AshenSugar: This one's for you (told you I would get around to it, sorry for delay!)

[Alec§taar]

Starting to do an analysis of Norton AntiVirus Corporate Edition 10.2, vs. NOD32 version 2085, in terms of memory usage for ALL of their parts (both GUI interfaces for resident scanning, & also their component services).

I am using the most current model of Microsoft Process Explorer to do so.

(At this point, we know from other threads, that NAV is better detecting MACRO virus, while NOD32 is better @ all other types, in a nutshell... per tests we've seen here & posted about in other threads - if you can show contrary data to that, fine, but it's what I saw & so did you where we discussed this before).

This is about how much each one EATS in terms of memory, so I'll be back w/ screenshots of each process & do the math for them as well, so we FINALLY can 'get to the bottom of this' lol, per my promise to do so!



* Ought to be interesting!

APK

P.S.=> A cool thing resulted from this by the way: These 2 products for AntiVirus protection DO NOT "FIGHT IN RAM", which is excellent!

Well, thusfar @ least (well, probably not until I go to try to click on an executable in Explorer.exe & start it up etc. because that's when resident antivirus programs go to work, but so far, I have done more than a few of those, & all is well)...

Anyhow/anyways, to that I say: "BONUS!"

So, that all said & aside? brb w/ the screenshots!

(Next, I am going to write BELARC today about their security analysis tool, & find out why it is taking shots @ my score of 5.00/10 possible after THIS is done!)... apk

 

[Alec§taar]

NOD32 single resident service & trayicon control center GUI interface:

NOD32 memory-resident service memory resource consumption

NOD32 trayicon-resident GUI control center resource consumption

* DONE!

APK

P.S.=> Total of ALL 2 of its parts in services & trayicon GUI control center, for memory usage:

VIRTUAL MEMORY USAGE:

• Private Bytes = 24,768

• Peak Private Bytes = 69,568

• Virtual Size = 127,228

&

PHYSICAL MEMORY USAGE:

• Working Set = 4,992

• PEAK Working Set = 44,024

apk

 

[Alec§taar]

NAV Corp 10.2 2 resident services & trayicon control center GUI interface:

NAV Corporate Edition 10.2 Resident Service 1 of 2 (ccSvcHst)

NAV Corporate Edition 10.2 Resident Service 2 of 2 (RtVscan.exe)

NAV Corporate Edition 10.2 TrayIcon Resident GUI control center (VPTray.exe)

* DONE!

P.S.=> Total of ALL 3 of its parts in 2 services & 1 trayicon GUI control center, for memory usage:

VIRTUAL MEMORY USAGE:

• Private Bytes = 43,912

• Peak Private Bytes = 53,556

• Virtual Size = 264,976

&

PHYSICAL MEMORY USAGE:

• Working Set = 9,196

• PEAK Working Set = 61,980

apk

 

[Alec§taar]

Read 'em & Weep!

Well, read 'em & weep: LOL, & I am on "the one weeping"!

That's because as light as NAV Corporate Edition is imo, by way of comparison to std. editions most folks use?

It's almost 2x as heavy in RAM as NOD32 is!

==================================================
NAV CORPORATE 10.2 vs. NOD32 - COMPARISON TABLE:
==================================================

NAV VIRTUAL MEMORY USAGE:

• Private Bytes = 43,912

• Peak Private Bytes = 53,556

• Virtual Size = 264,976

&

NAV PHYSICAL MEMORY USAGE:

• Working Set = 9,196

• PEAK Working Set = 61,980

TOTAL SUM VIRTUAL + PHYSICAL = 326,956
-----------------------------------------------------------------
vs.
-----------------------------------------------------------------

NOD32 VIRTUAL MEMORY USAGE:

• Private Bytes = 24,768

• Peak Private Bytes = 69,568

• Virtual Size = 127,228

&

NOD32 PHYSICAL MEMORY USAGE:

• Working Set = 4,992

• PEAK Working Set = 44,024

TOTAL SUM VIRTUAL + PHYSICAL = 171,252
==================================================



(... on ALL fronts no less, in terms of memory usage!)

* There you go AshenSugar - you were right on this account, that NOD32 is lighter in RAM usage than Norton & even Norton Corporate 10.2 (which imo, will be lighter than std. NAV most folks use @ home):

BY NEARLY 1/2, no less!

APK

P.S.=> All in all, the BEST part of this test for me, so far? Is I found out that YES - I can run them both resident, @ the SAME TIME, & no memory conflicts + disk access seems to be largely unaffected on program loads & looking @ stuff like .zip/.rar files on scan too!

So, why's this "GOOD" imo? Well, since NAV tends to be able to find MORE Macro Virus than NOD32 can, & NOD32 finds more binary infectors than NAV can? I get the BEST OF BOTH WORLDS, and 2 doctor's opinions @ the same time!

BONUS!!! apk

 

[AshenSugar]

how about cpu use:
when accessing files
when moving files
when extracting files

how about speed of disk scans?

just some more things to test

and "told ya so" as to macro's, well i havent seen any in years, last one was at a school and it was a teacher who spred it because the smuch downloaded a document that had the macro built in.


also i would like to see a test of nod32 vs nav corp where false positives where addressed.

nod32 is now up to 2.7 if you need the latest version you can get it from their site or hit me up and i can send you a download for it

in my exp nod32 has the least false positives of any av on the market period, this dosnt mean its not powerfull , it just means that you dont have nod32 deleting good files like the patch for gothic3 or the no cd exe for gothic3 or the orignal gothic3 exe(latest patch) because the av thinks its infected.

also apk i would like to see your annalisis of f-prot 6 another great little scanner(6 just came out of beta u can get a free trial from www.f-prot.com ) as its VERY VERY light on resorces and will run on any version of windows.
also when you buy it for "home use" its 30bucks for 5 computers(home covers small buisness's like my mothers chiropractic office as well, i asked)

i have had good luck with both and i keep f-prot as a "just in case" scaner for those situations when you want a 2nd oppenion.(for a 3rd i use trend@home/trend housecall)

 

[Alec§taar]

how about cpu use:
when accessing files
when moving files
when extracting files

how about speed of disk scans?

just some more things to test

Sure, I can see that... but, how to TEST that?

I knew the tools I had to use to separate out svchost'd services for memory analysis, but I am NOT sure on Process Explorer's abilities on those things.

ALSO, mind you: I can lessen NAV down from that, IF you pull the CCsvcHst.exe one's numbers in RAM it uses...

I THINK it's the "antitamper" guard iirc, & NAV can run w/out that... I just use it, because it stops virus/malware from turning OFF Nav.

Still, it would NOT be enough - NOD32 would beat it anyhow in terms of memory used.

and "told ya so"

Yes, you did... you weren't kidding.

LOL, but, imo? You already HAD looked @ this kind of thing, whereas I had not. Admit it... lol!

as to macro's, well i havent seen any in years, last one was at a school and it was a teacher who spred it because the smuch downloaded a document that had the macro built in.

That's BECAUSE you protect yourself via tools like these, & doubtless good security practices (like NOT opening docs/xls's from just anyone in email for instance).

Trust me on 1 account, if you don't know this already - Macro virus code? EASY TO GET TO, ALTER, & make a new one out of them (just takes a little VBA know-how is all) vs, writing out a super-tiny, super-efficient one in Assembly language. This means you will, odds are, see MORE macro/script virus, than bootsector or binary infector types today

also i would like to see a test of nod32 vs nav corp where false positives where addressed.

I would too, got one?

nod32 is now up to 2.7 if you need the latest version you can get it from their site or hit me up and i can send you a download for it

Talk to me in "PM"... thanks!

in my exp nod32 has the least false positives of any av on the market period, this dosnt mean its not powerfull , it just means that you dont have nod32 deleting good files like the patch for gothic3 or the no cd exe for gothic3 or the orignal gothic3 exe(latest patch) because the av thinks its infected.

Well, NAV doesn't delete them UNLESS you tell it to... its default is ask & quarantine, iirc.

also apk i would like to see your annalisis of f-prot 6 another great little scanner(6 just came out of beta u can get a free trial from www.f-prot.com ) as its VERY VERY light on resorces and will run on any version of windows.
also when you buy it for "home use" its 30bucks for 5 computers(home covers small buisness's like my mothers chiropractic office as well, i asked)

That's CHEAP & it does sound good... but, I think you have studied this more than I. I just went w/ what I had, & only after years of seeing good reviews on its detections rates is all.



* I am one of those folks that, once I find a GOOD thing? I stick by it... trouble is, in this field? Things change, FAST, & products from competitors improve, or newer/better ones appear!

APK

P.S.=> Anyhow, there you go... as promised... PM me! apk

 

[AshenSugar]

ok i will pm you soon, and check vb100% see if they have a list of false positives and such on their lists, i know thats one thing you gotta pass to get a vb100% award and nod32 has the most awards ever

 

[Alec§taar]

ok i will pm you soon, and check vb100% see if they have a list of false positives and such on their lists, i know thats one thing you gotta pass to get a vb100% award and nod32 has the most awards ever

At this point, you're making & have MADE before this, a believer out of me on this account!



* By ALL means... well, most!

("Seeing is believing" person in me here! So, had to see it/test it for myself!)

APK

P.S.=> I think word of this got around, & back to Symantec... because one of the CHIEF things they are working on or have done already for their 2007 release, is to lessen memory consumption of the constituent parts of NAV!!! apk

 

[AshenSugar]

norton needs to rebuild their app from the ground up, minding system perf impact and resorce use, thats cpu and ram use not just one or the other, if they get that down then nav may become what it was back in the day, one of the top av apps ever made.

nod32,f-prot,f-secure and a few others took their crown away years ago, and havent fumbled it yet.

mcafee in my exp never was a good choice really, it alwase had poor removal abilities, tho if it saw a virus it normaly could stop it from latching in/taking root, but if it didnt see it....well time to get out an f-prot or ibmav emergncy floppy/boot disk and clean up the mess....

 

[Alec§taar]

norton needs to rebuild their app from the ground up, minding system perf impact and resorce use, thats cpu and ram use not just one or the other, if they get that down then nav may become what it was back in the day, one of the top av apps ever made.

Now, you're making a point that I have always gotten into arguments w/ fellow coders who did NOTHING but use OBJECTS & CLASSES!

Yes, OBJECTS & CLASSES have benefits... but also downsides too, in code bloat!

(Objects HAVE memory shielding of internal datastructures, & variables (this is good about them) & easier reuseabilty, but units with functions can do the same on reuse of code)

I.E.-> Objects are over touted sometimes: I have found that MOST times, making a class for a program tends to "weld" that class TO that program (because truly 'generic' design is tough)

Objects... imo, you don't NEED them for "Hello World" (i.e.-> Simpler, smaller programs, & yes, functions/procedures/subroutines, always).

I used to get 'ribbed on' for using GOTO (had to in VB6 & below for errtrapping) but in other languages like C/C++ & Delphi too... & know what? I used to tell my ribbers that it is FASTER than doing other forms of branch or exit routines... & I WAS RIGHT ALL THOSE YEARS & TIMES... see here:

SLASHDOT - GOTO leads to faster code

http://developers.slashdot.org/article.pl?sid=05/11/28/1257216

Virtual Machine Opcode Resolution, Performance Tests

http://www.codeproject.com/cpp/TimingVM.asp?df=100&forumid=121677&exp=0&select=964057

AND, e.g.-> Every instance of an object you kick up? 172 bytes additional, iirc... do that a few million times & programs sometimes loop like heck doing so, or, have many 100's of users hitting them, instancing/reinstancing objects?? You get my point.

CODE BLOAT CAN RESULT... & I think this may be part of Symantec's problem, & right here on THIS type of test (memory residency size)... object oriented programming OVERUSE!

I am more a fan of procedural programming (though I began in the drop-down inline way in the 1980s), vs. object oriented, but each has its place & benefits... key thing is, identifying when/where each has merit over the other.

nod32,f-prot,f-secure and a few others took their crown away years ago, and havent fumbled it yet.

"T'would appear so" per this analysis so far @ least... I can't & won't argue w/ concrete data, especially that which I generated myself (per the above).

mcafee in my exp never was a good choice really, it alwase had poor removal abilities, tho if it saw a virus it normaly could stop it from latching in/taking root, but if it didnt see it....

Yea, but it was truly "KING" imo @ least, in the DOS days...

well time to get out an f-prot or ibmav emergncy floppy/boot disk and clean up the mess....

Whatever works, right? The right tool for the job & all that...

APK

 

[AshenSugar]

mcafee was a "king" simply because it was well known, alot of people outside the us where using f-prot in those days because it was 100% free( and still is for dos) and had a better engine that was capable of removing damn neer anything it ran across, the first shop i worked for was run by a couple germans, the tech was the one who had orignaly had me get f-prot because it was supperior to nav,mcafee and the other well known names, he was correct, it did kick their arses, insainly so, you could make a bootdisk (format/s type) and stick f-prot and latest updates on it, and bam you had a way to dissinfect any system that you found with viri on it, when i was in highchool they got hit by the monky virus(stupid self replacating virus that didnt to much but take up some base ram and copy itself to boot sectors) and then got hit by a few macros, the school "tech" was going to reformat the liberys comps because they all had it and nav couldnt remove it even with the latest emergncy disk, i booted from a winnt4 disk, got to consol mode and use my f-prot floppy and was able to clean off every system, this after norton told him on the phone he would have to reformat to get rid of it....ROFL

its not alwase about whats best known, its what about what works best in a given situation.

years back i could program in basic(lost the skill :/) and it was funny how upset some people would get when i would redo what they had made because the way they did stuff was STUPID and waisted alot of time/resorces, one guy made a basic app that was ment to do some basic system matnance functions using built in dos tools and commands(kind of like how you can now secdule tasks in windows) well his app used up 1.2mb ram(back when 4mb was alot) when it was left running, after redoing what he had done i got it down to around 470k max ram used, also made it run smoother, it just did things like disk checks and cleanups and defrags, optimizing memory managment that kind of stuff, alot of what he had done was just a diffrent way of doing things, more "it works so its fine" then "it works and is efficent"
i was by no means a great programer, hell i cant even remmber how to basick "hellow world" anymore
but i did know that its better to write good efficent code without alot of excess bullshit then to make something that "worked" but that wasnt efficent at all.

my brain dosnt like programing, but whats weird is some things just come easy, i have debuged games via the config files and script files/settings fixing things that took the game maker MONTHS to patch out, infact one of the early nwn1 patches included a few changes i made to fix a flaw in some of the settings that made the game run wonky, also fixed 2 small quest trigger bugs, bioware gave me a free 2nd key for NWN for the imput and usefull help (didnt expect it, but wasnt gonna say no )

i have inefficent design and apps that are rushed out, this is why i have such hate for the french/french companys who put out games, VUG and Atari/infogramers rush stuff out, then if your lucky patch it so it sorta works correctly, then dump it, leaving people like us to figuar out how to fix buggs, nwn2 is a great example,they rushed it out, they put securerom on it(causing a 2-20fps perf hit as well as patching problems) a huge number of users cant even patchthe game because the files dont match what the updater expects to see, thanks enlarge to the protection they put on the game.
bioware patched out the cd protection in nwn1, but atari wont let obsidion patch it out, and they arent really intrested in fixing the game(or letting obsidion fix it) because they already are past the point where the bulk of sales are made off the game.

sorry i went way OT but the point is i hate poor design/coding and ineffincys, they ERK THE HELL OUT OF ME, i want programs/games that JUST WORK, and WORK WELL, thats why im such a proponant of 2003 over xp, ms acctualy took the time to propery code it and make it run as it was ment to, fixing all the buggs/flaws xp has, also they removed/dissabled the newbert crap that really isnt needed if you are even moderitly skilled (system restore sucks, as does windows theming support.....)

blah im ranting again.......but im sure you know what i mean and how i feel apk

same reasion i got problems with vista tho really, rushed out, maby server 2008 will be a solid product like vista should have been when it first hit.

 

[Alec§taar]

its not alwase about whats best known, its what about what works best in a given situation

As am I, but I tend to get "stuck in ruts" going w/ what I know... per reviews & some hands on usage... but, like this thread? I have to be SHOWN (as you were, regarding F-Prot) what is possibly better!

Plus, NAV does a better job @ finding Macro virus/script virus... better than NOD32, but if you can show me a test that shows it inferior in THAT regard? I'll stop using NAV in the background here WITH nod32...

Which is good, because for 5++ hours now? NO FIGHTS IN RAM between them!

(NOD32 does do a better job on binary infector detections though... thing is, per what I noted above? You'll be MORE APT to find macro infectors nowadays, vs. binary types... because Macro ones are FAR easier to make!)

mcafee was a "king" simply because it was well known

Heck - back in the DOS days? I didn't even KNOW about F-Prot!

it was funny how upset some people would get when i would redo what they had made because the way they did stuff was STUPID and waisted alot of time/resorces

I never get upset @ that & had guys show me proven, faster ways of doing things... not just me showing them...

1 guy, named Scott back in 1999, showed me tricks in doing SQL towards SQLServer & Oracle that BLEW AWAY the methods I used (using . instead of ! on member of return recordset datastructure/class variables iirc & SQL queries)

I thanked him LARGE for it in fact. I got stronger is why...

one guy made a basic app that was ment to do some basic system matnance functions using built in dos tools and commands(kind of like how you can now secdule tasks in windows)

Timers & shell commands, just on a guess? THAT or somehow doing a TSR in DOS via BASIC maybe?? No biggie if you don't recall... I am just being nerdy. Every program I look @, I take guesses on HOW they are doing things... comes w/ the job & territory coding I think.

alot of what he had done was just a diffrent way of doing things, more "it works so its fine" then "it works and is efficent"

To quote the great John Forbes Nash:

"As you will find in multivariable calculus, there often a number of solutions for any given problem!" - John Forbes Nash

but i did know that its better to write good efficent code without alot of excess bullshit then to make something that "worked" but that wasnt efficent at all.

Well, you've got to have the experience, first... & know-how in the language AND YES, the compiler capabilities too (some ARE better @ certain things, like Delphi is over C/C++: It kicks butt on MSVC in math & strings, & EVERY PROGRAM DOES THAT!), PLUS I have found that KNOWING YOUR OS & NETWORKING IS ALSO IMMENSELY USEFUL in coding!

Then, you learn how to 'optimize' in other ways (e.g.-> inline asm is great for speed, not every compiler can leverage it though, Delphi & C/C++ do, VB does not, for example) or, doing shr2 for division is faster than using DIV in some cases. There's more, no need to go into it here.

my brain dosnt like programing

LOL, think MINE does? Some folks are naturals @ it... to me? It's work... especially IF I don't really "get into" what the program is for or about, but instead just treat it like work.

BUT, when I like what I'm up to? You get this:

http://www.techpowerup.com/downloads/389/foowhatevermakesgooglehappy.html

but whats weird is some things just come easy, i have debuged games via the config files and script files/settings fixing things that took the game maker MONTHS to patch out, infact one of the early nwn1 patches included a few changes i made to fix a flaw in some of the settings that made the game run wonky, also fixed 2 small quest trigger bugs, bioware gave me a free 2nd key for NWN for the imput and usefull help (didnt expect it, but wasnt gonna say no )

That goes w/ the territory of what I stated above... you were "INTO IT", & this makes a difference in anything imo, hugely... pure interest.

i have inefficent design and apps that are rushed out

I've talked about this before here, & you MAY have missed it: I have been told (ordered) to let code go out the door... even IF Q/A found bugs, usually intermittent ones (hardest to stop imo), but only because of this line of reasoning (they actually explained it to me @ NCR):

"We have venture capitalists behind this, who took out loans to invest in this: We signed an agreement to have this done, by date XX/XX/XXXX, & if we fail to do so? We are penalized... issue it, & patch later!"

& it would have taken, imo & my colleagues as well, another week tops to fix it 100%... this is life, this is business.

sorry i went way OT but the point is i hate poor design/coding and ineffincys, they ERK THE HELL OUT OF ME, i want programs/games that JUST WORK, and WORK WELL, thats why im such a proponant of 2003 over xp

As am I on 2003 server, vs. XP even... & on efficiency? So do I, trust me, & like I said above, per what's in that URL? It IS done that way... but, I had FULL CONTROL of it, but in my other later example above?? It's NOT that way in programming for business & profit concerns... money, it talks!

blah im ranting again.......but im sure you know what i mean and how i feel apk

I do... I hope you read this in detail... because it may explain a great deal to you, as it was explained to me & I understood, fully.

same reasion i got problems with vista tho really, rushed out, maby server 2008 will be a solid product like vista should have been when it first hit.

I don't like seeing GREAT things get 'crippled', & OpenGL mess in VISTA was the only part that bugged me some, but the methods MS is using in ICD's is NOT all that bad & secondly?

Their native OpenGL.DLL lib? ALWAYS HAD DEPENDENCIES CALLS TO DirectX, via DDRAW.DLL! I knew that about 3dFx's glide, because I checked it one day, but never did check MS' opengl lib... explains WHY oem's of vidcards pack in their OWN ICD's for OpenGL & always have in their drivers:

FASTER PERFORMANCE, by far... because they are NOT 'software emulated', but talk DIRECT to the hardware (sure, that is what directX is for, but, you still saw slower performance out of Ms' native OpenGL.DLL in games, vs. vendor models - I am guessing less 'API translation' to DirectX than MS' has in theirs possibly).

APK

P.S.=> NO mail yet...

apk

 

[Deleted member 24505]

hello guys,just to let you know from ashens advice,i bought nod32,which i am now using on vista 32bit with no problem.

 

[Alec§taar]

hello guys,just to let you know from ashens advice,i bought nod32,which i am now using on vista 32bit with no problem.

Do keep in mind, 1 thing: NAV has been shown to catch MORE Macro/Script type virus than NOD32... but, NOD32 finds more binary infectors...

(AshenSugar's seen the same review I have on this note, & won't deny it either, & the image of the chart is here below (very current as of the date of this post)):

Plus, Macro/Script virus code are FAR easier to get to in AutoExec macros for instance, & then taking said code, & altering it to fool detectors that use signatures (mugshots, lol, & this is 'plastic surgery' on them basically)... far simpler to create than binary ones written in Assembler.

I guess what I am trying to say is - you're more apt to see Macro & scripted type attacks, than oldschool binary infectors, by far, nowadays, just based on THAT logic.

Just had to point that out.

Now, if anybody can show myself or AshenSugar, data contrary to the review he & I saw for Antivirus effectiveness on binary virus vs. macro/script virus (where NAV is superior)? I will take this back... it is, after all, based on reviews he & I saw online, pretty current too!

APK

P.S.=> NOD32's good stuff though... no doubt about it! 1/2 the memory resident size, per my analysis above... & I LIKE THAT I CAN RUN THEM BOTH @ ONCE, & NOT A SINGLE HASSLE/FIGHT BETWEEN THEM SO FAR (contrary to popular belief & I have seen it before too, about running 2 antivirus @ THE SAME TIME!)... apk

 

[ktr]

btw...what's the latest version of NOD32?

 

[Alec§taar]

btw...what's the latest version of NOD32?

2.70 per AshenSugar's telling me so... & it's what I want as well!



* Nice to hear it works on VISTA, but guys... do keep in mind what I wrote in my last post especially about Macro/Script virus' vs. Binary infector types (or bootsector ones etc.) & both antivirus products have their strengths/weaknesses in that area!

DO read ALL OF IT, even my P.S. part!

(The P.S., specifically, because it's 'breaking the mind forg'd manacles' per William Blake, & defying tradition here...)

I.E./E.G.-> That I am running NOD32 side-by-side w/ NAV, both service & trayicon resident, mainly because one is better than the other (macro/script virii (nav better here), vs. binary virii (nod32 better here)) & they are NOT fighting one another, NOR lagging my disks which IS incredible!

APK

P.S.=> So far I like NOD32 very much, after a good while testing it & MAINLY because it's SO "light"...

HOWEVER, for reasons noted above? I keep NAV resident as well, believe-it-or-not (try it yourselves, it seems to work FINE, despite traditional beliefs about running 2 antivirs in memory/side-by-side/concurrently)...

10 hrs. now running them together & @ times, REALLY pushing my machine around too... no problems @ all running them side-by-side in memory @ all! Wild... imo, because I am getting 'the best of both worlds' (great macro virus protection AND binary infector/bootsector type protection too, from two of the best out there in this area, & that they show strengths in over each other too)... apk

 

[AshenSugar]

you are paranoied lol, guess you must download alot from places you shouldnt

 

[BXtreme]

the latest nod32 is 2.70.32 .

 

[Alec§taar]

you are paranoied lol, guess you must download alot from places you shouldnt

Heck, not really... not paranoid enough, imo, not nowadays!



From the film "StRaNgE DaYs":

"It's not how paranoid you are, but if you're paranoid enough!"

I guess what I am trying to say is:

Again, per a review you have seen, & myself as well (others here as well if they were in the discussion you & I saw that in) is that NAV is stronger finding Macro/Script virus', where NOD32 is stronger finding bootsector/binary infector type virus'...

(& hey - IF I can run them side-by-side in memory (as I have been for nearly 16 straight hours now, w/ out them conflicting w/ one another, or tying my system up), well, I will continue to do so, until it proves otherwise).

APK

P.S.=> IMO, it can't hurt, & if anything, it is theoretically helping to have 2 of the BEST performers out there in the way of AntiVirus programs protecting me!

(Especially considering they appear to have diff. strengths vs. one another, & in the MOST important area concerning they: Detection! Especially of diff. types, where one excels over the other, & vice-a-versa).

It's defying a commonly stated tenet in this field of "Do not run 2 antivirus programs resident in memory @ the same time"... apk

 

[Alec§taar]

24 hrs. now: STILL RUNNING BOTH @ THE SAME TIME IN MEMORY!!!

See my subject-line/title-line above first, & then this:

Well, 'so far, so good'... defying tradition really, by running 2 antivirus programs in RAM @ the SAME TIME, & no hassles...

Why is this 'so great' to me?? See the above...

NOD32 kicks NAV's butt on detection of binary infectors per reviews AshenSugar & myself HAVE seen & noted, whereas NAV kicks NOD32's butt on Macro/Script infector vectors... NAV weighs more, no doubt about it!

Again/however (on the most important part, detections), NAV it tends to detect more MACRO/SCRIPT type attacks, & to me (especially for EMAIL, a commonly used 'bushwhack' attack vector), THIS MATTERS HUGELY.

WHY? Again: Macro Virus' are FAR easier to get code for (shift key @ start up of Word for example, stalls them executing), alter it into a completely NEW type (VBA code) & voila: NEW VIRUS!

(Creation of Macro/script infector variants (which CAN 'throw' signatures based detections mind you) IS easier by far, than writing a binary infector in ASM... by FAR. On that logic alone, you will see MORE macro/script virus period. VBA coding = 1/4 as difficult imo, as ASM!)

So... My running BOTH @ once? Gives me the BEST PROTECTION IN THE BUSINESS, imo @ least, & on areas where one is strong, where the other is less strong.

(Still, imo & findings thusfar? Well, BOTH are good products imo & yes per the above + reviews AshenSugar & I saw in another thread on nearly the same subject here which we researched, AND, for the MOST important part of an AntiVirus imo @ least: DETECTION!)

APK

P.S.=> Now, conversely... nice finding OR not?

If somebody can show me NOD32 detects more of the more prevalent type of virus out there in macro/scripting (because they're relatively EASY to take code from & alter into an entirely new one that can throw signatures based detections/mugshots, lol)?

Well, I will quit running both, dump NAV corporate, & GO NOD32 ALL THE WAY! apk