Eset Antivirus Beats Leading Vendors to the Punch

By David Worthington, BetaNews

August 12, 2004, 6:05 PM

Although Windows XP Service Pack 2 has been released to manufacturing, some of the world's leading antivirus vendors including Symantec and McAfee are still in the process of assuring compatibility. As these ISVs continue to perfect their code, a little known vendor called Eset has already beaten them to the punch.

In fact, Microsoft itself is a four year customer of Eset and the software giant has just signed on for an additional two years of service. Microsoft places so much confidence in Eset's Nod32 antivirus product that it uses the software in its release labs.

How could such an unknown score such a high profile account? The answer lies in Nod32's rich detection capabilities, small footprint and feature set. For starters, Nod32 detects 100 percent of in-the-wild viruses according to Virus Bulletin. Nod32 also makes a negligible system performance because of two parameters: it is coded in assembly and its founders claim that their 16 years of experience in programming antivirus engines factors into the engine's overall design.

Eset's negligible impact on system performance has led to its growing popularity among gamers.

Eset's Nod32 is comprised of four core modules: IMON, AMON, DMON, and NOD32. IMON was enhanced to monitor HTTP and HTTPS taffic in a beta version of the software that was released July 22nd. Prior to the update IMON monitored POP3 traffic only. IMON monitors all HTTP traffic for malware, is browser agnostic, has support for hyperthreading in multiprocessor machines and includes a large file download progress window in its e-mail client plug-in.

Unlike other antivirus products, Nod32 will not send out notifications to infected users. An Eset spokesperson told BetaNews that the majority of virus notification e-mails are misleading and are often sent from spoofed email addresses by worms such as Mydoom.

Symantec has recently retooled its products to discontinue the practice.

"Our honeypots collect false notifications from other antivirus products that are never true," said the Eset spokesperson.

The 2.011 beta release of Nod32's resident antivirus scanner AMON has advanced new heuristics to detect unknown trojans and has improved trojan cleaning procedures. Nod32 does not require users to reboot into safemode as its default procedure to remove Trojans; rather, the software will stop the service, delete the trojan and restore Windows to its previous state.

In addition, a previously undocumented feature in AMON's on-demand scanner has been announced which adds command-line support to Windows.

Nod32's newest module, DMON (Document MONitor) adds MS Office System antivirus support to monitor Office documents and macros, bringing the product's feature set up to speed with market leaders Symantec and McAfee.

Another pillar of Nod32's feature set is transparency. Nod32 is capable of running into a silent mode were users receive no notifications and are not prompted to interact with the scanner even when a virus is detected. "Users don't care about viruses or configuration; they care about security," said Eset's spokesperson.

In a June interview with BetaNews, a McAfee spokesperson told BetaNews that transparency is one of McAfee's goals for future product releases. Microsoft's upcoming antivirus product is expected to operate in a similar fashion.

The software also receives hourly updates and does not need to be uninstalled when an upgrade is released. Eset claims that installation of Nod32 takes under 2 minutes on most systems and that virus definition updates to its enterprise product come in increments of less then 24 kilobytes.

A final release of Eset's 2.x product series is expected to ship by mid September. Localized versions for Eastern Europe will be among the first to be released with an English language version following suit. Since Eset operates under a subscription pricing model, existing customers will receive the update free of charge.

Nod32 is available in non-English languages including: Italian, Polish, Portuguese, Spanish, German, Czech, Croatian and Hungarian for both the Windows and Linux operating environments.

Nod32 may be downloaded from FileForum.

Add a Comment (33 Comments)

BetaNews reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic. Foul language and personal attacks will not be tolerated.

Name (required):

E-mail (required):

Enter Your Comment:

By lodave

posted Feb 7, 2008 - 4:49 PM

ESET NOD32 is now in v.3.0.621 as is ESET's new
full Smart Security Suite, both available as trialware or payware. Considering the efficacy of NOD32 compared to its competition, and the reasonable price for multi-user packs, it is well worth the price.

Score: 0

By Salahor

posted Jul 16, 2007 - 12:04 PM

I have Nod32 for 3 years installed on my pc and I haven't got any viruses!

Score: 0

By MUCHIRI

posted Oct 25, 2006 - 2:41 AM

IV BEEN USING THE ANTIVIRUS FOR THE LAST TWO MONTHS AND IV REALLY ENJOYED USING IT BUT UNFORTUNATELY IV BEEN USING THE TRIAL ONE WHICH EXPIRES AFTER EVERY MONTH.WOULD YOU PLIZ HELP ME ACQUIRE A FULL VERSION OF THE ANTIVIRUS?THANKS IN ADVANCE.MUCHIRI

Score: 0

By MUCHIRI

edited Oct 11, 2006 - 6:12 AM

YOUR ANTIVIRUS IS JUST WONDERFUL.THANKS 4 IT.

Score: 0

By pau st john

edited Aug 18, 2006 - 2:01 PM

Without any doubt at all I recon' that NOD32 is THE best anti virus package ever. In the past I tested Kasperskyand McAfee which both "took over" the whole computer, and I really don't think that the intention should be like that.

Score: 0

By NbTsTaT_A

edited Sep 4, 2005 - 11:41 AM

http://www.av-comparativ...orum/viewforum.php?f=17
^^^here is an unbiased review^^^
http://www.eicar.org/anti_virus_test_file.htm
^^^here is a test file^^^

Score: 0

By sid01

posted Aug 29, 2004 - 10:32 AM

Windows XP SP2 is itself crappy...it doesn't allow over 200 proggies to run...

Why does Microsoft have to dictate terms???

Why do software manufacturers release patches so that the software will work with a Microsoft update?

Why isn't it the other way around?

Why doesn't Microsoft release patches so that OTHER software run properly? Why?

I have nothing against NOD32, I think it is the best AV in the world, but why is Microsoft dictating terms anyway? Even biggies like the (crappy) Symantec have to bow before Billionaire Bill!

Score: 0

By joucoski

posted Aug 29, 2004 - 2:19 AM

The Great Software NOD32 is the best that I have used.
Running in background with low use resources of machine.
The best!

Score: 0

By PoWS

posted Aug 20, 2004 - 3:18 PM

Nod32 is the best antivirus, light, not memory hungry and effective.
They have version for all OS starting from DOS to Windows XP including xBSD, Linux all distro, Novell Netware and also a module for MS Exchange (5.5 to 2003) and Lotus domino.

The only bad point, if I have to find one, they didnt have an advanced centralized management software like Trend Micro or other recognized flagship antivirus.

Score: 0

By minoSK

posted Aug 25, 2004 - 11:22 AM

You are wrong, It IS called remote administrator and am using one almost one year.
http://www.nod32.com/products/ra.htm

Score: 0

By kmleow

posted Aug 14, 2004 - 6:40 AM

How about turning off Security Center service. Save some RAM from there. :-)

Score: 0

By Aaroniekins

posted Aug 14, 2004 - 5:59 PM

kaspersky is much better for detection

Score: 0

By FailedCRC

posted Aug 16, 2004 - 8:43 AM

don't talk bs, nod32 has proved itself time and time again to be the best (and the fastest / lowest in memory usage). perhaps you need to look here http://www.virusbtn.com/...ducts.xml?kaspersky.xml and here http://www.virusbtn.com/...s/products.xml?eset.xml before spouting off.

Score: 0

By pjb

posted Aug 13, 2004 - 12:13 PM

It is true delight to use this product. Just goes to show if Eset can keep up-to-date with windows service packs, why can't the others.

Score: 0

By jfreiman

edited Aug 13, 2004 - 2:24 AM

I manually updated my NAV (which came with SW2004) on 8/10.
Since that time it has notified SP2's Security Center that it is functioning.
The weird thing, to me, was that after the update NAV recommended NOT enabling it's ability to notify other programs (Security Center) that it was enabled/installed - I ignored it's recommendation.

Score: 0

By BladeZero

posted Aug 12, 2004 - 10:48 PM

We all know PC Magazine has a sure 20-year contract or something signed with Norton Antivirus, so they can guarantee all Norton Antivirus users won't be hurt by the fact their antivirus system is in the dark ages of detection.

Score: 0

By RobertM

posted Aug 12, 2004 - 10:24 PM

I'm not quite sure what "compatibility" with SP 2 implies in this article. Do they mean integration and cooperation with Security Center, or do they mean that the product continues to function as normal?

I have the free version of AVG on one of my computers and Norton on one of my others. Surprisingly--to me anyway--AVG cooperated nicely with Security Center, telling it that it is installed and up to date. However--equally surprising--Norton reports that it's installed, but it says its status is unknown. I wondered if it was because I hadn't performed a full system scan lately (I'm on dial-up, I'm careful, and I really don't think it's necesssary or worth the time to do one every week), but I did one anyway. Still said status unknown.

So, the big guy isn't quite cooperating, but the lesser known one works great. :-) At least that's my experience. In the mean time, I've told Security Center on my new computer that I'll monitor my antivirus product on my own for now so that it stops bothering me.

By the way, what's to stop some virus-like software from hijacking Security Center and, on people who don't have antivirus software/etc., from registering itself as an antivirus program and saying it's up to date? I haven't looked at what makes Security Center work yet, but I'm assuming antivirus programs register themselves somewhere and report their status, so what's to stop malware from doing the same? Off-topic, I know. I should ask this somewhere else. :-) But it's just a curiousity I have.

Score: 0

By CyberInferno

posted Aug 12, 2004 - 6:57 PM

Are other AV programs not supposed to work? My Avast is working just fine...

Score: 0

By stp

posted Aug 12, 2004 - 7:06 PM

Security Center is a key part of the Service Pack.

Score: 0

By screamer55

posted Aug 20, 2004 - 1:44 AM

Not exactly...
I disabled mine and XP runs better.

NOD 32 kicks ass. I'm sold.

Scrmr

Score: 0

By marcos_cu

posted Aug 13, 2004 - 11:16 AM

Throughout the SP2 beta process, Windows did not recognize that Symantec was running. However, due to changes in the final build of SP2 or the Live Updates that occured after the SP2 installation... the Security Center recognizes the virus software.

Score: 0

By dot854jc

posted Aug 13, 2004 - 6:16 PM

symantec has an update available to fix the issue

Score: 0

By screamer55

posted Aug 20, 2004 - 1:49 AM

The best way to fix Symantec issues is to uninstall it.

Scrmr
------------

Symantec-free zone

Score: 0

By Keeper_G

posted Aug 22, 2004 - 8:26 PM

The next version of NOD32 comes very close to Kaspersky's detection rate if it is configured properly(advanced heuristics activation), but no antivirus in the world is better than Kaspersky; the current one closest to Kaspersky is F-Secure which uses the Kaspersky engine among others. Kaspersky uses an advanced heuristics engine which is able to detect 90% of the unknow mallware and was the only antivirus in the world to detect loveletter(Symantec struggled for hours) without any signature update. It didn't score 100% for all Vbulletin tests because if an antivirus has any false positives, it automatically fails the test; rest assured, Kaspersky never detected less than NOD32, on the contrary. The records reported by Kaspersky are not equal to the number of known viruses; a record represents a signature needed to detect a virus all the other viruses with similar code up to a level where a new virus code requires a new record due to its major difference from the initial signature and so on.
I subscribe, Symantec is something like a Microsoft of security; many people use their products because the think that Symantec's products are the best, but in fact they no nothing about quality security products.
NOD32 is my favorite antivirus and it has became an integrated part of windows; I never had to unload it from memory and I recommend it to everyone. NOD32 got 28 vbulletin 100% awards, but that means very little to me.

Score: 0

By fosius

edited Jun 15, 2005 - 1:41 AM

Kaspersky doesnt have so advanced heuristic like NOD32. In a new retrospective test on www.av-comparatives.org MAY/2005 you can see how strong is NOD32's heuristic engine.

Score: 0

By FailedCRC

edited Aug 23, 2004 - 6:29 PM

er, an av product doesn't gain any 'brownie points' for false positives. guessing more things are viral doesn't make it better. quality over quantity etc.

oh, and please substantiate your kaspersky and f-secure 'detection rate' claims.

Score: 0

By Keeper_G

posted Aug 25, 2004 - 1:24 PM

I said that NOD32 is curretly almost as good as Kaspersky(in terms of detection), but in the future(final version of the current beta) it will be better than Kaspersky because advanced heuristics will be available for all modules and because of the low system resources required to run, when Kaspersky takes up to much resources which could be used when running demanding applications and games(we'll se how much has Kaspersky optimized KAV Personal Pro 5 which will be out in september). My bet is that KAV will not be able to keep up in terms of performance despite its good detection rate.
Don't try F-Secure because it's not as good as Kaspersky despite its use of the KAV engine and it eats a lot of system resouces.

Score: 0

By Keeper_G

posted Aug 26, 2004 - 1:18 PM

The "code analyzer" option in KAV means it will detect at least 90% of all unknown viruses; KAV scanner can be started in the command line(modify shortcut) with the parameter -redundant (the swiss version has this option in the interface) which will enable an in depth analyzis mode in which KAV can detect almost all unknown malware, but the scan process will slow down considerably; in the new SP2 compatible version, NOD32 includes an "advanced heuristics" option(currently available only for "internet monitor" module) and an in depth analyzis mode which is equivalent to KAV's redundant mode, but a lot faster. NOD32 was not always as good as it is now; I hope Kaspersky Labs will do something to optimize KAV because there has to be an alternative to NOD32 and no product except KAV can be a competitor. If somebody has Norton, please set bloodhound to high and see if you have any false positives :) By comparition, NOD32 with deep heuristics(no adv heuristics - this is only available in the new version) and KAV with code analyzer(no redundant mode) will only give false positives for processes which are directly accessing/modifying the system resources in a potentialy dangerous way where Norton gives false positives for many normal windows processes. I belive false positives is acceptable instead of no detection of unknow malware, but Symantec is exaggerating with this.

Score: 0

By FailedCRC

edited Aug 28, 2004 - 10:14 AM

i appreciate the lengthy reply but you haven't given any objective evidence, it is still only your subjective opinion that one is better than the other.

Score: 0

By faterider

posted Sep 27, 2004 - 1:06 PM

If you yet need evidenses give me an e-mail and I'll send you rar arch. with lots of viruses and you can try for yoursef heh.

Than may be you'll change your opinion witch is the AV with best detection rate. Just install both AV's with last updates and look the results.

But the resourse hog of Kaspersky is too big to ignore, so I pass to NOD32 from yesterday.

This is really good AV.

Score: 0

By pacattack81

posted Aug 30, 2004 - 8:22 PM

how bout you take a look here:
http://www.av-comparatives.org/

how's that for facts....kaspersky hands down beats nod32 in almost every category of testing.....and kaspersky also has the same 100 percent vb award for june aswell...and the heuristics detection in kaspersky is far superior to any other antivirus out there....they detect something like 50-60 percent more in out the wild testing.....hope this enough facts for you....next time do your homework before you write things.....with that said nod32 is much better on memory then kaspersky is

Score: 0

By pacattack81

posted Sep 1, 2004 - 9:05 PM

and also you can look at this that ranks kasperky as number 1 and nod32 as 21:

http://www.virus.gr/engl...lt.asp?id=67&mnu=67

once again do some research before making comments

Score: 0

By NbTsTaT_A

edited Sep 4, 2005 - 9:14 AM

The test was made on 10-25 August 2004, using Windows 2000 SP4 on a CELERON 2400 Mhz, 256MB DDRAM. give me a break
An OS with that many service packs , what a platform to test an AV prog what a joke!!! lol
I've used Kaspersky and i've used NOD32.
I truly believe and i have proved it to myself that NOD32 is a much better AV prog. NOD32 runs cleaner . Kaspersky did a fine job infact i used it until i found NOD32. Did you notice the study was done bye a Russian. --->Antony Petrakis<--- I smell a bias case study. pacattack81 have you tried NOD32 ? One more thing i hope your not running Windows 2000 with SP4 lol. as for research ,i do my own bye running the software.The one i like most is NOD32. pacattack81 have a good day.

Score: 0