Alternative to Mcafee Enterprise

[asdf]

running mcafee 8 enterprise on my windows 2000 pro.
Great program and catches nearly everything I come up against.
But it's incredibly slow to the point where I have to disable
on-access scan in order to be able to use my machine. This
sort of defeats the purpose of having scanner at all.

What other programs there which have good track record
of catching viruses, spyware, coming with new defs on daily basis
as well as being easy on system resources?

My system's specs are as follows:
OS: Win2000pro
1Gb RAM
system installed on 80Gb WD HD.
ASUS p4pe mobo.
2.4 GHZ intel.

thanx

 

[Befunge Sudoku]

running mcafee 8 enterprise on my windows 2000 pro.
Great program and catches nearly everything I come up against.
But it's incredibly slow to the point where I have to disable
on-access scan in order to be able to use my machine. This
sort of defeats the purpose of having scanner at all.

What other programs there which have good track record
of catching viruses, spyware, coming with new defs on daily basis
as well as being easy on system resources?

My system's specs are as follows:
OS: Win2000pro
1Gb RAM
system installed on 80Gb WD HD.
ASUS p4pe mobo.
2.4 GHZ intel.

thanx

I've got half that RAM and a slower processor on my 2000 box
and VirusScan8enterprise is fine for me. How do you have it
configured? I've seen it slow down a lot if you let it watch
network drives (Novell network here and I have a lot of
mappings). And I have 'scan inside archives' off for the on-
access scan, but on for the on-demand scan.

Thought: is it running a boot-time scan? That's often set to be
invisible, and can make the machine sluggish. Check in the
Console. I switch the boot-time scan off and rely on the on-
access scan.

Also do you have VirusScan patched? And when did you last clean
up your disk? (delete temp files, defrag, etc)

 

[Art]

running mcafee 8 enterprise on my windows 2000 pro.
Great program and catches nearly everything I come up against.
But it's incredibly slow to the point where I have to disable
on-access scan in order to be able to use my machine. This
sort of defeats the purpose of having scanner at all.

What other programs there which have good track record
of catching viruses, spyware, coming with new defs on daily basis
as well as being easy on system resources?

Kaspersky version 6 should soon be out of Beta:

http://www.kaspersky.com/beta

My system's specs are as follows:
OS: Win2000pro
1Gb RAM
system installed on 80Gb WD HD.
ASUS p4pe mobo.
2.4 GHZ intel.

I've tested KAV version 6 Betas on my Win 2K PC which has far less
resources than what you have:

1.6 ghz AMD cpu
256 meg RAM

and after a initial drive scan it was as if the realtime monitor(s)
weren't even there. KAV generates a checksum on files it scans so it
doesn't waste time scanning them again. Applications start
quickly and there is minimal waste of resources.

KAV has arguably the best file scanner, updating scheme, and fast
reaction time of all , and with version 6 you have proactive
protection as well. That is, it has capabilities for alerting users to
new and "unknown" malicious code, for one thing. It also has
a new web surfing protection capability.

If you have some experience and aren't afraid of Beta software,
I suggest giving one of the v6 Betas a shot. They are pretty far
along and shouldn't give you any problems.

Art

http://home.epix.net/~artnpeg

 

[Jay]

I've tested KAV version 6 Betas on my Win 2K PC which has far less
resources than what you have:

1.6 ghz AMD cpu
256 meg RAM

and after a initial drive scan it was as if the realtime monitor(s)
weren't even there. KAV generates a checksum on files it scans so it
doesn't waste time scanning them again. Applications start
quickly and there is minimal waste of resources.

Art,

I've heard good things about KAV 6 beta in terms of being much lighter
on resources. What's the memory usage when _not_ doing an on-
demand/scheduled scan or an update?

TIA

 

[Art]

Art,

I've heard good things about KAV 6 beta in terms of being much lighter
on resources. What's the memory usage when _not_ doing an on-
demand/scheduled scan or an update?

Sorry, I don't have either KIS or KAV Beta installed right now. It
probably varies based on the modules you've selected to be active
and whether you're using KIS or KAV. Try it and see

Art

http://home.epix.net/~artnpeg

 

[asdf]

I've got half that RAM and a slower processor on my 2000 box
and VirusScan8enterprise is fine for me. How do you have it
configured? I've seen it slow down a lot if you let it watch
network drives (Novell network here and I have a lot of
mappings). And I have 'scan inside archives' off for the on-
access scan, but on for the on-demand scan.

Yes scan inside archives i enabled on access scan.

Thought: is it running a boot-time scan? That's often set to be

Not sure about boottime scan but it's slow not just when i start using my
system.

invisible, and can make the machine sluggish. Check in the
Console. I switch the boot-time scan off and rely on the on-
access scan.

Also do you have VirusScan patched? And when did you last clean
up your disk? (delete temp files, defrag, etc)

all the latest defs are installed and its set to download all the latest
stuff on a daily basis.
I do set my Mcafee to the most secure settings. everything that it can scan
is scanned. Would
you say the default settings are the best?

 

[asdf]

what other setting do you have enabled/disabled to optimize macafee
performance?
Is it really safe to stop AV from scanning inside archives. Or is reasoning
here
that nothing can be done by viruse while it's archived anyway and for it to
be
scanned when it's extracted?

 

[asdf]

tried KAV 6. tried doing systems can. Much slower scan than macafee
Im afraid. took 5 minutes to scan 1000 files. Or is it because it was the
first
scan?

 

[Befunge Sudoku]

Yes scan inside archives i enabled on access scan.

I have 'scan inside archives' OFF for the on-access scan - but
that would only affect it when you accessed an archive anyway,
so it's not that.

Not sure about boottime scan but it's slow not just when i start using my
system.

The boot-time scan could be taking up to an hour, of course.

all the latest defs are installed and its set to download all the latest
stuff on a daily basis.

Even when you tell it to get everything, it doesn't always get
the patches. If you go to the About section, do you have engine
4400 and patch level 10 or 11?

I do set my Mcafee to the most secure settings. everything that it can scan
is scanned. Would
you say the default settings are the best?

Mine is set to pretty much do everything - except network
drives, so check that: can be a problem sometimes.

What else do you have running fulltime?
My VirusScan gets along OK with ZoneAlarm Pro and Microsoft
AntiSpyware running. What's your email client? I've got
Outlook2003 and it seems OK with that, but it's using IMAP not
POP3. I also have a couple of Firefox windows open most of the
time and the Gravity 2.6 news client is usually loaded. None of
this seems to cause trouble.

 

[Art]

tried KAV 6. tried doing systems can. Much slower scan than macafee
Im afraid. took 5 minutes to scan 1000 files. Or is it because it was the
first
scan?

Of course, as I pointed out.

Art

http://home.epix.net/~artnpeg

 

[Hoosier Daddy]

Is it really safe to stop AV from scanning inside archives.

Only if you don't run a program that allows decompression and execution
on the fly of the archived content. The Java Virtual Machine (JVM) might
do this if I'm not mistaken.

 

[Art]

Only if you don't run a program that allows decompression and execution
on the fly of the archived content. The Java Virtual Machine (JVM) might
do this if I'm not mistaken.

Nowdays, archive scanning should be enabled because of compressed
"executeable" files such as Windows Help CHM files. If Java is
installed, there is another file type along the same lines (compressed
and possibly dangerous, but I forget which) which will not be scanned
unless archive scanning is enabled. That's why Kaspersky (and I
suppose some others) now scan archives by default. In fact "All Files"
is the default safest setting now, unlike back in the dark ages when
scanning all files was considered "dumb" (Frisk and F-Prot )

This situation is no doubt the main reason Kaspersky uses checksumming
to avoid re-scanning files already scanned. It's so important now to
scan _most_ all files that some method of speeding up scanning is
required. I say "most" all files since I suspect a certain amount of
"smart" scanning may be done as well where the file structure is
examined and some files _may_ not be scanned by default even with a
"All Files" setting ... I'm not sure.

Terminology and techniques are changing. On my old version 3.5 of
KAV, there is a "all files" and a "smart", and then a separate
"archives" settings. With "all files", you can use your own exclude
mask to avoid scanning .TXT and .JPG and the like. With "smart"
scanning, the scanner avoids scanning quite a number of files based on
their structure. Personally, I use the combination of "smart" plus
"archive" with this old version. But if I were to use its realtime
monitor, having archive scanning enabled slows down the loading
of applications considerably. Since archive scanning is important,
I'd use version 6 of KAV if I was interested in realtime scanning.
With v6 there's no slowdown problem at all after the first scan
of the drive.

Art

http://home.epix.net/~artnpeg

 

[asdf]

I have 'scan inside archives' OFF for the on-access scan - but
that would only affect it when you accessed an archive anyway,
so it's not that.

The boot-time scan could be taking up to an hour, of course.

Is you boottime scan off?

Even when you tell it to get everything, it doesn't always get
the patches. If you go to the About section, do you have engine
4400 and patch level 10 or 11?

scan engine is 4400
patch versions is none. Where do i download the updated ones.?

Mine is set to pretty much do everything - except network
drives, so check that: can be a problem sometimes.

Have no network drives to scan

What else do you have running fulltime?
My VirusScan gets along OK with ZoneAlarm Pro and Microsoft
AntiSpyware running. What's your email client? I've got

Outlook.
using OE for newsgroups

 

[asdf]

ok ive tried KIS 2006 beta and it's great. however i have one question about
it.
I am running ftp server on my machine and with sygate firewall it worked
great.
My router would forward traffic to my machine and sygate would let it
through.
However KIS is not allowing it for some reason.

the rule i created in KIS is:
Allow inbound/outbound TCP connection where local port is xxxx.

I can connect to the ftp server but the files are not listed.

the error that ftp client gives me is:

Error 425 Cant open data connection
could not retrieve directory listing.

 

[Art]

ok ive tried KIS 2006 beta and it's great. however i have one question about
it.
I am running ftp server on my machine and with sygate firewall it worked
great.
My router would forward traffic to my machine and sygate would let it
through.
However KIS is not allowing it for some reason.

the rule i created in KIS is:
Allow inbound/outbound TCP connection where local port is xxxx.

I can connect to the ftp server but the files are not listed.

the error that ftp client gives me is:

Error 425 Cant open data connection
could not retrieve directory listing.

I suggest that you post your questions on the Kaspersky Beta forum.
The url should be in KIS, maybe under Help. The developers and
knowledgeable ones are there.

You might consider using KAV plus Sygate instead of KIS since Sygate
worked ok for you. I'm really stuck on Sygate's excellent traffic log.
Dunno if KIS has one like it. Never paid attention to it when I took a
look at KIS. Looks like Sygate is/will be available through Simtel and
other download sources.

Art

http://home.epix.net/~artnpeg

 

[asdf]

any idea where i can download patches for my mcafee enterprise 8?

 

[Befunge Sudoku]

any idea where i can download patches for my mcafee enterprise 8?

I forget where they are a day after every time I go and find
them ;->
You need to use your Prime Portal login, iirc. Somewhere on the
McAfee support forums there'll be a link.