he's not it is a really great custom alienware machine so he does a lot of gaming etc... whe his dad is not using it. he does have his own but its "only" a 3.0 p4 so his kid wants to always use the better machine. his dr web home key will expire the end of the month and he was looking into nod. i just didnt know what to tell him...." }-zfactor,

OK that's an excellent step back and description of the context.

Custom Alienware machine? Well, at least the two choices are good light ones. I only used Dr Web in a trial. I personally liked NOD32 more, but you have a couple of opinions above that come to the opposite conclusion. The www.av-comparatives.org (http://www.av-comparatives.org/) tests are a good yardstick. Current comparative performance is about equal, so if his dad is leaning towards Dr. Web (for whatever reason) he can be assured it is not a bad turn of events.

Blue

Blackcat
March 20th, 2005, 06:05 AM
-{ Quote: "Hi, I think he will be happy with either. If he has been with Dr Web for the last year and he likes it then why not let him keep it?" }-
Exactly. "If it isn't broke" ;)

Firecat
March 20th, 2005, 07:16 AM
-{ Quote: "Exactly. "If it isn't broke" ;)" }-
Then dont fix it!

BlueZannetti
March 20th, 2005, 07:41 AM
Of course, you have the other ethic that a die-hard tweaker like myself seems to adhere to...

If it isn't broke, then break it and let the fun begin....

Blue

Firecat
March 20th, 2005, 07:46 AM
-{ Quote: "Of course, you have the other ethic that a die-hard tweaker like myself seems to adhere to...

If it isn't broke, then break it and let the fun begin....

Blue" }-
LOL!!!!

And if it isn't there, get it just for the heck of breaking it, and let the fun begin...;D

Don Pelotas
March 20th, 2005, 07:51 AM
-{ Quote: "If it isn't broke, then break it and let the fun begin....

Blue" }-
Now that has a familiar ring to it. ;) 8)

SDS909
March 20th, 2005, 09:56 AM
Go with Dr.Web. I found NOD32 conflicting with things, and sometimes bogging my web browsing. Dr.Web seems so light, and lovely.

I'd say the choice would be between Arcavir and Dr.Web, not Nod32, but thats my opinion, I had bad luck with Nod32 on several machines here.

Firecat
March 20th, 2005, 11:10 AM
-{ Quote: "Go with Dr.Web. I found NOD32 conflicting with things, and sometimes bogging my web browsing. Dr.Web seems so light, and lovely.

I'd say the choice would be between Arcavir and Dr.Web, not Nod32, but thats my opinion, I had bad luck with Nod32 on several machines here." }-
But tech support of Dr.Web could be better from what I hear around these forums...


ArcaVir or NOD it will be ;D

Regards,
Firecat

AndreyKa
March 20th, 2005, 11:22 AM
to BlueZannetti
Quote:
The www.av-comparatives.org tests are a good yardstick.
---
This test didn’t use beta Adware/SpyWare base drwnasty.vdb (it gives 3% of base records increase).

to bellgamin
Quote:
NOD is good, & getting better faster than most other top-ranked AV's. It also has a great support forum right here at Wilders.
---
Support DrWeb forum is http://support.drweb.com/forums

to Firecat
Quote:
Both programs are very good, but NOD is better at signature database, heuristic engine of both are very good, although Dr.Web may occasionally have false positives.
---
Heuristic engine Dr.Web disabled to prevent false positives.
By the way this site have mistake in recommended SpiderGuard configuration:
“We recommend "all files" in the Scan Mode”
http://www.wilders.org/screenshots20.htm
It is right way to get false alarm.

to zfactor
Quote:
this is his "home" office pc. he does regularly log into his office pc's to access those files but this is the one he works at from home. his son uses it when he's not it is a really great custom alienware machine so he does a lot of gaming etc... whe his dad is not using it. he does have his own but its "only" a 3.0 p4 so his kid wants to always use the better machine.
---
The best thing that he can do it upgrade sons computer ;) and stay with old doctor.

tahoma
March 20th, 2005, 11:24 AM
dont want to flame either but i trialled nod32 a few weeks ago, and now im back on drweb for 2 main reasons, 1) drweb finds everything in 500 strong malware collection. nod misses a few
2) drweb updates are realsesed every 30 minutes now! even faster than kav. with nod i was lucky to get updates twice a week.

also drweb is even lighter on resources onmy machine.

so, nod32 is good, but on my machine and with my usage pattern i feel drweb is better for me

Blackcat
March 20th, 2005, 11:38 AM
-{ Quote: " drweb updates are released every 30 minutes now! even faster than kav. with nod i was lucky to get updates twice a week." }-
Technodrome alerted me to the very fast response of Dr Web and this is certainly a big plus for the program; http://solutions.drweb.com/

With a Help-file now incorporated into the program and a very fast response time to malware threats. I wonder what next is in line for improvement?

TAG97
March 20th, 2005, 11:51 AM
-{ Quote: "---
Heuristic engine Dr.Web disabled to prevent false positives.
By the way this site have mistake in recommended SpiderGuard configuration:
“We recommend "all files" in the Scan Mode”
http://www.wilders.org/screenshots20.htm
It is right way to get false alarm.
" }-
With Heuristics enabled, I haven't had a false positive in the last three years. This false positives thing was a problem five years ago.

chia
March 20th, 2005, 01:35 PM
If the Dad won't let his son install and try NOD on the faster machine then why not have the son install it on his own slower machine and give it a go? Seems like the son is making the AV selection...unless I'm missing something.

BlueZannetti
March 20th, 2005, 01:52 PM
-{ Quote: "If the Dad won't let his son install and try NOD on the faster machine then why not have the son install it on his own slower machine and give it a go? Seems like the son is making the AV selection...unless I'm missing something." }-Although many like myself use NOD32 with success, there are plenty out there like tahoma and SDS909 who run the same experiment and come up with an alternate optimal solution - Dr. Web in this case.

Objective tests imply differences are likely within the reproducibility of the challenge tests. Given that backdrop, and systems which seem to be functioning well, what's the driver for a change? In the absence of a clear shortfall in performance, "Why would you change?" is a valid question.

Blue

bellgamin
March 20th, 2005, 02:29 PM
-{ Quote: "Objective tests imply differences are likely within the reproducibility of the challenge tests. Given that backdrop, and systems which seem to be functioning well, what's the driver for a change?" }-*** >> In udder voids, "If it ain't broke, don't fix it." 8)

hollywoodpc
March 20th, 2005, 03:40 PM
In the absence of a clear shortfall in performance, "Why would you change?" is a valid question.

Blue" }-


Another excellent point from the man in Blue .

SDS909
March 20th, 2005, 03:51 PM
Yea if the good doctor isn't broke, then why mess? Slap the extended adware/spyware databases on the doctor, renew that subscription, and leave well enough alone.

At least thats what i'd do, but generally the catalyst for me changing AV's is when I have a problem. So far the doctor hasn't had a hint of a problem.

zfactor
March 20th, 2005, 11:45 PM
yes i guess i see all of the points. you see my friend is not exactly pc "smart" he know the basics and what it the fastest and best out there as far as chips go and that kind of thing (they can afford to always have a new one) but in this case in teaching him a lesson his dada is making him upgrade him machine this time and is not paying for it so at this time he cant do it if you all understand more now. so after talking to him and getting more of a feel for what he is capable of i had him stay with dr. web he has been using it so he knows how to use it not that nod may be any harder but he has all basic settings on dr web. i do not know how well nod does out of the box without any configuring. and this settles it before even going into anything else. not to many av's will really do that much more for him if he is not going to use them to thier potential. i mentioned some of the things in nod and got a "huh" kind of response. im sure if he can use dr web he could use nod but i would not want him to sacrifice security for learning something else which im afraid might take some time. thank you all for your responses i mainly wanted to make sure dr web was an good choice for him and was a good av here. i know nod is cause i use it but do not have experience with "the good dr." after hearing all of the comments here i may even give it a whirl and see how it does.

zfactor
March 21st, 2005, 12:12 AM
you say that dr web is that much lighter than even nod??? i didnt know this was possible; more info please.

Blackcat
March 21st, 2005, 01:09 PM
I am currently running Dr Web as a primary scanner on one of my Win XP computers.

It has two running processes; both SpiderNT.exe; one taking up 768K VM and the second 708K VM. Both take up only about 1MB RAM. But note that these figures do not include the scheduler or Spidermail. With Spidermail a further 3784K VM is taken up.

So overall the memory footprint is very small and virtually no effect on system performance is seen.

NOD on my systems has a total VM usage of 9230K for 2 running processes with again virtually no detrimental effect on performance.

The only AV I have used which has a lighter memory footprint than Dr Web or NOD is F-Prot.

All 3 AV's are generally considered very lightweight and are therefore particularly recommended for older systems.

bellgamin
March 21st, 2005, 02:29 PM
-{ Quote: "With Spidermail a further 3784K VM is taken up." }-
With DrWeb's real-time monitor running, is SpiderMail *essential*?

Blackcat
March 21st, 2005, 02:48 PM
Although Spidermail is supposedly very good I very rarely run with this option. For me and my systems a specific email scanner running alongside an AV RTM is not esssential. I rely on SpiderGuard and common sense.

However, lots of other people would prefer to run an email scanner together with their AV Guard on their computers.

Honyak
March 21st, 2005, 02:56 PM
I trialed DrWeb a few months back on my second comp and loved it. My current AV (F-secure) is up for renewal in about 4 months and looks like I will be switching to DrWeb (99.9% certain) and bellgamin, I know you have been using DrWeb for sometime, how good is the tech support? I have read that it is not to good, what is your experience?
I monitor it at jotti's and it seems that it performs as well if not better there as NOD32.
BTW, I trialed NOD but had conflicts and other issues that I did not like about it.
DrWeb was so light and I really felt like it's protection was excellent.

Don Pelotas
March 21st, 2005, 03:13 PM
Honyak, i'm trialling DrWeb at the moment, and in light of the reputation that DrWeb has regarding this, i decided to send a mail to see how the support would be.

It took 16 hours for them to respond with a mail, well within my personal expectations for good support. I will try with a couple more in the remaining trial to see if i was just lucky.

Blackcat
March 21st, 2005, 03:18 PM
-{ Quote: " It took 16 hours for them to respond with a mail, well within my personal expectations for good support. I will try with a couple more in the remaining trial to see if i was just lucky." }-
IME, over several years use of this AV, Dr Web support can be very patchy and it also depends upon who you actually contact.

Honyak
March 21st, 2005, 03:19 PM
-{ Quote: "Honyak, i'm trialling DrWeb at the moment, and in light of the reputation that DrWeb has regarding this, i decided to send a mail to see how the support would be.

It took 16 hours for them to respond with a mail, well within my personal expectations for good support. I will try with a couple more in the remaining trial to see if i was just lucky." }-

Thank you for the info. I had no issues to contact DrWeb about so I never did.
16 hours is very resonable IMO.

FanJ
March 21st, 2005, 03:44 PM
I don't have DrWeb, but I do have ADinf32 Pro from the same company.

If I remember me well, I emailed them twice (could be more; I should take a look in my archive for that).
The first time was when I bought ADinf32 Pro and got the wrong licence-key.
Extremely fast I got an answer with apologies and everything was happily solved.
The last time I got an answer in Russian. Well, as you all know by now, I'm not exactly a genius in foreign languages, so I couldn't understand it. Anyhow, it was not so important, so I let it rest ;)


@ Bellgamin
I believe you wrote in this thread about DrWeb and ADinf32.
First I would like to say that I absolutely love it; in no way I would want to run a system without it! :D
ADinf32 comes in two flavours: standard and Pro.
I have the Pro version.
The difference is that in the Pro version you can use a bit stronger HASH algorithm.
Yes, you can integrate ADinf32 and DrWeb.
That integration works both ways.
But please keep in mind: I don't have DrWeb so I cannot tell you much about it from own experience (I use NOD32 for on-access and KAV 4.5 for on-demand).
Maybe Technodrome could tell some more about it, but that's of course up to him ;)

Cheers, Jan.

Blackcat
March 21st, 2005, 04:01 PM
Relevant older thread here; http://www.wilderssecurity.com/showthread.php?t=14186&page=1&pp=25&highlight=DrWeb

Technodrome
March 21st, 2005, 04:15 PM
As Jan said, ADinf is a very good and powerful program. I run it since ’99 and I am very satisfied and impressed with it.

Integration with DrWeb is flawless and any new files reported by ADinf are automatically scanned with DrWeb. This configuration is very fast and I gotta say very effective. I didn’t do any tests yet, but I think this combo (especially ADinf) should be very effective against “RootKit” malware.


tECHNODROME

FanJ
March 21st, 2005, 04:46 PM
Thanks TD :D

I always love to read your input on this !

Most warmest regards, Jan.

bellgamin
March 21st, 2005, 09:30 PM
-{ Quote: "bellgamin, I know you have been using DrWeb for sometime, how good is the tech support? I have read that it is not to good, what is your experience?" }-
I have 2 answers: (1) Support is splendid when you have a good 1-on-1 contact. Recently the contact has been Oleg.Yakushev @ antivir.ru. Trouble is, everytime I find a great contact, the Dialogue Science folks promote him. (2) Support is variable if you don't have a personal contact. It's luck of the draw.

As to *needing* technical support -- it is very seldom needed. VERY seldom. (Knock on wood)

Don Pelotas
March 22nd, 2005, 02:04 PM
Ok, second mail to support was sent/received in 18 hours, still very good i think. Oh, and the answer was very satisfactory. ;) ;D

tahoma
March 22nd, 2005, 02:37 PM
what is this ADinf thing really? been looking around but i dont understand what it does or what the benefits are

Blackcat
March 22nd, 2005, 02:53 PM
-{ Quote: "what is this ADinf thing really? been looking around but i dont understand what it does or what the benefits are" }-
http://www.adinf.com/english/adinf/about.htm
http://www.wilderssecurity.com/showthread.php?t=33338&highlight=AdInf
http://www.wilderssecurity.com/showthread.php?t=742&highlight=AdInf

FanJ
March 22nd, 2005, 03:10 PM
Maybe I'll start later a separate thread for ADinf32 (not quite sure at the moment; I have to think about it...).

Maybe it would be better to leave this thread to its own topic (I know, I started talking about ADinf32 :-[ ).

Cheers, Jan.

zfactor
March 24th, 2005, 02:41 AM
i have heard dr web support is very good and thier sig update times is recently also quite fast. nod has been great for the last couple of weeks updates every day or so (i know kav does it every hour) but they are getting better. think i will still try it. you guys think it will play nice with nod?? thanks

bellgamin
March 25th, 2005, 04:04 PM
-{ Quote: "you guys think it (DrWeb) will play nice with nod?? thanks" }-
I will assume that you mean to use 1 av as on-demand and the other as real-time-monitor.

As I recall some of Blackcat's prior posts, DrWeb can sometimes get annoyed if it isn't the only av on-board.

As to my own experience, I can say that DrWeb plays nicely with the other AV's on my computer (F-Prot, AVG, AntiVir), but I don't know if the good Doctor would tolerate being in bed with Madam NOD. :o

By the way -- since you already have NOD, why spend money for DrWeb? If you want a back-up or second opinion AV, one of the freebies might do the job. Then, instead of paying for a second av, you could spend that money on something like BOClean, or a dozen roses for your significant other. 8)