couple questions regarding real time scanning.

[chrcol]

Hi guys and girls.

So here 2 questions I got.

1 - In the help page for nod32 I quote this.

By default, files that have already been scanned are not scanned again unless they have been modified, in order to provide the minimum system fingerprint when using real-time file system protection (files are scanned again immediately after each virus signature database update). To scan all files each time they are accessed, disable the Optimized scanning option in the Real-time file system protection Advanced Setup window.

Sounds cool, I wanted to make sure the option is enabled but it is missing. I am using the latest build of nod32 4.0.467. So is this a planned feature that got cut for release?

2 - There is some confusion on my part in regards to real time scanning options. If I click real-time time file system protection and then options, I can configure various options such as the extensions scanned and advanced heuristics. But then if I click advanced setup the advanced heuristics etc. can be set again seperatly for modify/create and execute, so does this mean the options under real-time file system protection only apply to open files and not execute/create? In addition I set to the default extensions only but when I watch the nod32 status window I see it continously scanning my log files so its as if it ignores the setting. So I need this clarifying as well please.

[Marcos]

Originally Posted by chrcol

Sounds cool, I wanted to make sure the option is enabled but it is missing. I am using the latest build of nod32 4.0.467. So is this a planned feature that got cut for release?

Scan optimization is enabled in v4 by default. In v3 and v2, there was a checkbox allowing the user to enable or disable it.

2 - There is some confusion on my part in regards to real time scanning options. If I click real-time time file system protection and then options, I can configure various options such as the extensions scanned and advanced heuristics. But then if I click advanced setup the advanced heuristics etc. can be set again seperatly for modify/create and execute, so does this mean the options under real-time file system protection only apply to open files and not execute/create?

Advanced heuristics is enabled only for newly created and modified files and on execution of files from removable media by default. In advanced setup you can enable AH on execution for all files that are run. Enabling AH in the ThreatSense setup will enable it for all events: File open, File creation, File execution. Basically this setting takes precedence over the two others as it enables AH on every event.

In addition I set to the default extensions only but when I watch the nod32 status window I see it continously scanning my log files so its as if it ignores the setting.

The Statistics window shows all files that flow through the ESET kernel so excluded files are shown here as well.

[chrcol]

ok thanks for clarifying this for me.

I suggest to eset to add what you explained to me in the help file in the next version.

Whats the reason for the removal of the ability to toggle scan optimization in v4?

[ccomputertek]

Originally Posted by chrcol

ok thanks for clarifying this for me.

I suggest to eset to add what you explained to me in the help file in the next version.

Whats the reason for the removal of the ability to toggle scan optimization in v4?

I don't think it was removed, if I'm thinking of the same option your talking about.In version 2/3 it was a global setting to shut it off, one check box for all the protection types.But now in V4, I guess you have to go into each threat sense you want optimized scanning off and uncheck the box there.

[chrcol]

someone said the same as you in another old post I found, and I agree with the other original poster that the option you refer to is something different.

For 2 reasons, first it is called something different 'enable smart optimization'. Second the help page for that options says when turned on nod32 will decide on how to scan specific files based on some kind of internal database it has, not 100% sure what it means but it certianly is described very different to the option I mention in my original post here.

[Marcos]

There's no sense in having scan optimization switchable. It's enabled in v4 by default and cannot be disabled.

[ccomputertek]

Originally Posted by Marcos

There's no sense in having scan optimization switchable. It's enabled in v4 by default and cannot be disabled.

Going by this, then I presume smart optimization is different than optimized scanning.

A bit confusing..