NOD32 is still no.1?

Pete/Tony,

Do you have a version number of that new pop3scanner? Is it a different version number compared to the existing one?

Thanks, Jan.

 

Hi Jan,

I don't have the old one any more, but no,  it shows the same version number as Nod32.exe does, which is 1.244 (20020412)

It is however 112 kB, which is I believe almost twice as big as the old one.

And I have yet one more question D):

This new pop3-scan module doesn't create any more temp files, which is a good thing.

Now I'm wondering:

Before, when got an infected attachment, and Pop3 scan alerted me to it,  it converted it to a temp file, and when running Nod32, it found only this temp file to be infected.

ESET says, that that's the way to proceed: Popscan can't destroy a virus, but can only halt it so to speak by converting it to this temp file (someone stop me if I'm wrong)

Now it doesn't create temp files any more, which makes me wonder if that means that in the case of an infected attachment the new version of Pop3 scan does effectively destroy it.

I see no other logical possibility.

So please enlighten this confused NOD32 user

 

Hi Jan, there is no version number, but size has changed.
Old one was 67kb ( 68,608 bytes)
New is        112kb (114,688 bytes)

 

Thanks Tony and Mickey  

PS: in about a week I have to renew my subscription for another year (I guess I'm going to do that).

Thanks again, Jan.

 

Hi Tony,

Have you tried to send yourself the EICAR-test-virus?

Cheers, Jan.

 

Good idea, Jan.

However, Pop3 scan tells me "eicar.com contains Eicar test file", but gives me no options.

The 'next' button doesn't work.

I just hope it behaves differently in case of a real virus.

Would someone mind testing this as well, please?

 

Additionally,  when I reenabled AMON, and proceeded to save the attached eicar file it was dealt with straight away.

This is good.

I then sent myself a zipped copy of Eicar,  which wasn't detected by the Pop3 scan module.

Saved it on disk, and Amon didn't detect it either, because of the fact that *.zip isn't included in the extensions to be scanned.

Should I add it, do you think?

Finally I ran Nod32, which did detect Eicar in the zip file, but said that as it was archived, it couldn't clean it.

I take it, that as it's zipped, it's harmless (yes, I'm a real newbie... )

 

Setup Tag:

Extension Editor:

I have set it to scan all files (regardless of his extension).
PS: I only run NOD32 on-demand.

 

Thanks guys, that about anwers all my questions.

I had in fact discovered the 'extensions' radio button, and I had already configured Nod32 to scan all files, but hesitated to do the same with Amon.

In your opinion, does it make any difference in system resources or performance if it runs in the background all the time scanning all files?.

I'm going to check that next.

Thanks!