Nero 9.4.13.2b and NOD32 4.0.437

Discussion in 'ESET NOD32 Antivirus' started by Zyrtec, Jul 2, 2009.

Thread Status:
Not open for further replies.
  1. Zyrtec

    Zyrtec Registered Member

    Joined:
    Mar 4, 2008
    Posts:
    534
    Location:
    USA
    Hi all,

    I was downloading the latest release of Nero Burning Rom (a 382MB installer) from Filehippo using IE8 on Windows Vista Business SP-2. I'm running the latest version of NOD32 (4.0.437 with latest definitions) with DEFAULT settings.

    When my download was about 99% my whole system froze and I couldn't do anything else. I just waited, waited and waited while the PC fan was blowing at its maximum speed. After about 10 minutes I gave up and pressed my PC power button effectively shutting it down.

    The CPU was completely maxed out during this process and ekern.exe was using around 90-95% of its cycles. (It's a P4 3.20GHz and 2GB RAM)

    Is there a way to prevent this from happening? 1-2 minutes of NOD32 scanning this file would be OK...but, 10+ minutes is TOO MUCH.

    Kind regards,

    Carlos
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Try setting a size limit for sfx archives in the web access and real time protection setup to, let's say, 5-10 MB.
     
  3. UFnShure

    UFnShure Registered Member

    Joined:
    Jun 12, 2009
    Posts:
    6
    Does this mean we're to assume anything larger is safe or is it a program limitation? Why was the default setting not 5-10 MB?
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    There is no limitation by default because it's safest. However, if one minds delays when unpacking and scanning large archives the only thing they can do is set size limitation for archives and rely on on-access scanner that it will catch and block potential malware (most likely just adware in the case of such large archives) when running the sfx archive (installer).
     
  5. UFnShure

    UFnShure Registered Member

    Joined:
    Jun 12, 2009
    Posts:
    6
    Well said and point taken.

    Thank you
     
  6. wbrad

    wbrad Registered Member

    Joined:
    Dec 23, 2007
    Posts:
    2
    At 99%, NOD32 will detect the Ask Toolbar in the Nero archive and terminate the download. This is probably when your PC froze or at least appeared to freeze. I usually disable NOD32 when I update Nero, but I always download directly from Nero's site.
     
  7. JohnG

    JohnG Registered Member

    Joined:
    Mar 27, 2006
    Posts:
    3
    I just ran into the exact same problem. Downloaded from the Nero site for over an hour the paid-for 535MB Nero 9.4.13.2 full install. Then at 99% everything stopped with the CPU at max. After 8 minutes of this, NOD32 reported the "Win32/Toolbar.AskSBar potentially unwanted application".

    I then disabled NOD32 and downloaded it again for another hour. Unbelievably, NOD32 then did the same thing!

    I now discovered that I only disabled the Real-time protection, even though doing so shows "Enable" on the right-click menu, indicating that everything is disabled.

    So just one question: Is this toolbar really a danger in Nero, or is it a false positive?

    - JohnG
     
    Last edited: Jul 19, 2009
  8. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    The toolbar considered to be adware/spyware by a lot of people.
     
  9. JohnG

    JohnG Registered Member

    Joined:
    Mar 27, 2006
    Posts:
    3
    Thanks for the reply. I learned a lot as a result.

    Apparently many reputable vendors, including security-related vendors such as Comodo, ZoneLabs and Symantec, have bundled this in some of their products.

    IAC claims it has mended its ways, and the toolbar no longer exhibits malware characteristics.

    Difficult to know where the truth lies. :p

    - John
     
Thread Status:
Not open for further replies.