Problems with Mini and ESET NOD32 Virus Sanner

Message boards : Number crunching : Problems with Mini and ESET NOD32 Virus Sanner

To post messages, you must log in.

AuthorMessage
Mike Tyka

Send message
Joined: 20 Oct 05
Posts: 96
Credit: 2,190
RAC: 0
Message 52021 - Posted: 19 Mar 2008, 18:00:35 UTC
Last modified: 19 Mar 2008, 18:02:26 UTC

Many of you have noticed that the NOD32 virus scanner by ESET has been incorrectly identifying minirosetta as a variant of a "Win32/Statik" virus.

This is an issue very difficult to resolve for us: We have no contorl over ESET's virus definition files, nor do we know what it is that NOD32 supposedly recognises. We also have little control over the binary code Visual C++ produces from our code. We have contacted ESET about this but they have been rather unhelpful.

For now thus, all i can offer is a workaround: If you turn off Web access protection for *bakerlab.org* addresses, this should avoid the problem.

Go to setup->"Antivirus and antispyware"->Configure...

and then under
Antivirus and antispyware-->Web access protection->Excluded addresses

click "add" and type in *bakerlab.org*
(asterisks are required on both sides!)

and then OK.


I've tried this on my local virtual windows machine and it appears to work. Please let me know if it does for you too ! We'll try and resolve the issue "properly" but it will be some time before we'll be able to, for now i hope this workaround is acceptable !

Cheers, Mike
http://beautifulproteins.blogspot.com/
http://www.miketyka.com/
ID: 52021 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile dcdc

Send message
Joined: 3 Nov 05
Posts: 1829
Credit: 115,799,650
RAC: 57,857
Message 52026 - Posted: 19 Mar 2008, 21:36:30 UTC
Last modified: 19 Mar 2008, 21:37:00 UTC

i would suggest that people with the problem contact NOD's authors (ESET) and post in their forum or use the 'contact support' link to give them some idea of how large the user base (and therefore the problem) here is. The longer it carries on, the more members the project will loose...

http://www.eset.com/support/kb.php
ID: 52026 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
BarryAZ

Send message
Joined: 27 Dec 05
Posts: 153
Credit: 30,843,285
RAC: 24
Message 52028 - Posted: 19 Mar 2008, 23:34:25 UTC - in response to Message 52021.  

Thanks much for the workaround. It will take me some time to deploy that globally -- but that sounds like a fix.

Barry




Many of you have noticed that the NOD32 virus scanner by ESET has been incorrectly identifying minirosetta as a variant of a "Win32/Statik" virus.

This is an issue very difficult to resolve for us: We have no contorl over ESET's virus definition files, nor do we know what it is that NOD32 supposedly recognises. We also have little control over the binary code Visual C++ produces from our code. We have contacted ESET about this but they have been rather unhelpful.

For now thus, all i can offer is a workaround: If you turn off Web access protection for *bakerlab.org* addresses, this should avoid the problem.

Go to setup->"Antivirus and antispyware"->Configure...

and then under
Antivirus and antispyware-->Web access protection->Excluded addresses

click "add" and type in *bakerlab.org*
(asterisks are required on both sides!)

and then OK.


I've tried this on my local virtual windows machine and it appears to work. Please let me know if it does for you too ! We'll try and resolve the issue "properly" but it will be some time before we'll be able to, for now i hope this workaround is acceptable !

Cheers, Mike


ID: 52028 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
numizmag

Send message
Joined: 25 Mar 08
Posts: 1
Credit: 584
RAC: 0
Message 52770 - Posted: 28 Apr 2008, 6:05:25 UTC

*bakerlab.org* is not good as an URL mask. Consider:

http://www.malware.com/bakerlab.org/malware.js

It would be excluded from protection. A security risk.

As a rule of thumb, URL addresses must not contain leading asterisks. Change it to:

srv?.bakerlab.org*

Cheers.
ID: 52770 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile paulcsteiner

Send message
Joined: 15 Oct 05
Posts: 19
Credit: 3,132,449
RAC: 504
Message 52795 - Posted: 30 Apr 2008, 3:55:30 UTC - in response to Message 52770.  

Or consider a different A/V vendor, perhaps AVG. It's available in a free edition too,..


*bakerlab.org* is not good as an URL mask. Consider:

http://www.malware.com/bakerlab.org/malware.js

It would be excluded from protection. A security risk.

As a rule of thumb, URL addresses must not contain leading asterisks. Change it to:

srv?.bakerlab.org*

Cheers.


ID: 52795 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote

Message boards : Number crunching : Problems with Mini and ESET NOD32 Virus Sanner



©2024 University of Washington
https://www.bakerlab.org