ESET NOD32 Antivirus

|Выводить_на_вторых_en=No |Нет_английской=No |Только_английская=No |Не_отправлять=No |Событие_повторяемое=No |В_календарь_на_главной=No |В_календарь=No |В_рекламный_календарь=No |Выделить=No |В_Рамблер=No |Ссылка_на_фотографию=Antivirus products.jpg }}

The main articles are:

• Antiviruses
• Antispam technology
• Firewall

2022: Fixing a dangerous privilege elevation vulnerability

On February 3, 2022, it was reported that the Slovak security solution manufacturer ESET released a fix for a dangerous privilege escalation vulnerability affecting many products for Windows 10 and later and Windows Server 2016 and later.

The vulnerability (CVE-2021-37852) was discovered by security researcher Michael DePlante as part of the Trend Micro Zero Day Initiative (ZDI). With its help, an attacker can elevate his privileges to NT AUTHORITY\SYSTEM (the highest privilege level in Windows) using Windows Antimalware Scan Interface (AMSI).

Source: api-service.nnov.ru

First introduced in Windows 10 Technical Preview in 2015, AMSI allows applications and services to request memory buffer scans from any antivirus product installed on the system.

According to ESET, this can only be achieved after obtaining SeImpersonatePrivilege rights, usually granted to the local administrator group and local Service account on the device to simulate a client after authorization, which should "limit the impact of the vulnerability."

However, according to the ZDI notification, attackers only need to "be able to execute code with low privileges on the target system."

The vulnerability affects the following ESET products:

• ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security, ESET Smart Security Premium версии 10.0.337.1 - 15.0.18.0;
• ESET Endpoint Antivirus for Windows и ESET Endpoint Security for Windows версии 6.6.2046.0 - 9.0.2032.4;
• ESET Server Security for Microsoft Windows Server 8.0.12003.0 и 8.0.12003.1, ESET File Security for Microsoft Windows Server версии 7.0.12014.0 - 7.3.12006.0;
• ESET Server Security for Microsoft Azure версии 7.0.12016.1002 - 7.2.12004.1000;
• ESET Security for Microsoft SharePoint Server версии 7.0.15008.0 - 8.0.15004.0;
• ESET Mail Security for IBM Domino version 7.0.14008.0 - 8.0.14004.0;
• ESET Mail Security for Microsoft Exchange Server версии 7.0.10019 - 8.0.10016.0.

^[1]

Users of ESET Server Security for Microsoft Azure are also advised to immediately upgrade ESET File Security for Microsoft Azure to the latest available version of ESET Server Security for Microsoft Windows Server.

2017

ESET NOD32 Antivirus 11

ESET NOD32 Antivirus 11 contains optimized protection technologies against all types of threats, including malware that penetrates the firmware before the OS boots.

What is included in the solution:

• Antivirus
• Antispyware
• Anti-phishing
• UEFI scanner
• Exploit Protection
• Protection against script attacks
• Protection against programs extortioners
• Control of devices
• Advanced Memory Scanning
• Game mode

ESET NOD32 Antivirus runs on any computer operating system Microsoft Windows 108.1 with//8//and 7Vista Microsoft Windows Home Server 2011 (64-bit version).

The next generation of personal products

On October 26, 2017, ESET introduced the next generation of personal antivirus products ESET NOD32. The solutions have expanded the capabilities of the Home Network Protection module, introduced the UEFI Scanner function, as well as Ransomware Protection. The products check the Wi-Fi network for vulnerabilities and protect against ciphers.

According to ESET forecasts, the share of critical vulnerabilities in popular software products will continue to grow in the future. For example, in October 2017, security researchers presented a report on vulnerabilities in the WPA2 protocol, which protects most Wi-Fi networks. Vulnerabilities affect all devices with Wi-Fi support, installing security updates can prevent a possible attack.

Home Network Protection

To ensure the security of all devices connected to home Wi-Fi, ESET has made improvements to the Home Network Protection module. Now the user will be able to check the security of connected devices - scan ports and known services on open ports, check passwords for resistance to hacking. The router is checked for firmware vulnerabilities and weak passwords. The user can also view the list of devices connected to the router to ensure that there are no strangers.

UEFI scanner

The UEFI Scanner module protects home network devices from threats that attack the computer at a deeper level - before running operating system Microsoft Windows on computers with the UEFI (Unified Extensible Firmware Interface) system interface. The scanner works in the background, user interaction is required only when a problem is detected.

Ransomware Protection

This function monitors applications and processes that try to change user files. If the program shows signs of malicious behavior, the function blocks it or prompts the user to decide on their own to block.

In addition, ESET personal products NOD32 implement useful functions that simplify their use.

Compatibility

ESET antivirus products are NOD32 compatible with most screen readers, including JAWS and NVDA, making them suitable even for visually impaired people.

Scanning

Updated products simplify the file scanning process. If the user needs to check one or more files, he can easily transfer them immediately to the program.

ESET NOD32 Smart Security

ESET security and technology features are implemented in the comprehensive ESET NOD32 Smart Security Family solution for protecting all devices and the home network.

2014: Version Update (Fall)

On August 7, 2014, ESET announced preparations for the release of a new generation of personal antivirus solutions ESET NOD32 Antivirus and ESET NOD32 Smart Security.

According to the company, the products provide a new, highest level of protection against modern cyber threats, including the most complex attacks. The new generation of ESET solutions NOD32 meets the latest trends in the information security industry based on cyber threat analytics.

"Cybercriminals are improving their methods, in their arsenal there are more and more ways to harm users. Threats become more complex, and attackers become trained and professional. The damage from malware has increased so much that basic protection mechanisms are no longer sufficient. There is a real war, and to win, the user needs modern high-tech weapons. Such a weapon will be new ESET NOD32 solutions, "said Denis Mateev, head of the Russian office of ESET

The updated ESET NOD32 products support innovative malware detection technologies that identify unknown zero-day threats and vulnerabilities in programs, documents, and browsers.

The new Botnet Protection module helps to recognize cyber attacks like Windigo, which affected tens of thousands of web servers and user devices.

On November 19, 2014, the antivirus company ESET introduced an updated generation of personal ESET products NOD32 Antivirus and ESET NOD32 Smart Security. Solutions provide the highest level of protection against modern cyber threats, including the most complex attacks.

The Botnet Protection module in the comprehensive ESET NOD32 Smart Security solution recognizes cyber attacks like Windigo, which affected up to 25,000 web servers, as well as desktops and mobile devices. The technology protects against the penetration of malicious botnet programs, prevents network attacks and spam mailings.

Exploit Protection technology has already established itself as an effective method for detecting unknown zero-day threats and vulnerabilities in popular software products. It focuses on the most common software, including web browsers, PDF editors, mail clients, Microsoft Office documents. The new generation of ESET NOD32 also protects against attacks on Java-based software, which is in the Top 10 in terms of vulnerabilities.

The updated products provide social protection options: the ESET Social Media Scanner module for Facebook and Twitter, as well as Parental Controls. The need to protect children on the network was confirmed by the ESET Russia survey, according to which almost 90% of schoolchildren regularly use the Internet. At the same time, in 53% of families, children online almost around the clock, in 22% they go online from home after school, and in 7% - on weekends. Another 4% of schoolchildren prepare lessons using the Internet. In 9% of families, the "children's" Internet is banned, and only 5% of schoolchildren refuse it voluntarily - they do not have time for network entertainment.

Within the framework of the ESET concept, NOD32 protects against both modern threats and the actions of ordinary thieves or fraudsters. The Anti-Vor module, implemented in the previous version, has proven its relevance - it was activated by 11% of users. This feature helps in the search for lost or stolen computers, monitors the location of the device and shows it on the map online.

2013: ESET NOD32 Anti-virus with anti-exploit protection and advanced memory scanning

On October 17, 2013, ESET announced the release of an update to ESET personal solutions NOD32 Antivirus.

New opportunities

• Exploit protection is a technology that blocks exploit programs, screen blockers, and ransomware that targets identity theft. Prevents attacks on web browsers, PDF editors, and other installed applications.

• Advanced Memory Scanning - Neutralizes encrypted malware that is installed on a computer hidden from the user.

• ESET Social Media Scanner is the optimal protection for a Facebook and Twitter user account. The application scans the content of the profile and detects malicious links in messages or in comments on the user's status, warns about the receipt of unwanted content.

Availability

Users of valid licenses can upgrade ESET NOD32 Smart Security to an older version.

2012: ESET NOD32 Antivirus 6

The new versions of NOD32 Antivirus and Smart Security provide high-quality real-time PC protection and can detect and neutralize threats before user systems and data are seriously harmed. The NOD32 Antivirus app is capable of resisting any modern virus. Smart Security is a complete solution that includes a powerful firewall, intrusion prevention system, anti-spam tools, tools for checking USB drives and other portable drives, virus protection tools with heuristic analysis support, and a cloud reputation service that allows you to assess the reliability of individual files.

One of the most significant improvements in new versions of products is a web service that will help the owner locate a missing or stolen device. The web interface, launched in the window of any browser, allows you to determine the current coordinates of the mobile phone on the map or study pictures from the laptop screen. Users will NOD32 be able to evaluate the Anti-Theft function only during the beta testing period, after release this mechanism will be available only in the Smart Security application.

2011: ESET NOD32 Antivirus 5

It is positioned as a simple and reliable solution for basic protection of your home computer against viruses, worms, Trojans, spyware, adware and potentially dangerous software, rootkits and phishing attacks.

Key features

• Settings protection: the ability to protect ESET settings NOD32 a password.
• HIPS: Allows the user to configure additional security rules when working with applications.
• Backup Scan - Allows you to configure backup scan settings.
• SysRescue is a component for creating a boot disk.
• Double control: notifications about the status of the operating system according to the specified criteria.
• SysInspector is a powerful tool for analyzing the operation of the operating system.
• Run-Time Scan - Online security check immediately after the operating system starts running.
• USB check: automatic scanning of the contents of the flash drive, as well as files on CD and DVD drives.
• Self-update: independently monitors the appearance of distribution updates.
• Ideal for a laptop: recognizes the type of computer and automatically switches to power saving mode.
• Game mode: when launching resource-intensive programs, the system performance remains the same.
• Timer: After the on-demand scan ends, the computer will turn off

Interface

System requirements

• Operating system Microsoft Windows - 7 , Microsoft Windows Vista, Microsoft Windows 2000, Microsoft Windows XP
• 1 GHz processor, 32-bit (x86) or 64-bit (x64), early 400 MHz, 32-bit (x86) or 64-bit (x64)
• Memory Requirements - 50MB
• Free disk space - 55 MB
• Distribution size for 32/64 bit OS - 47/51 MB 4

Test results

Antivirus Eset NOD32 version 5 defeated competing products in the performance test, taking the first line out of 20. Such data were obtained during testing by AV-Comparatives, which regularly evaluates antivirus products for various parameters. This time, experts assessed the impact of antivirus software on system performance.

The test was carried out on the Windows 7 Professional SP1 platform (64-bit). PC Mark Professional was used to evaluate the performance of antivirus solutions. Testing took place when connected to the Internet with downloading a large amount of data, which made it possible to create the most real conditions, the researchers note.

TOP-20 antiviruses about performance 

Source: AV-Comparatives, December 2011 

As a result, ESET received a maximum rating of ADVANCED +. The top five also included K7, Avast, and Symantec. F-Secure Places from the fifth to the tenth took, Avira",," and Kaspersky Anti-Virus. AVG Microsoft Sophos According to the test results, the last ten included:,,,,,, Panda Webroot EScan Qihoo McAfee, and Trend Micro G Data PC Bitdefender Tools. Trustport

The evaluation was performed on parameters such as copying files, archiving and unzipping, encoding, installing and deleting applications, launching applications and downloading files.

As TAdviser commented in the press service of Kaspersky Lab, AV-Comparatives, when summing up its own testing, does not allocate places for individual products, but separates them into separate clusters. In particular, in a synthetic test using the PC Mark 7 Professional benchmark, Kaspersky Anti-Virus 2012 was among the leaders: the result when using antivirus was only 1.1% lower than when testing a system without any antivirus solution.

"In realistic test scenarios, the Kaspersky Lab product received a maximum of 90 points, providing a minimum impact on computer performance. As a result, Kaspersky Anti-Virus 2012 received the highest Advanced + award in this test. At the same time, testing showed that products from some other manufacturers, including McAfee, BitDefender and TrendMicro, more significantly affect the performance of PCs as a whole, "the company explained.

Links

Product page on the manufacturer's website.

Notes