Is AMON running correctly?

Discussion in 'NOD32 version 2 Forum' started by Knot2Brite, Feb 11, 2007.

Thread Status:
Not open for further replies.
  1. Knot2Brite

    Knot2Brite Registered Member

    Joined:
    Feb 9, 2007
    Posts:
    34
    Location:
    Bloomsburg Pennsylvania
    Hello,
    I am running the 30 day trial version and AMON has confused me.

    It checked 1.2 million files in about 24 hours.

    I assume Open, Modify and then Save would be 3 files. But I'm guessing that file operations plus the total files on my HDD don't add up to 1.2 mil.

    What am I missing or does it seem likely I didn't install correctly?

    Thanks,

    N2B
     
  2. ASpace

    ASpace Guest

    Should be OK , no signs of something bad . Restart your computer and make sure you use default settings (e.g. Optimized scan is enabled)
     
  3. Knot2Brite

    Knot2Brite Registered Member

    Joined:
    Feb 9, 2007
    Posts:
    34
    Location:
    Bloomsburg Pennsylvania
    Thank you for the assurance.

    I guess there are system operations that AMON checks and that increases the count.
     
  4. ASpace

    ASpace Guest

    You are welcome ! :thumb:
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Dou you have the "Optimize scanning" option enabled in AMON?
     
  6. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Yeah enable optimize scanning and the number of files should drop dramatically.
    On some occasions when it's enabled, you'll see a significant drop in memory usage too.
     
  7. Alwill

    Alwill Registered Member

    Joined:
    Feb 26, 2004
    Posts:
    76
    Location:
    Sydney, Australia
    Exceedingly strange o_O . Before reading this thread I've never consulted the AMON Status info but after now checking I find the 'Files Scanned' is at zero.

    Yes, the module is enabled and the settings are as per Blackspear's recommendations.

    FWIW the IMON Scan count stands at 7015.

    Now it's my turn to ask what am I missing?.

    EDIT: Have been wondering whether another anti-malware scanner program I have, BOClean, which runs in the background could affect AMON?.
     
    Last edited: Feb 12, 2007
  8. ASpace

    ASpace Guest

    Are you sure? AMON enabled - Files Scanned (as per the attached screenshot).

    Can you
    1. Make sure AMON is enabled and set to disaply screen (not clean automatically)
    2. Open Notepad and copy/paste the following
    Code:
    X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
    3. Save on Desktop as some file (e.g. COM or EXE)

    What happens ?

    Then reinstall NOD32 (you know , uninstall , delete ESET , install again , test with Eicar , check AMON , then BS settings and full scan) :thumb:
     

    Attached Files:

  9. Knot2Brite

    Knot2Brite Registered Member

    Joined:
    Feb 9, 2007
    Posts:
    34
    Location:
    Bloomsburg Pennsylvania
    I'm the guy who started this and I'm back.

    FWIW I emailed customer support just before I posted here and I've yet to hear from them.

    BUT, my AMON count is back to 1.2 mil and I do have Optimize checked. I've a P2P (eMule) running in the background. The virus database has updated about 4 or 5 times so it is to be working.

    AMON, I guess, flashed a warning about a file which I then deleted and from that I conclude the AV protection is working.

    EMON, IMON (love those names) appear to be working as they should. DMON I know is on the spot.

    Still, having AMON reporting it checked 1.2 million files in a little over 24 hours seems strange.

    Does anyone see a risk or is it just what it is? I'm tempted to uninstall/reinstall just in case something is goofy.

    Thanks
     
  10. ASpace

    ASpace Guest

    Knot2Brite, most likely it is working normally . But we don't know what applications you have installed and what applications are running . Although it is something rare , it is possible , will say it again , depends on your applications .
     
  11. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    A p2p file will keep changing, and AMON will continue to scan it many many times as you download it.
    So 1.2mil is probably correct.
     
  12. Alwill

    Alwill Registered Member

    Joined:
    Feb 26, 2004
    Posts:
    76
    Location:
    Sydney, Australia
    Knot2Brite

    Apologies for intruding in your thread.

    HiTech_boy

    Thanks for responding and for the help. Tried the Eicar test code you suggested but AMON did not respond.

    To cut a long story short, did an uninstall/restall and upon restarting, the AMON Scan counter had started. However, after going into Setup and adjusting settings the counter stopped again. Having identified the source of the problem and going back over the settings the specific cause was found to be my having excluded a particular file from scanning.

    After undoing the exclusion, the scan counter commenced again and
    and when I ran the Eicar test again AMON detected the file and banished it to Quarantine.

    Thanks again :thumb:
     
  13. tanstaafl

    tanstaafl Registered Member

    Joined:
    Apr 8, 2005
    Posts:
    207
    So... care to share what 'the particular file' was that you had excluded from scanning that caused this strange behavior??
     
  14. ASpace

    ASpace Guest

    You are welcome :thumb:
     
Thread Status:
Not open for further replies.