Problems of application protected by ASProtect SKE

Discussion in 'ESET NOD32 Antivirus' started by fuwafung, Oct 16, 2008.

Thread Status:
Not open for further replies.
  1. fuwafung

    fuwafung Registered Member

    Joined:
    Oct 16, 2008
    Posts:
    5
    Hello,

    The protected application will leave this message, "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." after running that application and Nod32 makes CPU usage in 100% for at least 30 seconds. This is a serious problem because many application are protected by ASProtect SKE.

    But there is no problem if the computer system uses Nod32 v2.7 . And I use ASProtect SKE v2.2 . Can someone in Eset correct or fix this problem cause I am a software developer and uses ASProtect SKE to protect my application. And I think that this may cause trouble to my customer if he/she uses Nod32 v3.0 too.

    Thanks in advance,
    Fuwa Fung.
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    Please make sure that runtime packers and advanced heuristics are disabled on access (disabled by default).
     
  3. fuwafung

    fuwafung Registered Member

    Joined:
    Oct 16, 2008
    Posts:
    5
    Thanks for your reply. Just disable "advanced heuristics" of Nod32 v3.x will let the problem go away(no need to disable runtime packers).

    But is there another way for the users those who had enabled the "advanced heuristics" option? Because there are many applications and programs protected by ASProtect SKE and the Nod32 v3.x users may get this problem too when using these applications. This should be some kind of "false positive" alerts to those users but the applications contains none of malicious code that just used ASProtect SKE.

    I think that ASProtect SKE users will appreciate if this "false positive" also "disappear" for Nod32 v3.x users with "advanced heuristics" options enabled.:)

    Thanks in advance,
    Fuwa Fung.
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    It simply takes time to emulate such files which is probably causing a sort of timeout. Next version will warn the user when enabling this option. Emulation by advanced heuristics is a time consuming operation which may take up to several seconds, we do not recommend enabling it at all unless you don't mind long delays when accessing / running certain runtime packed files.
     
Thread Status:
Not open for further replies.