Printable View
Hi,
I remember when Version 6 (EZTrust Antivirus) was released there were some bugs when running it with Windows 98se. In view of that I never downloaded it and someone had found out that we had the same protection using version 5.4. Would anyone know if these bugs have been fixed and if it runs okay now?
Thanks.
Sincerely, Nancee
Nancee, I'd like to know that same answer since I'm back to version 5.4 and had problems with version 6.0 on my Windows 98SE system also. I noticed that they have live update driver updates but I haven't tried to install version 6 and those driver updates.
Tufenuf
Hi Tufenof,
We'll have to see who might come along and know about this. In the meanwhile I just got information about a problem with the real time scanning in Version 6 (but I don't think it applies to Windows 98 - it mentions NT). Also, I checked for that incremental scan and didn't find it in Version 5.4. Here's the info:
Sincerely, Nancee
Subject: CA InoculateIT 6.0 Realtime Scanner may fail to detect vira.
To: [email protected]
Executive overview:
We have recently closed a case with Computer Associates regarding a weakness
in their realtime scanner when configured with incremental scan. This
weakness would, in some cases, allow virus or trojan code to be saved to
disk, and signed as clean.
What is incremental scan:
The Incremental Scan option is for scanning volumes that are formatted with
the NTFS file system, to enhance scan performance. With this option in
effect, a file is scanned once, and a cached record is kept. The file is not
scanned again if it has not been modified since the last scan or if the
scanning options have not changed. This eliminates the unneeded repetitive
scanning of files that were already checked.
Problem:
If the Realtime Scanner has been set up to monitor 'Incoming and Outgoing
Files' in Realtime Monitor Options, and 'Incremental Scan' has been
activated under 'Advanced...' in the 'Selection' tab, it might be possible
for the realtime scanner to write an alternate datastream, where the file is
marked as having passed a successful antivirus-scan, before the file is
fully written to the system.
The problem has been reproduced on a newly installed windows 2000, where it
has been possible to download and save the Klez.H virus to the local
harddrive. Once the file has been downloaded and branded, it will not be
detected as a virus when copied to other systems over the network, when
these have a similar setup with incremental scan.
Tech talk:
When Internet Explorer downloads a file, the disk operations are done as a
bunch of FASTIO_WRITEs. During this process the incremental scanner might
scan the file and, if incremental scan is enabled, write an alternate data
stream certifying the file as being clean before it's done. Internet
Explorer will then download the rest of the file and the system then appears
to rewrite InoculateIT's alternate datastream.
Mitigating factors:
* Incremental scan is not enabled by default, but might be enabled for
performance reasons.
* Incremental scan can only be used on NTFS-volumes (the windows NT-series
of operating systems)
* The file will be detected when a new antivirus definition is applied, and
these are released daily.
* Generally, the circumstances where this will happen are rare.
Recomendation:
CA has released a patch for their realtime scanner that disables the
incremental scan option.
Their later versions (6.1 is right around the corner) will include improved
caching that makes incremental scanning less appealing, while their move to
daily signature updates also removes quite a lot of the benefit from this
functionality.
An alternative, until you can apply the patch or a newer version of
InoculateIT to your systems, is to disable incremental scan on the
enterprise management server's policy for the realtime scanner, and disallow
your users from changing their local settings from the policy's default. If
this is the case, you'll want to modify the policy for all machines
servicing interactive logons, such as workstations and terminal servers, and
fileservers.
There was a thread some time back ref this topic in another forum. EZ Anti-Virus Version 6.0 evidently is not consistently working properly with W98, W98SE and WINME;it seems to work okay with Win 2000 and WIN XP. I have heard of some folks who have used it on Win98 and it works good...in fact, my brother is using it with Win98SE and is pleased with it. I recall a comment from etrust support via e-mail to a customer that support would continue for versions 5.3 and 5.4 until issues with 6.0 were resolved. I continue to use 5.4 (I had a bad experience with 6.0) and recently gambled and renewed my subscription for another year...I personally like version 5.4 and hope they support it indefinitely.
Hint: If you install version 6.0 and notice the scan seems very slow compared to version 5..., then I would cease and desist and uninstall 6.0 immediately cause that seems to be a sign that it's not functioning correctly and might allow virii to enter your system (even if your Mime exploit patch is in place);that happened to me using 6.0. I'm happy with 5.4 and just don't want to gamble again with 6.0 as long as 5.4 still works....I think "Tuf" and some other users of 5.4 share my sentiments.
Problems with 6.0 have sent some of the etrust customers to other anti-virus programs...
Hope my rambling oratory helped your question a little....:confused:
Hi Le Boule!
I appreciate your information very much. I'm also very happy with Version 5.4 but just wondered if they fixed version 6. My one-year contract is expiring in February. I read about too many horror stories with version 6, so I never even downloaded it. I hope they continue to support 5.4 too.
Sincerely, Nancee
EZ Antivirus 6.0 is a stripped version of InoculateIT 6.0. Same interface minus some features. There also may be a difference in the scan engine. However, the two share something in common. When tested, neither worked reliably with Windows 9x.
My experience with Windows ME at my wife's office was a disaster. Installed fine, but scanned at a snail's pace and the real-time scanner let multiple viruses in. My brother, Le Boule, had a similar experience with Windows 98 SE. And others had BSOD's, etc. with Windows 98 FE and SE.
I use version 6.0.125 with Windows 2000 successfully and I hear of others who have no problems with Windows XP.
I will reevaluate the latest build with Windows 98 SE and possibly ME and post the results in the near future.
Allyn & Le Boule, Thanks for the feedback. I'm just going to stick with 5.4 at the current time but I'm getting a new computer with Windows XP and since 6.0 isn't causing problems with XP I'll probably try it since my subscription runs out in March 2003.
Thanks again,
Tufenuf
I use eTrust EZAntivirus 6.0 build 125 with Win98 SE and it works nicely. I've been using it for about 3 weeks now with no BSODs caused by it (some caused by spyware, but that's another story). It has stopped the Klez worm from entering my machine thru infected email and downloads its sig updates every 3 hours from ftp://ftp.ca.com. The default server ftpez.ca.com doesn't work very well, and I recommend the first one. But other than that, it works just fine.
Hi Allyn,
Thank you for explaining what's going on with EZTrust. I'll look forward to your evaluation of the newest release when it comes out. It seems when they try to make it compatible for the newer versions of Windows it causes problems for the older versions.
Sincerely, Nancy
Hi Nighthawk,
Do you have to use the autodownload with Version 6? I usually disable download in IE and if I had to use autodownload I imagine I'd have to put that address into my trusted sites - is that safe?
I have to wonder why Version 6 works well on your computer yet so many have had problems while running 98se. I guess your lucky. At this point I'm still reluctant to try it.
Sincerely, Nancy
Hi,
I wanted to mention that I got in touch with EZTrust Support and, like Nighthawk mentioned, they told me Version 6.0.125 is fully compatible with Windows 98se. They advised me to fully remove version 5. before installing. (I haven't installed it yet.)
Sincerely, Nancee
Well I just read a post in another forum where an install of 6.0 on three occasions was not successful. If you uninstall 5.4 suggest you keep the installation file for 5.4 cause you may wanna reinstall it. And me, Marti, Allyn and several others have had bad experiences with 6.0 & W98SE...but others have not had any problem with 6.0 so you might wanna give it a try.
Psst...don't tell Big John but the post was in PCQ&A forum if you want to quietly look at it!:D: :p
Autodownloads can be disabled by going into the Vet engine, click on Signature Update Options and uncheck enable automatic download at the top of the dialog box.
Hi LeBoule,
I read that thread. I did download Version 6.0.125 but I think I'll just stick with 5.4 as long as it's supported. I've never had a problem with it.
Hi Nighthawk,
Thanks for your reply. I'll keep that in mind if I ever install Version 6 - right now I have cold feet.
Sincerely, Nancee
Hey nancee. might consider surfin guard from finjan software. I'm currently running the beta and quite impressed. As you know I'm surrounded by a mote of aligators and crocks that nobody can get me including the good cookies.
But I've run in alone and it works very well but I keep pccilin up too plus a cookie muncher once in awhile.
if you have an open network you're guns for all kinds of it? run through a couple of channels and this is pretty cool.
<[email protected]>
mach
Hi Mach!
It's nice hearing from you! :) I appreciate your advice and I wrote it down, but right now I'm happy with EZTrust, just don't know if I should try the new version. I'm on a dial up, so that's less of a worry.
Take care.
Sincerely, Nancy
Hi Nancee,,I'm on cable,but i'm stickin' with the old version of eTrust. Think it was updated more for XP than my present Win98FE. The 5.4 version works just fine for me. If i ever(not likely for quite awhile:p )decide to install XP,,maybe then i'll try the new one,but that will be a'ways down the road...:rolleyes:
Hi Ridge!
I appreciate your thoughts on this. I've never had a problem with Version 5.4, so I'm with you "if it ain't broke, don't fix it". :) I just hope they continue to support it.
Sincerely, Nancee
I've been using 6.0 for the last couple of months. I haven't experienced any problems.