nod32 vs. kaspersky

KAV's online scanner doesn't 'remove' anything but is a great disgnostic tool in helping clean up infected systems.Most of the malware removal sites use it to get a better grip on what they're dealing with and then proceed to the 'speciality' tools and of course 'Hijack This'.So in their eyes, it is an effective scanner.

 

I was under the impression that the KAV online scanner would remove viruses, but not spyware. Am I incorrect?

Thanks,
Jerry

 

Yes, it only reports which viruses and where, making it possible for you to delete manually.

 

JerryM

I could be wrong but every KAV scan report i've looked through it has said 'Skipped' by every entry no matter what malware it was.Have a look here about mid page.

http://www.computing.net/security/wwwboard/forum/18581.html

 

Thanks, I am not sure where I got that information/idea.
Jerry

 

Panda removes viruses but not spyware.

 

Maybe I got it confused with Bit Defender.

"BitDefender Online Scanner is a fully functional antivirus product. It features all required elements for thorough antivirus scanning and effective cleaning: it scans your system's memory, all files, folders and drives' boot sectors, providing you with the option to automatically clean the infected files."

It is good to know the capabilities of the various on-line scanners.

Jerry

 

Here's a small list of scanners. If they can't remove stuff you'll know.
http://nod32sse.hotserv.dk/scanners.php

 

Thanks, Brian. That is a good list to bookmark. A Squared also has an on-line scanner.
http://www.emsisoft.com/en/software/ax/

Jerry

 

Ah thank you, I'll add it in a few minutes.

 

with the help of Unlocker

 

How does Unlocker help?

Thanks,
Jerry

 

Have you ever had a file, which you could not delete because another program was "using" it? You don't necessarily need it, but it can be of help.

http://ccollomb.free.fr/unlocker/

 

Hi Don,
I use Unlocker to identify files in my temp folder, but I do not understand how it would help delete viruses. When one has a virus, does unlocker identify a file as a part of the virus?

Thanks,
Jerry

 

If a file is in use... unlocker can unlock it... hence allowing you to delete. Another way around this is to set the file to delete on reboot...

 

JerryM

Whenever malware are hiding/have infested a windows file, it is locked by windows and in alot of cases, prevents you from deleting anything inside that file.This program i guess because i've never used it, helps unlock that file to allow the user to delete the nasty in there.Another good program is called 'Moveon Boot.Show this program the path to the file you want deleted and reboot your computer and it will delete it before windows has finished loading.You can check it out here.

http://www.softwarepatch.com/software/moveonboot.html

 

Thanks, I did not realize that it might be locked. I thought the AV would delete the malware. It is a good program. I also have Moveon Boot.
Jerry

 

The "full" KAV 6 can scan/ delete/ clean locked files.

 

JerryM -

I did notice that Kaspersky was scanning very quickly -- but I have to say, it did seem that the program could not fairly be said to be working unless you whitelisted a bunch of stuff. I am not really liking that. I know theoretically, it can detect a file as changed, and then require it to be approved again, but as a practical matter at some point this would have to start introducing weakness. Especially if you consider the ones being whitelisted (windows components) are the exact opposite of one's that you don't need monitored. Another thing that bothers me is the Extreme disparity between the times of a full scan, and a "unchanged" scan. In fact, I'd have to say that the full scan took so long, I have my doubts as to if K could be scanning much of anything during the subsequent scans.

I'm not saying that NOD32 is better - who knows? I'd love to see something close to a real high stress test on a loaded computer and see what would happen. Would either one cope?

I used to not like scan only programs, but these days I am wary of A/V's cleaning and deleting without confirmation. In that scenario, there is not so great a difference.


-HandsOff

 

I'd really like to see how it deletes a dll injected in another process without crashing it.

 

On reboot, i think

 

Yes.

 

The scantime depends on your config, i personally never exclude anything in an on-demand scan, but i have done many tests and even with the "Scan new & changed files only" it would find what was put on the HD, just don't personally like using the option which you have to enable yourself, default full scan will scan all files.

 

This is true however I do get slightly more drag from my KAV6 install and have had to turn off HTTP scanning on port 80 in order to get Firefox working quickly and rendering all pages completely. KAV6 seams to work better on some machines than others (clean Windoze installs seam to help a lot).

My experience is that the amount of memory used by both is nothing to be concerned about and the performance hit from both is acceptable with NOD32 winning by creating no noticeable loss in performance. KAV6 has came a long way and although initial scans with KAV6 seam to be slower (haven't timed this) the rescans (when set not to rescan objects that haven't changed) are very fast (even the Startup Objects impact can be fixed in this way).

I'd still say NOD32 slows machines down the least but KAV6 has a greater detection rate (in tests). However in the real world I suspect that being able to detect zero day infections swings things NOD32s way. However it's difficult to say as KAV updates frequently but I suspect strong heuristics are of more use on Day 0 of a mass outbreak as it takes time to make a quality signature.

So what does all this mean? It means things are too close to call, and if KAV didn't clash with my Firefox install I would probably have called for KAV.

Both are great and there is no wrong choice. Just test them first and see what runs well. If like me you have a network of machines at home, it makes sense to have different AVs on different machines to help stop an infection taking out all your machines.

Fairy

 

After some years using KAV 4.5 ,I run KAV 6 for a month and now NOD32
for some days...
NOD is NOT always faster than KAV,only when you scan the whole drive (-s).
When you choose a file/folder to scan it with a right click,KAV 6 is faster...

Http scanners are about the same,don't make delays at surfing.
Updating system very good for the two of them.

NOD finds as trojans some game trainers (Win32/Keylogger.HotKeysHook) - False positive , while KAV no.

I try NOD for the first time , seems nice. but not better than KAV.
I will decide at the end of trial.