Does NOD32 Scan the Registry?

Discussion in 'NOD32 version 2 Forum' started by balbane, Nov 16, 2003.

Thread Status:
Not open for further replies.
  1. balbane

    balbane Guest

    Well, another spyware program found traces of the optix trojan in my registries. I was surprised NOD32 didn't. I was infected with Optix Pro a long time ago. I did it to myself, so I know. Anyway, does NOD32 scan the registries?
     
  2. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Don't know if NOD is one of them, but many AV do NOT do a good job with Trojans, even the AVs that are excellent with viruses. Yes, most spyware detectors will detect many things that AV do not.

    Acadia
     
  3. balbanebeoulve

    balbanebeoulve Registered Member

    Joined:
    May 27, 2003
    Posts:
    23
    I know, I know, the old trojan thing. But NOD32 has anyway been able to locate Optix, but the registry entry was not located. That's sort of odd. When you find a virus, you expect all traces of it to be exterminated...=/

    I don't know, but maybe I can get a copy of some of the registry entries to send to ESET...
     
  4. From my experience, KAV seems to be the best in terms of finding registry entries. I still think a dedicated AT like TrojanHunter is a better, safer bet... :cool:
     
  5. sig

    sig Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    716
    My understanding is that while various AV's detect various trojans, for some trojans not all AV's are effective at removing all traces. KAV may be better at this than others as SS noted but as he also mentioned typically AT's are often recommended as doing a better job overall at trojan removal (in addition to detection) than AV's in these instances.
     
  6. anders

    anders Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    410
    NOD32 doesn't scan the registry for "left-overs", but, as far as I know (and have tested), NOD32 is doing a good job of removing the registry-autostart-values (etc) when it is removing the actual infected file. Then again, the best thing is to never get infected, by using up-to-date protection and OS updates, and being careful. :)

    Best regards,
    Anders
     
  7. balbanebeoulve

    balbanebeoulve Registered Member

    Joined:
    May 27, 2003
    Posts:
    23
    Well, I think it would be great if NOD32 could start scanning the registry. And we wouldn't need virus scanners if we were all up-to-date and protected completely. But that would put eset and many companies out of business, wouldn't it? Anyway, do you think NOD32 will implement registry scanning?
     
  8. anders

    anders Eset Staff Account

    Joined:
    Oct 25, 2002
    Posts:
    410
    I don't think scanning for "registry leftovers" will be added in a foreseeable future, and I personally think it's very low priority.

    Best regards,
    Anders
     
  9. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,201
    Location:
    Fayetteville, Ga
    What is high priority with NOD. Now don't get me wrong at the present time I wouldn't trade NOD for anything else. But I haven't seen anything fixed since June when Ver.2 came out.
     
  10. balbane

    balbane Guest

    Well, I don't know, but...who would really want tons of registry entries of viruses that once crawled your system? And could it be suggested to the developers? I mean, I'm sure users would start exporting virus entries in their registry to help Eset if they knew it would be used...

    MmM, It's just that I really want my system to be 100% clean and safe. I know registry entries alone can't do much, yet I still feel uncomfortable if they aren't being scanned...
     
  11. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Thank you, thank you, thank you.

    Acadia
     
  12. mrtwolman

    mrtwolman Eset Staff Account

    Joined:
    Dec 5, 2002
    Posts:
    613
    IMHO, unpacking engine has been improved, avd. heuristic has been improved ....
    Soon IMON will get packed worm scanning ability ....
     
  13. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    I believe if an AV System going to deal with Trojans/worms they should go all-the-way to undo registry damages caused by the Trojans/worms Infections. This is actually one of the big problems with infected machines using AV System to remove their Trojans/worms infections, in most cases renders their systems quite useless such as executing executables for instance and making successful connection to their ISP. Another thing is you don’t want to keep the Systems Registry cluttered up otherwise you may experience system delays/freezes/errors/crashes… ;)
     
  14. iNsuRRecTioN

    iNsuRRecTioN Registered Member

    Joined:
    Sep 5, 2003
    Posts:
    303
    Location:
    Germany
    There are updates and improvements, of course.

    I think, that someone mean, that nothing really updatet is an misstake bye eset.

    They should release an update history or so on their website!

    bye

    iNsuRRecTioN
     
Thread Status:
Not open for further replies.