Suggested configuration for Minimum Performance Hit

Running W2K Pro. Want to configure NOD32 with ABSOLUTE minimum of startup items and still be able to scan OE incoming mails. Auto update of virus database would be nice but not mandatory. Don't need real-time virus protection. All suggestions welcome.

 

Nod32 is VERY light on resources, I don't think you should see a significant difference.

You do have the option to disable AMON (resident scanner) from loading at startup.

Hope this helps...

Cheers

 

1) in AMON disable OPEN file scan (exec and create left checked)
2) disable fdd on-shutdown...
3) check that there isn't any file that open self or often accessed files (firewall .exe, ini files, loging files etc...)

 

Okay...thanks.

Today's download of a new definition update took almost 1.8MB! Is this normal for NOD32? Does this program use incremental update?

 

DiGi, can you explain your thinking for 1. In particular, although this may reduce resource usage, has this disabling on Open, any effect on the protective abilities of AMON? Thanks.

 

No, this is not the norm, only once in a blue moon, usually between 7 and 70k...

Cheers

 

OK, the last update was less than 30KB. I disabled AUTOMATIC START UP OF AMON. Also unchecked NOD32KUI from the Startup tab (W2K Pro). Rebooted but still see NOD32 running in task manager. It's pulling about 11MB. Not sure why this program needs this much RAM to run virus definition update and scan incoming mails. Loading AMON during boot will use an additional 3MB of RAM. Is this normal?

 

Yes it is normal. If you woried about 3MB of RAM I would say it is time to more RAM or better yet a new computer. NOD uses less RAM than any other AV with the exception of F-Prot.

 

Does NOD32 incorporate a script blocker?

 

No.

Cheers

 

Most top-rated AV proggies have this feature. Why would NOD omit this from the package?

 

Because there are also legitimate uses for script so NOD looks for known malicious script and allows legitimate scripts

 

You can download a really good FREE script blocker here:

http://www.analogx.com/contents/download/system/sdefend.htm

Hope this helps...

Cheers

 

Blackcat - no it shound't

there are tree checkboxes...

first is "open" scan - it scans files when they are opened. You CAN open file - but you don't execute it... (like viewing file, reading for copy, READING Icon (for desktop/start menu shortcuts))... Second scan is "executing" - it will scan files when they are executed (running .exe, loading dlls etc..) and last scan is "create" - when files are created. So If you have clean system then amon tests only just-executing files (it don't report infected file if you have shtortcut on desktop, you must run it) and of course it reports new creating files.

About script blocking - many firewalls have this feature, nod scans these files and if they are infected then it should report it...

Block-all isn't feature for antivirus, it is job for firewall. Firewall should do blocking, not antivirus.

 

Is it possible to remove the NOD icon in the lower right side of the taskbar?

 

As far as I am aware, no. If you did this, there would be no visual way of knowing Nod32 was running or had been disabled, a bit pointless I would think...

Cheers

 

Thanks, DiGi

 

Some users don't care for the full-time automatic AMON protection. There's an option to prevent AMON from loading during PC boot, so only the auto virus definition update and the mail scanner IMON are active. In this case, the NOD icon is useless. One can always re-launch AMON by clicking on the shortcut of NOD32 Control Center.

There's already a little pop-up after a successful update of the virus def. A similar pop-up to status email scanning would be nice. I see NO NEED to run nok32kui.exe AND nod32krn.exe at the same time just to update virus definition file and scan email. Even Piggy Norton is up to speed with this protocol as far back as 2000. Use Task Scheduler to update the virus def. Launch a small subroutine to scan mail.