howardagoldberg 14 Posted October 20, 2013 Posted October 20, 2013 This past week I upgraded two Win7 Ultimate x64 systems from NOD32 Antivirus from 6.0.316 to 7.0.302. On both systems, I uninstalled 6.0 first (via add/remove programs). And on both systems, version 7 installed fine ... no issues. However, I have two questions: 1) On both systems, prior to upgrading under version 6, the Real-time file system protection module had been at version 1009 (I believe with a March 2013 date). Now, on version 7 the version for the module is 1006 (dated September 2011) on both systems. All the other modules are from 2013. What version should the real-time module be? Current modules (as of October 19 at 9:45 p.m. Eastern): Virus signature database: 8939 (20131019) Update module: 1044 (20130708) Antivirus and antispyware scanner module: 1411 (20131004) Advanced heuristics module: 1143 (20130909) Archive support module: 1180 (20130930) Cleaner module: 1078 (20131003) Anti-Stealth support module: 1053 (20130906) ESET SysInspector module: 1237 (20130701) * Real-time file system protection module: 1006 (20110921) * Translation support module: 1122 (20130911) HIPS support module: 1097B (20130927) Internet protection module: 1085 (20131011) Database module: 1040 (20130822) ... also, any thoughts on why the HIPS module is 1097B (what is the "B"?). On both systems, the modules are exactly the same -- and "regular updates" are selected. 2) All of my email accounts are Gmail (using IMAP) and I access mainly using Outlook 2013. In order for the email scanning at the "port level" to work properly, do I need to enable SSL scanning so that port 993 is scanned?
TGW 15 Posted October 20, 2013 Posted October 20, 2013 (edited) On both systems, I uninstalled 6.0 first (via add/remove programs). And on both systems, version 7 installed fine ... no issues. However, I have two questions: 1) On both systems, prior to upgrading under version 6, the Real-time file system protection module had been at version 1009 (I believe with a March 2013 date). Now, on version 7 the version for the module is 1006 (dated September 2011) on both systems. All the other modules are from 2013. What version should the real-time module be? You probably have enabled "Pre-release update" option in your previous installations, hence why that module was updated to 1009 (20130301), and as far as I remember it was released address certain issues in server products. According to ESET, this module doesn't need any improvements/updates, but for some reason people have 1006 (regular) and some others have 1007 (regular), not yet explained. Also, this module should not be confused with Real-time system protection functionality, which incorporates this modules and other modules to provide the protection. Edited October 20, 2013 by TGW
Administrators Marcos 5,441 Posted October 20, 2013 Administrators Posted October 20, 2013 The latest version of the real-time protection module was needed for server v4-based products and does not affect other products or versions.
howardagoldberg 14 Posted October 21, 2013 Author Posted October 21, 2013 (edited) Thanks all, appreciate the responses (and assurance that nothing was amiss). Does anyone know why the HIPS module in version 7 has a "B" after the version number. Upon install it was 1097B (which I assumed was related to it being the first HIPS module for the RTM release, so perhaps that HIPS module was technically still in Beta?). Today it is 1099B. In earlier versions, a letter would only show up with pre-release versions of certain modules and the AV signature. Thanks. Edited October 21, 2013 by howardagoldberg
TGW 15 Posted October 21, 2013 Posted October 21, 2013 Thanks all, appreciate the responses (and assurance that nothing was amiss). Does anyone know why the HIPS module in version 7 has a "B" after the version number. Upon install it was 1097B (which I assumed was related to it being the first HIPS module for the RTM release, so perhaps that HIPS module was technically still in Beta?). Today it is 1099B. In earlier versions, a letter would only show up with pre-release versions of certain modules and the AV signature. Thanks. I can't tell for sure, but it probably is a beta version of the module since there are some on-going issues with HIPS on Windows 8.1, so maybe they're pushing the latest available versions to address those issues.
Recommended Posts