[Suggestion] on-demand cloud scanner

Hello,

I'd like to suggest for ESET to provide a portable executable that people could make use of to have a second opinion, but just not an on-line scanner. That is, people instead of having to open a compatible browser, allow active-x, according to requirements, one could just download a small executable that we could use to scan our system while connected to the Internet. This way, whenever we run this tool, it runs regardless of web browser, and doesn't need to download any definitions; the scanning is done in the cloud.

 

ESET Online Scanner can Smart Install onto your hard drive, and run like any other program. It's not cloud though.

 

Let's see if I understand it well. It installs? It also downloads definitions? Not much difference from what I used to use.

It would be much better just to have a portable executable, that people could run on-demand and it would use the cloud to verify, instead of downloading definitions.

 

what is the difference between keeping the database on your computer or in the servers?

 

The difference is that not everyone has super Internet connection. I know a lot people with a 128 kbps connection (it drops to this speed after 2GB traffic), because it's all they can afford, and having to wait minutes to download definitions, and then scan... well... It's one of the reasons why they use cloud services like Prevx. (Obviously, Prevx is not an on-demand scanner; but the simple fact that it provides cloud scanning, makes things a lot faster for them.)

I just believe that there must exist a balance between what some can use and what others cannot; therefore, it would be nice for those who have lousy speeds to have a better alternative to the traditional online scanner, without having to download MBs of definitions.

 

The average DB update is around 40KB, and there are about 3 updates per day. It would take more bandwith to send the files to the cloud .

 

Are we talking about the same? Are you saying that, if right now I open IE and apply for the on-line scanner that it will only download 40KB of definitions?

What if, say, in about 2 weeks from I apply for it again, it will still download 40KB of definitions? Won't the definitions increase from time to time? This means that from time time, if I apply for the first time, on-line scanner will download more definitions to my system, hence more traffic.

It seems, to me, you're talking about the version that gets installed in the system, and not the on-line scanner.

 

Those who update on a regular basis and don't miss any update usually download < 10 kB updates. The last one was exactly 5631 bytes in size So it's very little traffic compared to the cloud that would not give the results that advanced heuristics coupled with generic signatures does. The cloud can supplement AH and signature-based detection techniques but it will only tell if a file is more or less suspicious based on the data gathered from computers reporting to the cloud.

 

Yeah-yea , we've heard that already ... actually - many times . The results from AV-Comparatives's tests prove it very elegantly if you are right or not. Continue to deny it and next year you'll get even "better" results

 

OK.

Could you clarify whether you're talking about the on-line scanner vs cloud scanner? (Which the only difference, that I'm aware of, would be that definitions would be in the cloud.)

And,

In your own words it's about ~10KB or even less. Does this mean that if I apply for the on-line scanner (or web scanner), it will only download 10KB or something like that? If one doesn't miss any updates Why the heck would a user want to update an on-line scanner every day? It's only needed when the users wishes to have a second opinion.

The way you're talking about, wouldn't it make much more sense to download an on-demand scanner, anyway

Could you clarify which scanner you're talking about? Because, I'm starting to think that I'm talking oranges vs peaches here.

My discussion is around on-line scanner/web scanner vs cloud scanner.

 

I scanned a set of 1043 files and found that PrevX dont scan within archives.

What it does is calculate the PX5 of each file (on your computer) and then send them to servers for HASH comparison with the database (this is not a true analysis)

Ha ha ... That is the key of the fast analysis ...... The result: PrevX doesnt detect threats inside archives. Is a security risk

 

I just gave Prevx as an example. I didn't say it would have to work like Prevx, did I?

Maybe you could try to enhance my suggestion, rather than bashing another product.

 

OK.

I think I'm understanding now. The ESET on-line scanner is installed into the system - or, it can be -, and the downloaded definitions stay on the system? They're not deleted. Correct? If so, the following updates will be minor. Also correct?

Just one question: Would it be installed, or is it portable? If only installed, what would you think of a portable version? I think it would install, since J_L mentioned it could be smart installed in the system.


Thanks

 

Indeed, the ESET Online Scanner will be installed on your pc. You can remove it just through Remove programs. If you will regularly use the on-demand scanner you will only have to download the incremental updates. So you only need a really low bandwith.

Ofcourse when you install and run the Online Scanner for the first time you will have to download the whole set of signatures. But the signature set of ESET is really small compared to the competitors. For example the installer of ESET NOD32 is 43MB, which already includes signatures (ofcourse it will miss the most recent, but that is a really tiny download). Compare that to competitors who first want to download the program for 100MB and after the installation another 100MB for the signatures.

 

Thanks for the feedback.

It would be nice to have it as a portable version, though... or also has a portable version, which could be updated now and then with the latest definitions, and the rest would be downloaded at the time a person would use it.

IMO, of course. lol

 

I would settle for Eset being available again in Hitman Pro.

 

Prevx doesn't scan inside archives because there is no danger only if Extracted and Executed and that's when Prevx would jump in! IMO It's like the old saying if it can't execute it can't infect! Who knows what ESET will come up with in the future in V5!

TH

 

@m00nbl00d
You can use the Files in %programfiles%\eset\eset online scanner\*.* and carry on your USB, and then ...

...place in the %programfiles%\eset\eset online scanner folder, but you'll have to register the OCX libraries in every computer that you use.

Of course... would be great if a portable version is released