Beta 4 !!!

[puff-m-d]

I just updated to the new Beta 4 and so far so good ;D !!!

Use the update feature in beta 2 or download from here: http://www.nod32.com/download/download.htm.

Regards,
Kent

[LowWaterMark]

There you go again Kent - being the first one to find the new beta.

You sure you aren't actually one of the developers in disguise? ;)

[hayc59]

so, how is it??

[the Tester]

Thanks Kent.

I'm downloading it.
I hadn't thought to look for a new beta!

[the Tester]

I ran the new beta 4.

The scan works like it always does.
I did notice a few new items. :)

There is a progress bar when NOD32 is scanning.
I never noticed this before.

There is a new component or module listed.EMON.
It's MS Outlook/Exchange e-mail protection.

These are nice additions IMO.

[tosbsas]

Anyone has a list of changes??

Is the right click issue fixed?? And the spampal??

Ruben

[marti]

NOD32, beta 4, has the same problem with Trojan Hunter as previous versions. That is, TH "hangs" when checking for updates (the LiveUpdate component) or when calling up the program. As before, if I disable AMON, all TH components work as they should. :(

[Straight Shooter]

That's too bad Marti... That is probably "THE" Thing that is driving me further and further away from NOD32.. Amon and it's conflicts...
:(

[MickeyTheMan]

As soon as system loaded i knew beta 4 still had sockets problem on my sys anyway as it conflicts with spyblocker and i loose connectibity to the net.

[rumpstah]

Did you try the IMON/Setup/Repair Now function? It should fix your issue. :D

[Blackspear]

What is the difference between Administrator version and standard Beta 4 version, is it just for networks?

Cheers ;D

[MickeyTheMan]

{QUOTE-> quoting: rumpstah link=board=36;threadid=8137;start=0#53142 date=1048999848]
Did you try the IMON/Setup/Repair Now function? It should fix your issue. :D
<-QUOTE}
Yes i did without success.
Disabled spyblocker from starting at start up as it was complaining of another app using port 80 as well as Naviscope which was giving an error 10106 (can't create listening sock)
Also changed settings in browser not to use pacfile and naviscope.
Only way to get connectivity back was to disable imon.

[tosbsas]

{QUOTE-> quoting: marti link=board=36;threadid=8137;start=0#53091 date=1048957936]
NOD32, beta 4, has the same problem with Trojan Hunter as previous versions. That is, TH "hangs" when checking for updates (the LiveUpdate component) or when calling up the program. As before, if I disable AMON, all TH components work as they should. :(
<-QUOTE}

No problem here when calling the update - whats your system?? I am on win2k 160MbRam but just and old PII 233

Yes it takes a little longer to start the programm as without Nod - I believe they still are fiddeling around with the upx packer

Ruben

[bibbe]

After having had the same problems with ref-updates, as some of the guys in the old NOD32 forum has, I downloaded the NOD beta and for me it works fine on my windows ME, with TDS, BoClean, Adaware and Spybot. Only once I had a problem with AMON eating my physical memory with a speed of 4 megs in 10 seconds, without me working, but after a reboot it stopped and I have had no problems since

bibbe

[marti]

{QUOTE-> quoting: tosbsas link=board=36;threadid=8137;start=0#53156 date=1049016039]
{QUOTE-> quoting: marti link=board=36;threadid=8137;start=0#53091 date=1048957936]
NOD32, beta 4, has the same problem with Trojan Hunter as previous versions. That is, TH "hangs" when checking for updates (the LiveUpdate component) or when calling up the program. As before, if I disable AMON, all TH components work as they should. :(
<-QUOTE}

No problem here when calling the update - whats your system?? I am on win2k 160MbRam but just and old PII 233

Yes it takes a little longer to start the programm as without Nod - I believe they still are fiddeling around with the upx packer <-QUOTE}

Pentium -- 1 gig; 256MG ram; Win98SE.

The TH LiveUpdate component works with AMON running, but it "hangs" and takes forever to execute compared to running it without AMON active. Same problem with the actual TH program.

[spy1]

Mickey - I'm using SB6.2 and have been using the following version of NOD:

Information on installed NOD32 Antivirus System
Version:***1.387 (20030328)
Virus signature database build:***3575

Information on installed components
NOD32 For Windows NT/2000/XP - base
Version:***1.199.14
NOD32 For Windows NT/2000/XP - Internet support
Version:***1.199.15
NOD32 For Windows NT/2000/XP - NOD32 On-demand Scanner
Version:***1.199.14

Operating system information
Platform:***Windows XP
Version:***5.1.2600 Service Pack 1
Version of common control components:***5.82.2800
RAM:***768 MB
Processor:***AMD Athlon(tm) Processor (1325 MHz)


No connectivity problems and SB isn't being blocked (prevented from using port 80) by anything (functioning correctly).

Can you post a copy of your "Information"" info from NOD? Pete

[MickeyTheMan]

Information on installed NOD32 Antivirus System
Version:***1.387 (20030328)
Virus signature database build:***3575

Information on installed components
NOD32 For Windows NT/2000/XP - base
Version:***1.199.14
NOD32 For Windows NT/2000/XP - Internet support
Version:***1.199.15
NOD32 For Windows NT/2000/XP - NOD32 On-demand Scanner
Version:***1.199.14

Operating system information
Platform:***Windows 2000
Version:***5.0.2195 Service Pack 3
Version of common control components:***5.81.4916
RAM:***384 MB
Processor:***AMD-K7(tm) Processor (499 MHz)

[puff-m-d]

{QUOTE-> quoting: LowWaterMark link=board=36;threadid=8137;start=0#53033 date=1048906376]
There you go again Kent - being the first one to find the new beta.

You sure you aren't actually one of the developers in disguise? ;)
<-QUOTE}

LWM,

Just by luck I guess ;D ..... I was running beta 2 and the auto-updater popped up and asked if I wanted the new version. I didn't even have to go looking ;) ...

Regards,
Kent

[Terry]

So far, so good with B4! No connectivity problems but found a strange thing when I ran HiJack This!.

"Broken internet access because of LSP provider "imon.dll" missing"
(imon.dll is there in C:\Windows\System and also in C:\ESET\Setup\02)?????

Nothing wrong with my internet access, (DSL), works cause I'm here!
EMail access is working too, using Outlook Exp. 6.0, Eudora, Incredimail.

Had to set up email clients using server address not "localhost" as with POP3 Scan.

Running SpyBlocker 6.2, SSD 1.2, Spyware Blaster and AdShield 3.0 beta. No problems so far.

800 mhz. Celeron, 512 MB RAM, 30 GB HD, on LAN, DSL service.

Information on installed NOD32 Antivirus System
Version:***1.387 (20030328)
Virus signature database build:***3575

Information on installed components
NOD32 For Windows 95/98- base
Version:***1.199.10
NOD32 For 95/98- NOD32 On-demand Scanner
Version:***1.199.10
NOD32 For Windows 95/98- Internet support
Version:***1.199.15

Operating system information
Platform:***Windows ME
Version:***4.90.3000
Version of common control components:***5.81.4916
RAM:***504 MB
Processor:***Intel(r) Celeron(tm) processor

If anyone has any thoughts on the quoted info above from HiJack This! please comment.

Thanks
Terry ???

[MickeyTheMan]

{QUOTE-> quoting: Terry link=board=36;threadid=8137;start=15#53216 date=1049061978]
So far, so good with B4! No connectivity problems but found a strange thing when I ran HiJack This!.

"Broken internet access because of LSP provider "imon.dll" missing"
(imon.dll is there in C:\Windows\System and also in C:\ESET\Setup\02)?????
/quote]
[/ <-QUOTE}
The same thing applies here. As soon as i enable imon, hijackthis gives me that message too. Once imon disabled that message disapears of course

[Karl]

A minor install issue: On older Win9x systems NOD has to replace the vc and mfc runtime libraries. As they are in use by other applications, the installer can's do so and simply exits instead of replacing them on a reboot. To succesfully install NOD you have to replace the libraries by hand... :( That might confuse "normal" users.

[marti]

{QUOTE-> quoting: Karl link=board=36;threadid=8137;start=15#53244 date=1049089763]
A minor install issue: On older Win9x systems NOD has to replace the vc and mfc runtime libraries. As they are in use by other applications, the installer can's do so and simply exits instead of replacing them on a reboot. To succesfully install NOD you have to replace the libraries by hand... :( That might confuse "normal" users.
<-QUOTE}
What are you talking about? I use Win98SE and NOD works fine.

[spy1]

Carl, can you run Hijack This and see if you get the same message?

Mickey, our common control versions are different - is that just because our OS's are different? Pete

[controler]

Win 98 is older than Win98 SE but me is thinking Mickey is running Win 2000 anyway, so Carl's install issue shouldn't apply should it?

[MickeyTheMan]

{QUOTE-> quoting: spy1 link=board=36;threadid=8137;start=15#53259 date=1049112574]
Mickey, our common control versions are different - is that just because our OS's are different? Pete
<-QUOTE}
I think so.
I also believe that somehow imon.dll does not registewr itself properly to the windows socket service and that the repair option does not fix it either although it says it does. The file is there is system32 folder.
I do run a dual boot system, but the same problem applied to previous betas on both 98SE & win2k.
It dows not matter whether i just activate imon and reloas sys or activate it & repair and reload. As soon as sys reloads, Naviscope can't create listening sock and Spyblocker can't use port 80 and browser looses access to net.

[MickeyTheMan]

I switched backed to reg version for time being, but just noticed that i can't use Web2Pop as it won't initialized saying another app using port 110 and yet Port explorer does not show anything there.
Just wonder if this somehow could be related

[controler]

I am not that familier with Port Explorer Mickey
but doesn't it sure sound like NOD is holding on to that port?
You would think Port Explorer would see it though.
Does Web2POP start-up with NOD disabled?

[spy1]

You can add XCleaner to the list of programs that have a problem with NOD's latest beta (although I haven't really noticed any difference in the program's performance).

See this screenshot and the one following.

[spy1]

And this.

[spy1]

Of course, there's also the notification from HijackThis's results:

Which I guess doesn't affect me since I'm not on dial-up.

Mickey - Are you on dial-up? Pete

[controler]

To run the LSP installer

Copy the LSP installation code in a DllRegisterServer function.
Add a registry subkey to the HKEY_LOCAL_MACHINE\COM\WS2\LSP registry key.
To this subkey, add a registry entry named DLL. For the value, insert the path to the DLL with the DllRegisterServer function.
When Winsock loads, it enumerates all keys under the subkey HKEY_LOCAL_MACHINE\COM\WS2\LSP. For each subkey that has a DLL property, it performs a LoadLibrary function call on the value in that property. If successful, it then calls DllRegisterServer for the DLL.
Value Description
S_OK The registry entries were created successfully.
SELFREG_E_TYPELIB The server was unable to complete the registration of all the type libraries used by its classes.
SELFREG_E_CLASS The server was unable to complete the registration of all the object classes.


http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wcekernl/htm/_wcesdk_Win32_LoadLibrary.asp

[MickeyTheMan]

I'm on cable and have disabled everything non essential including regular nod version and We2Pop still reports something listening on port 110 and won't initialized

[MickeyTheMan]

Web2Pop not related to nod after all. After making several adjustments not related to nod, got it to load.

[Karl]

The install issue I reported seems to be specific only to one system...I retried it on a clean win98 (not SE) and everything works fine... just to let you know.

[puff-m-d]

Hello all,

I have two suggestions and/or problem with beta 4 that have previously been discussed with previous beta releases:

1.) I invoke NOD32 through my download manager to scan the files immediately after download. The problem is still there that the scan settings are not saved and/or the scan profile that I have saved for NOD32 is not used. Many times I download a file that is not a default file type (especially *.zip files for instance), and then have to rescan after changing the scan profile to scan these non-default file types.

2.) If you disable AMON for whatever reason, IMHO there really needs to be some type of notification in the system tray to remind you that AMON is indeed disabled.

So far, these are the only problems/suggestions that I have come across for the beta 4 version.

;D Keep up the great work guys !!! ;D

Regards,
Kent

[tosbsas]

{QUOTE-> quoting: puff-m-d link=board=36;threadid=8137;start=30#53969 date=1049700189]
Hello all,

I have two suggestions and/or problem with beta 4 that have previously been discussed with previous beta releases:


2.) If you disable AMON for whatever reason, IMHO there really needs to be some type of notification in the system tray to remind you that AMON is indeed disabled.

So far, these are the only problems/suggestions that I have come across for the beta 4 version.

;D Keep up the great work guys !!! ;D

Regards,
Kent
<-QUOTE}

Like to second that

Ruben

[jan]

Hey Ruben,
{QUOTE-> quoting: tosbsas link=board=36;threadid=8137;start=0#53060 date=1048926892]
Is the right click issue fixed?? And the spampal??
<-QUOTE}

as you wrote:

>beta 4 is working great so far. No issues any more with SpamPal - it seems and the right click is fixed too.

I hope you don't have these problems anymore. :)

Ciao,

jan

[jan]

Hi Terry,
{QUOTE-> quoting: Terry link=board=36;threadid=8137;start=15#53216 date=1049061978]
So far, so good with B4! No connectivity problems but found a strange thing when I ran HiJack This!.

"Broken internet access because of LSP provider "imon.dll" missing"
(imon.dll is there in C:\Windows\System and also in C:\ESET\Setup\02)?????

Nothing wrong with my internet access, (DSL), works cause I'm here!
EMail access is working too, using Outlook Exp. 6.0, Eudora, Incredimail.

If anyone has any thoughts on the quoted info above from HiJack This! please comment.
<-QUOTE}

As you wrote :

>imon.dll is there in C:\Windows\System and also in C:\ESET\Setup\02

the imon .dll is there. So the HiJack doesn't display the message correctly. It's difficult to say why - it seem to be due HiJack internal processes. Anyway it doesn't seem to be a major problem.

Cheers, :)

jan

[jan]

Hi spy1,
{QUOTE-> quoting: spy1 link=board=36;threadid=8137;start=15#53320 date=1049144550]
You can add XCleaner to the list of programs that have a problem with NOD's latest beta (although I haven't really noticed any difference in the program's performance).
See this screenshot and the one following.
<-QUOTE}

This seem to be the same thing as in my previous post - anyway, both cases have been added to our list of problems and we'll have a look at that when we finish the more important things.

Thanks, :)

jan

[jan]

Hey Kent,
{QUOTE-> quoting: puff-m-d link=board=36;threadid=8137;start=30#53969 date=1049700189]Hello all,

I have two suggestions and/or problem with beta 4 that have previously been discussed with previous beta releases:

1.) I invoke NOD32 through my download manager to scan the files immediately after download. The problem is still there that the scan settings are not saved and/or the scan profile that I have saved for NOD32 is not used. Many times I download a file that is not a default file type (especially *.zip files for instance), and then have to rescan after changing the scan profile to scan these non-default file types.
<-QUOTE}

There is a new feature in the Beta4's NOD32 on-demand scanner: you can give your profile "Set as default" in the corresponding checkbox in the "Profiles" tab.
{QUOTE->
2.) If you disable AMON for whatever reason, IMHO there really needs to be some type of notification in the system tray to remind you that AMON is indeed disabled.
<-QUOTE}

This has been added to the wishlist
{QUOTE->
So far, these are the only problems/suggestions that I have come across for the beta 4 version.

;D Keep up the great work guys !!! ;D
<-QUOTE}

Thanks, :)

jan

[jan]

Hi marti,
{QUOTE-> quoting: marti link=board=36;threadid=8137;start=0#53091 date=1048957936]
NOD32, beta 4, has the same problem with Trojan Hunter as previous versions. That is, TH "hangs" when checking for updates (the LiveUpdate component) or when calling up the program. As before, if I disable AMON, all TH components work as they should. :(
<-QUOTE}

I have seen that delay in the current version of NOD too. After comparing it with the Beta4 I've experienced a big improvement. have you compared it too?

All the best, :)

jan

[DavidH]

Hello,

I am a registered user of NOD32. I have been using this AV without issue for about 14 months now and am currently using NOD32 B4. However tonight, I noticed a problem. The specific issue is that applications will now take about 30+ seconds to load. In fact, IE is now taking about 60 seconds to load but will load a little faster after being loaded once. And, I am having slow shutdowns and startups. The only actions that I have taken lately regarding NOD32 were to update the definitions. The only other actions that I have taken lately were to update my operating system (WinXP SP1) to the latest Critical Updates. In fact, if this helps, I have to admit, that I only noticed the problems AFTER I did the last updates today (19-Apr-2003) to Windows form the Microsoft Update site.

My System Configuration:
Windows XP SP1 with all latest Critical Updates and Patches
Gigabyte GA-7DX Motherboard, all latest drivers and BIOS
AMD 1200MHz Athlon
512 MB 266MHz DDR Ram
Outpost V2 Firewall
TDS-3 Anti-Trojan (only used on-demand)
MS Office 2000 with all latest Updates and Patches
NOD32 B4 Anti-Virus
PGP 8.0.2 (no encrypted disks)
FAT32 File System

I tried several things to see if I could isolate the cause or possible interaction with another application:

1. Disabled Outpost and stopped the service - NO CHANGE

2. Uninstalled NOD32, cleaned registry and file system, and re-installed NOD32 with a fresh download of B4 - NO CHANGE

3. Disabled AMON - this fixed the problem consistently.

I am not sure why this is the case. But, disabling AMON seems to fix all problems with slow login, application loading, and shutdown. Now, I am not the kind to jump ship at the first sign of trouble and I am perfectly willing to provide any information or logs that might be required to solve this problem. However, I consider an Anti-Virus one of the two most important pieces of software on my PC along with the firewall. And, there must be some sort of active protection. So, I am hoping that whatever is happening, we can arrive at solution fairly easily as I like NOD very much and would really really hate to change now. So, please let me know what other information you need and I will provide it. I am even willing to install a special diagnostic version of NOD if one exists. I have exported about 800K of information from TaskInfo2003 that I would be willing to send to ESET if it would be helpful. What is strange is that I used TaskInfo to monitor NOD32 and see if excessive CPU or memory usage might be involved. But, I saw nothing to that effect. All that I know is that disabling AMON fixes everything and applications load quickly again. Again, I want to emphasize that I only noticed this after the doing the latest updates to Windows XP SP1. For reference, those updates were:

815485: Recommended Update
811493: Security Update (Windows XP)
Q817287: Critical Update (Catalog Database Corruption in Microsoft Windows)

Thank you for your attention to this matter.

Best Regards,
David

[Tinribs]

You've answered your own question there David, its all due to Microsofts latest update.
See this related thread for answers. http://www.wilderssecurity.com/showthread.php?t=8539

[Blackcat]

Tinribs beat me to it!!!!

Other relevant thread here;

http://www.dslreports.com/forum/remark,6600671~root=security,1~mode=flat



Added URL tags

[DavidH]

Tinribs,

You are a lifesaver. I had no idea that a thread had already been posted on the subject and I looked. I just did not associate the thread title of the thread you provided with my specific issue. I thought this was the thread in which to post. Blackcat, thanks for trying to help too. Perhaps you need to learn to type faster. :P Just kidding.

I removed the update and it worked. Now, I know that everything that Microsoft does is not candy and roses, but I hardly think that they make Critical Updates just for fun. The update that interfered with NOD32 must have some utility.

So my question is: Will ESET find a way to make NOD32 work with that update.

Perhaps we users cannot adequately answer that question, but maybe ESET can. And, maybe I did not read that thread well enough. Any ideas?

And, THANKS AGAIN......I really appreciate the help. :)

[spy1]

David - Do have NVidia drivers? Did you update them? Pete

[Technodrome]

{QUOTE-> quoting: DavidH link=board=36;threadid=8137;start=30#55549 date=1050741447]
Now, I know that everything that Microsoft does is not candy and roses, but I hardly think that they make Critical Updates just for fun. The update that interfered with NOD32 must have some utility.

So my question is: Will ESET find a way to make NOD32 work with that update.
<-QUOTE}

As I said earlier, NOD32 has nothing to do with this. It slowed down my system without NOD32 being installed.

So this is Microsoft’s matter and they should address it.



Technodrome

[DavidH]

spy1,

Yes, I do have NVidia drivers for my video card and they are updated to the most recent version.

Technodrome,

I understand and agree that this may not be an ESET issue. And I am unsure why, but my experience was different than yours. I did not notice any slowdown just due to the update. As long as AMON was disabled, the rest of the system seemed to operate just fine. Anyway, the problem is fixed now and I am satisfied with the solution.

[MegaHertz]

David,

Here is a blurp... from windows-help.net

• April 23, 2003 •

Microsoft Kernel Patch Slowing Down Windows XP Systems
Microsoft is said to be looking into problems that some people have reported after installing a security patch that was issued last week. The patch - which was designed to stave off a buffer overrun that could allow attackers to elevate privilege permissions on users' machines - ended up slowing some users' systems to a crawl.

It seems that disabling your antivirus auto protect feature fixes the problem, but this work-around means that you patch one hole (the kernel) and opening up another (no auto-protect AV scanning). People have reported that this happens with Norton, McAfee and EZtrust Antivirus.

If you are having slowdown problems, you can also remove the patch for now, it is listed in Add or Remove Programs and called Windows XP Hotfix (SP2) Q811493. Hopefully Microsoft will fix the patch sooner rather than later. When you remove the 811493 patch, you could be prompted that the removal will cause the 814995 patch not to function, this is a flase "alarm", just uninstall 811493.

In some cases the patch will not be listed under Add or Remove Programs. In that case, system administrators can use the Spunist.exe utility to remove this patch. Spuninst.exe is in the %Windir%\$NTUninstallQ811493$\Spuninst folder, and it supports the following Setup switches:

* /?: Display the list of installation switches.
* /u: Use unattended mode.
* /f: Force other programs to quit when the computer shuts down.
* /z: Do not restart when installation is complete.
* /q: Use Quiet mode (no user interaction).

Lets hope that Microsoft gets this patch fixed ASAP.

[DavidH]

Hi MegaHertz,

Thanks very much for the supplemental information. It is reassuring to know that NOD32 was not the only AV affected. I did remove the patch after the initial response by Tinribs. Everything has been working fine since then. I do Microsoft gets it together and fixes this problem as it is a pain to be sure to skip that update everytime I use Windows Update. Anyway, I understand the issue and besides, "I am NOT giving up NOD32". That is for sure. :)

Have a good day. :)