Automatic startup file check

NOD32 v4 spends a bit of time finishing the startup check on reboots, so I've limited the startup file check to boot sectors, operating memory, and files. Furthermore, about every other time I see in the log files an entry that the user terminated the scan. I'm not doing that (I don't think).

In all cases, I've turned off cleaning since I want to make the decision. I'm thinking that depending where during bootup the detection occurs the system might not be prepared to display messages, or the message might flash and disappear.

So I have two questions:
*If NOD32 detected a problem during the boot cycle would I see a message?
*What could I be doing that might stop these boot scans?

Here's the log from the last boot scan:
Scan Log
Version of virus signature database: 4000 (20090410)
Date: 4/11/2009 Time: 2:39:30 PM
Scanned disks, folders and files: Operating memory;C:\Boot sector:\Boot sector;E:\Boot sector;F:\Boot sector;C:\:\;E:\;F:\
Scan terminated by user!
Number of scanned objects: 660
Number of threats found: 0
Time of completion: 2:39:49 PM Total scanning time: 19 sec (00:00:19)

 

2 Answers :

If NOD32 detected a problem during the boot cycle would I see a message?

A: Yes, after the automatic startup file check starts.
If malware is detected you will receive a prompt unless you have it automatically delete or quarantined.

B: You can goto the scheduler and uncheck the automatic file check. In the schdeuler planner section.

 

Oh, yeah, I see that, with an entry for "user logon" and an entry for "successful update".

I'm going to leave them checked, though. I'm satisfied with the resulting scan time with only files, memory, and boot sector checked.

 

@DesertRat:
how did you change "automatic startup file check" scanning options?
The only way for me is to have it to scan on user logon or after an update, nothing more, so I'm just wondering how did you tweaked it?

 

In the advanced setup tree, at the top, "Antivirus and antispyware", there's a button for automatic startup file check setup.

I've finished tweaking, and in the end I'm happy with all objects enabled EXCEPT e-mail files. Those e-mail files were evidently what was causing the long startup scan time.

 

Email files are not scanned by the startup scanner at all. If they are it would mean they are listed in the run registry key which is impossible.

 

Thanks, I knew about that one, just thought that maybe you've found the one that I was asking about in this thread:
https://www.wilderssecurity.com/showthread.php?t=238256

seems hidden very well.

 

Not necessarily.

In Tools\Scheduler highlight the entry you are interested in and select Edit. As you Next your way thru you'll come to the section you are interested in.

Bubba

 

Well, I've tried that, but it never comes to the section that's described in the help file... maybe those options are only available in ESS?

 

Most likely you didn't edit the Automatic startup scan task.

 

I left it on default (user logon) 'cause that's fine with me. All I want is to tweak it to my liking (to be able to choose what it scans at startup).
There is no way to do that if you go in Tools->Scheduler->highlight Automatic startup file check->edit task.

But if you read about Automatic startup file check in Help file there's apparently a list of options that you can apply.
Those are the ones I'm interested in.

 

This is the last screen of the startup scan task setup I get:

 

Ok guys... just shoot me...now...
yes I get that screen also after I click on finish button (which I never did before thinking that it's not necessary to do that if everything is left at default).
But hey, you learn something new every day.

Thanks for all the help.
Highly appreciated