Dr Web question

Why is disable enhanced protection mode have a tic for default. I t would seem you would want this active on the intial installation.

 

i did wonder this myself,

but maybe some people dont want it scanning files without their say-so, if you know what i mean.

no idea, its a strange one.

cant remember if this was the case with the released version or not, but its definatly the case with the beta.

 

it is that way in beta and regular release. Serge?

 

post it on bugs.drweb.com and it will be assigned to a staff member for correction if they feel the need for it to be fixed.

 

Here's a link to a discussion on the enhanced protection in DrWEB from October. Several responses from Serge here go into some detail: https://www.wilderssecurity.com/showthread.php?t=152426&highlight=drweb 4.33

 

It's checked by default on the regular installation of DrWeb. I just downloaded the application. From the help file:

By default, SpIDer Guard XP version operates in the enhanced protection mode. In this mode the guard immediately checks all files, the scanning of which is specified in the program’s settings, and all other opened files are put on the queue for check (files opened for reading in the Smart and Create and write files modes). With the computer resources available, the guard will also check these files.

 

I'll explain, just in case you are curious.

Enhanced protection is disabled by default. If you delete drweb32.ini, open SpIDer Guard Settings and click Ok, you'll get pure defaults. Of course, installer can override initial settings.

This is a long story. When original 4.33 came out, enhanced protection was enabled, because its a cool feature. But first release of 4.33 was so slow in real life, people started to complain. The truth is a bit more complicated, with 4.33 we got a way more unpackers and new containers, improved heuristics and other things. For example, with the same test set 4.33 can process up to ten times more objects compared to 4.32. For a month or two we had hard time improving performance. Now SpIDer Guard is as fast, as in 4.32 (or even better). On-demand scanner still a bit slow, but getting better too.

But enhanced protection is still disabled by default.