Nero 9.4.13.2b and NOD32 4.0.437

Hi all,

I was downloading the latest release of Nero Burning Rom (a 382MB installer) from Filehippo using IE8 on Windows Vista Business SP-2. I'm running the latest version of NOD32 (4.0.437 with latest definitions) with DEFAULT settings.

When my download was about 99% my whole system froze and I couldn't do anything else. I just waited, waited and waited while the PC fan was blowing at its maximum speed. After about 10 minutes I gave up and pressed my PC power button effectively shutting it down.

The CPU was completely maxed out during this process and ekern.exe was using around 90-95% of its cycles. (It's a P4 3.20GHz and 2GB RAM)

Is there a way to prevent this from happening? 1-2 minutes of NOD32 scanning this file would be OK...but, 10+ minutes is TOO MUCH.

Kind regards,

Carlos

 

Try setting a size limit for sfx archives in the web access and real time protection setup to, let's say, 5-10 MB.

 

Does this mean we're to assume anything larger is safe or is it a program limitation? Why was the default setting not 5-10 MB?

 

There is no limitation by default because it's safest. However, if one minds delays when unpacking and scanning large archives the only thing they can do is set size limitation for archives and rely on on-access scanner that it will catch and block potential malware (most likely just adware in the case of such large archives) when running the sfx archive (installer).

 

Well said and point taken.

Thank you

 

At 99%, NOD32 will detect the Ask Toolbar in the Nero archive and terminate the download. This is probably when your PC froze or at least appeared to freeze. I usually disable NOD32 when I update Nero, but I always download directly from Nero's site.

 

I just ran into the exact same problem. Downloaded from the Nero site for over an hour the paid-for 535MB Nero 9.4.13.2 full install. Then at 99% everything stopped with the CPU at max. After 8 minutes of this, NOD32 reported the "Win32/Toolbar.AskSBar potentially unwanted application".

I then disabled NOD32 and downloaded it again for another hour. Unbelievably, NOD32 then did the same thing!

I now discovered that I only disabled the Real-time protection, even though doing so shows "Enable" on the right-click menu, indicating that everything is disabled.

So just one question: Is this toolbar really a danger in Nero, or is it a false positive?

- JohnG

 

The toolbar considered to be adware/spyware by a lot of people.

 

Thanks for the reply. I learned a lot as a result.

Apparently many reputable vendors, including security-related vendors such as Comodo, ZoneLabs and Symantec, have bundled this in some of their products.

IAC claims it has mended its ways, and the toolbar no longer exhibits malware characteristics.

Difficult to know where the truth lies.

- John