hqsec 12 Posted February 24, 2014 Share Posted February 24, 2014 Hi to all! I have a question about default settings of ESET Nod32 AV 7.0.302.26. I've installed AV with default settings. Upon examining advanced settings I found out that option "Advanced heuristics on file executions" is enabled by default (as shown in attached printscreen). User guide says the following: "By default, advanced heuristics are not used when files are executed. However, in some cases you may want to enable this option (by selecting Advanced heuristics on file execution). Note that advanced heuristics may slow the execution of some programs due to increased system requirements." So is user guide right and we should disable this option or should this option be enabled? As I remember, in previous versions, there would even be a warning message when user enabled this option (warning about performance impact). With v.7 there is no more warnings when advanced heuristics are enabled or disabled. Even when enabling Advanced heuristics/DNA/Smart signatures in ThreatSense engine parameter setup, program shows no warning. So my question is: has there been any improvement in Advanced heuristics module regarding system performance impact? hqsec Link to comment Share on other sites More sharing options...
Administrators Marcos 4,304 Posted February 24, 2014 Administrators Share Posted February 24, 2014 The text in the user guide is evidently outdated. I'll check it out with the documentation team to make sure it's accurate and up to date. Advanced heuristics should be left enabled on file execution. Link to comment Share on other sites More sharing options...
Solution SweX 870 Posted February 25, 2014 Solution Share Posted February 25, 2014 Advanced Heuristics during real-time scanning is disabled by default. Advanced Heuristics for on-execution is enabled by default. I believe enabling AH for real-time scanning is the setting that could cause some impact on the performance wich is why it is disabled by default. Link to comment Share on other sites More sharing options...
hqsec 12 Posted February 25, 2014 Author Share Posted February 25, 2014 (edited) Thank you both for your answers. Does anybody know why there is no more warning when turning on Advanced Heuristics in real-time scanning? hqsec Edited February 25, 2014 by hqsec Link to comment Share on other sites More sharing options...
Administrators Marcos 4,304 Posted March 20, 2014 Administrators Share Posted March 20, 2014 Thank you both for your answers. Does anybody know why there is no more warning when turning on Advanced Heuristics in real-time scanning? hqsec Enabling this option shouldn't have substantial effect on system performance, especially after a disk scan (e.g. first-time scan) has been run and LiveGrid and Smart optimization are enabled. Link to comment Share on other sites More sharing options...
SweX 870 Posted March 20, 2014 Share Posted March 20, 2014 (edited) Thank you both for your answers. Does anybody know why there is no more warning when turning on Advanced Heuristics in real-time scanning? hqsec Enabling this option shouldn't have substantial effect on system performance, especially after a disk scan (e.g. first-time scan) has been run and LiveGrid and Smart optimization are enabled. Good to know, but personally I will leave it disabled as I don't feel I need AH activated for the real-time scanner. The web protection module is too good to let anything through in most cases anyways B) I feel confident enough knowing that AH kicks in during execution. Edited March 20, 2014 by SweX Link to comment Share on other sites More sharing options...
FleischmannTV 9 Posted April 12, 2014 Share Posted April 12, 2014 (edited) After a default installation "Advanced heuristics on file executions" is enabled by default. However, when you click on "Default" in the lower right corner of the corresponding window and reset to default, it will be disabled again, no matter if you reset only the "Advanced setup" or all settings. So there must be a discrepancy between a default installation and resetting to default settings. It would be nice to know if anybody else can reproduce this. Edited April 12, 2014 by FleischmannTV Link to comment Share on other sites More sharing options...
hqsec 12 Posted April 13, 2014 Author Share Posted April 13, 2014 After a default installation "Advanced heuristics on file executions" is enabled by default. However, when you click on "Default" in the lower right corner of the corresponding window and reset to default, it will be disabled again, no matter if you reset only the "Advanced setup" or all settings. So there must be a discrepancy between a default installation and resetting to default settings. It would be nice to know if anybody else can reproduce this. Yes I can reproduce this. It looks like Default option was not updated to default installation settings, as you said. hqsec Link to comment Share on other sites More sharing options...
SweX 870 Posted April 13, 2014 Share Posted April 13, 2014 My memory tells me we had a discussion about this not long ago in another thread obviously I don't remember in what thread it was. Or if ESET gave an answer about it in that thread. Hmmm... Link to comment Share on other sites More sharing options...
Recommended Posts