Shell Power for NOD32 2.0

Discussion in 'NOD32 version 2 Forum' started by Paolo Monti, May 31, 2003.

Thread Status:
Not open for further replies.
  1. tosbsas

    tosbsas Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    789
    Location:
    Lima, Peru
    Anyone here can tell me how to get rid of the "normal" shell extension??

    Ruben
     
  2. Paolo Monti

    Paolo Monti Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    280
    Location:
    Rome, Italy
    Unfortunately, Eset shell extension doesn't supply a DDLUnregisterServer entry, so you cannot use Regsrv32.exe utility.

    You must uninstall NOD32 and then reinstall it. When the installer asks if you want to invoke NOD32 by means of the right mouse click, choose "no".

    ciao,
    Paolo.
     
  3. tosbsas

    tosbsas Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    789
    Location:
    Lima, Peru
    shame on them :)--((

    Ruben

    Will try the configuration editor :)--))

    ruben
     
  4. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,208
    Location:
    Fayetteville, Ga
    I am new to NOD32 and am not as savy as most of the people who are replying to this. I would like to know should I download this and why. I would appreciate any helpful advice. :rolleyes:
     
  5. Paolo Monti

    Paolo Monti Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    280
    Location:
    Rome, Italy
    Hi William,

    The purpose of the software has been explained in my first message about this topic. So... well... I advice you to read it again carefully :) In short: this shell extension is just a shortcut to use a feature supplied by the new NOD32 scanner. If you have any doubt feel free to ask.

    ciao,
    Paolo.
     
  6. indodude

    indodude Registered Member

    Joined:
    Jul 2, 2003
    Posts:
    7
    A question concerning the command line switches:

    the manual (Nod32Man.pdf) lists command line switches and states which switches are activated (or deactivated) by default. The list of switches in the v.2 help file does not make this distinction. Are the default settings still valid?

    indodude
     
  7. Paolo Monti

    Paolo Monti Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    280
    Location:
    Rome, Italy
    You should consider that the new NOD32 scanner is profile driven: everytime that you start it, the scanner reads the options from the default profile.

    ciao,
    Paolo.
     
  8. indodude

    indodude Registered Member

    Joined:
    Jul 2, 2003
    Posts:
    7
    Hi Paolo

    looking at the behavior of different scans I conclude that the default settings are still valid. The question remaining now is how to get the /ah switch into IMON?

    I also conclude that the settings for the context menu scans override the default settings. Right or wrong?

    indodude
     
  9. Paolo Monti

    Paolo Monti Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    280
    Location:
    Rome, Italy
    Hi,

    IMON has the Advanced Heuristic (i.e. the feature enabled in the scanner by the /AH switch) enabled by default. In IMON the AH option is placed inside its own setup (IMON->Setup->Setup->Use extended heuristics)

    The rules are the following:

    1) The switches that you specify on command line have always a higher priority on profiles.
    2) The scanner reads the default options from the default profile. When you use the context menu to run the scanner, the default profile is a dedicated one (i.e. a special profile for the shell extension).

    ciao,
    Paolo.
     
  10. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands

    Getting rid of the following Reg subkeys ought to remove the original context menu entry:

    HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension
    HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension
    HKEY_CLASSES_ROOT\Drives\Shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension
    HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension

    Are there any disadvantages to doing so?
     
  11. Paolo Monti

    Paolo Monti Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    280
    Location:
    Rome, Italy
    I didn't make any test about it, anyway removing those keys only is not sufficient to "clean" completely the Registry.

    ciao,
    Paolo.
     
  12. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    No, I'd have to agree with that.

    If that's what you'd want to do, you'd (at least?) have to get rid of the following as well:

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B089FE88-FB52-11d3-BDF1-0050DA34150D}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{B089FE88-FB52-11d3-BDF1-0050DA34150D}

    However, it certainly ought to get rid of the context menu entries, which was tosbsas original desire

    I have to say I haven't installed the new Shell extension myself as yet, but I will soon, and I'll report back :)


    Cheers,
     
  13. tosbsas

    tosbsas Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    789
    Location:
    Lima, Peru
    waiting anxiously on your findings :)--))

    Ruben
     
  14. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    Sorry for the delay, but I've just done it, and it works fine! :)

    Do the following:

    Copy the bold to Notepad, and save as Remove.reg. Save as "all files".
    Now doubleclick Remove.reg, and answer yes when asked if you want its contents added to the Registry.


    REGEDIT4

    [-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension]

    [-HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension]

    [-HKEY_CLASSES_ROOT\Drives\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension]

    [-HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\NOD32 Context Menu Shell Extension]

    [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B089FE88-FB52-11d3-BDF1-0050DA34150D}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
    "{B089FE88-FB52-11d3-BDF1-0050DA34150D}"=-




    That will remove the registry entries for the original Nod32 shell extension, leaving only the the context menu entry for the "NOD32 Scanner Advanced Heuristic Shell Extension"

    Cheers,
     
  15. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    BTW, here's a screen shot to illustrate it... :D
     

    Attached Files:

  16. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    BTW, ESET people, one very minor thingie: why are both of the above being installed?

    To tell you the truth, I've never seen a HKEY_CLASSES_ROOT\Drives registry entry before.
    Adding that Nod32 subkey to HKEY_CLASSES_ROOT\Drive uniquely ought to do the trick, I should think? o_O
     
  17. tosbsas

    tosbsas Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    789
    Location:
    Lima, Peru
    Hey thanks

    are you sure there is not a "-" missing in the last line??

    Ruben
     
  18. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    If there was a - there, that would wipe out the entire HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved subkey, which is NOT what you want... :eek:

    This way it only deletes the "{B089FE88-FB52-11d3-BDF1-0050DA34150D}" value.

    The regfile is fine! :)
     
  19. tosbsas

    tosbsas Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    789
    Location:
    Lima, Peru
    ok- thanks :)--))

    I do have no problem editing registry, but never wrote a file for that.

    Ruben :D
     
  20. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    Not everyone feels comfortable editing the Registry, so I sometimes do write a regfile.
    Also, importing such a regfile sure is a lot faster than manually editing 6 individual Registry keys/values .

    Cheers,
     
  21. tosbsas

    tosbsas Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    789
    Location:
    Lima, Peru
  22. Bouton

    Bouton Guest

    My sincere compliments Signore. You have added a valuable additional feature to this great program. Advanced heuristic scanning of individual files is a feature that Eset should incorporate IMHO.
     
  23. yvonne

    yvonne Registered Member

    Joined:
    Apr 6, 2003
    Posts:
    11
    Wow!!! Is this the same program I won in the 5,000th member drawingo_O If so, I am a novice and all I have been reading in this thread is like greek to me o_O :eek: :rolleyes: :oops: HELP!!!
     
  24. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands


    Indeed it is ;)

    Don't worry - you don't need this in order to run NOD32 (provided it's configured properly). Make sure you'll get the grasp from the version 2. you have first and foremost, read the FAQ etc.

    regards.

    paul
     
  25. yvonne

    yvonne Registered Member

    Joined:
    Apr 6, 2003
    Posts:
    11
    [move]HELP[/move]

    I am trying to download this program and it won't accept the password I was given.Could the password be wrong or am I supposed to make my own password? Do I need to download the commercial program as opposed to the administrative program? Sorry to be such a pest and thanks so much for Nod32 program!!!
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.