switching to NOD32 and why!

wayne_b · Dec 9, 2004

I hope I am not violating any rules? but some things are worth mentioning (IMHO)

Why I switched to NOD32, the deciding factor;

Tm has caused a major issue with all my SFX files created with WinRaR v. 3.41
Tm flagged all my SFX files on all my backup drives and deleted/quarantined them, Tm FP flagged by labling the files as infected with "WORM_MUMU.E" a signature that Tm no longer uses (they claim)

PC-cillin IS 2005
Current Information at time of problem:
Tm PC-cillin Internet Security
xxxx-xxxx-xxxx-xxxx-xxxx
Program Version: 12.0.1244
Engine Version: 7.100.1003
Pattern Version: 2.281.00

Email Sent to TrendMicro;

…Using WinRaR, when selecting a file to archive using WinRaR Archive then selecting "create SFX archive" Format, PC-cillin Internet Security 2005 flags the archive then deletes the SFX Archive. Thus, PC-cillin Internet Security 2005 also deleted all my SFX Archives from my backup drives. In order for me to backup ISO and other files to SFX, I have to disable PC-cillin, this is not acceptable.
Click to expand...

The Emails I received from Tm was of no help (instructing me to reconfigure the included Firewall, though I don't have it installed, something they don't understand)

Dear Valued Client,Hello! My name is xxxxxx and I am glad to be assisting you on this issue.In order to keep our records up to date, it is very important that you reply to this email.For this issue, kindly configure your firewall settings to allow the program to function. You may target it on the exception rule. Kindly refer to instructions below.To address your concerns, you may try using other firewall profiles to see if which one will best suit your connection.1. On the PC-cillin Internet Security main window, click NETWORK SECURTIY > >PERSONAL FIREWALL.2. Select the Enable Personal Firewall check box.3. Choose a profile setting from the current profile box based on your computing environment.4. Click Apply. Restart the machine and see if the chosen profile resolves the issue. If not, then try the other profiles doing the same steps listed above.
Click to expand...

My response to Tm;

...I don't have PC-cillin I.S. 2005 firewall installed! The point is, Tm flagged my SFX files created with WinRaR as having the "WORM_MUMU.E" the flag should not have anything to do with the Firewall. I can assure you, no Viruses/Worm/Trojan existed in my SFX files. I have solved the problem! I removed Tm PC-cillin from ALL my systems and I am in the process of replacing with NOD32.

Thank you

Wayne xxxxxx
Click to expand...

The email I received from WinRaR;

... But TrendMicro PC-cillin has not used the UPX signature, it hasused the whole RAR-SFX signature. This is the first time this happen.Normally only some sfx modules in WinRAR directory are deleted,but in this case it is very heavy mistake!My last information from a customer is, that this signatureis now dropped from TrendMicro PC-cillin.
Best regards,
Klaro at WinRAR-Support
Click to expand...

TM Flag though it states Quarantined, I could not recover all the files, this is just one sample of many, many flags regarding my SFX files;

Trend Micro PC-cillin Internet Security Notification

Real-time Scan
Trend Micro PC-cillin Internet Security has detected a virus, spyware application, or other Internet threat, and performed the action specified.

Infected file: F:\xxxxxxx\xxxxx xxxxxx\xxxxxxx\xxxx.exe
Virus name: WORM_MUMU.E
User name: xxxxx xxxxxxx
Scan action result: Quarantined.

Note: If Search for and clean Trojans is enabled and is executed after scanning, you can click Next to view final scan result information.
Click to expand...

I had to disable Tm and move what was left to another drive not protected by Tm. I have since removed Tm PC-cillin I.S 2005 from ALL my systems and had to restore over 80gig’s of SFX files!

arrowsmithmidwest · Dec 9, 2004

If you installed NOD32, Be sure to exclude your files in case NOD picks them up as False Positive, i have only had about 2 experiences with False Positives before and i repair virus infected computers every day.

wayne_b · Dec 9, 2004

So far I have not experienced any issues with NOD. I shouldn't have to exclude these files This is a shared drive I am currently using for my SFX files and prefer not to exclude anything.

-wayne

Blackspear · Dec 9, 2004

wayne_b said:

I shouldn't have to exclude these files
Click to expand...

Agreed, don't exclude unless there is an issue.

Cheers

ShunterAlhena · Dec 12, 2004

I don't know, but reading such threads about irresponsive support and malfunctioning antiviruses (very believable, given my own experiences) just keep justifying my decision to pay for a software product, NOD32...
I might repeat the same procedure for a firewall as well...

arrowsmithmidwest · Dec 12, 2004

yeah i guess it depends on if they are a shared file such as a word document or in your case a SFX file, but in my cases it has been actualy files that are a part of a program, therefore must have to be excluded.

Log in or Sign up

switching to NOD32 and why!

wayne_b Registered Member

arrowsmithmidwest Registered Member

wayne_b Registered Member

Blackspear Global Moderator

ShunterAlhena Registered Member

arrowsmithmidwest Registered Member

Log in or Sign up

switching to NOD32 and why!

wayne_b Registered Member

arrowsmithmidwest Registered Member

wayne_b Registered Member

Blackspear Global Moderator

ShunterAlhena Registered Member

arrowsmithmidwest Registered Member

Useful Searches