Immunet Winsthe Battle For Bandwidth

[ritchie58]

I'm having what I believe is an issue dealing with having two cloud based anti-virus programs running at the same time since the introduction of ClamAV to Immunet. At startup both Panda Cloud and Immunet (ClamAV turned on) are attempting to pull definitions down from the cloud at the same time and ClamAV trying to update which is causing a slowdown for Panda and the other startup programs. Perhaps this wouldn't be an issue if I had Broadband but unfortunately for economic reasons I'm pressed to use a DSL service (about 1 MBs). I have noticed that between agent.exe and iptray.exe ,at startup, uses 9 or 10, or sometimes more, active ports through the firewall. I turned Allow Definition Updates off and that seemed to help a little. With ClamAV turned off everything loads just like it always did. I really would like to continue using the engine for the extra security. I could turn Clam off before shutdown and then turn it back on once everything loads at startup and check for updates manually I guess. Maybe it's not a Internet speed issue but perhaps a programs fighting for computer resources issue instead. Any thoughts on this?

[duncan]

Personally, I have switched clamav off. I am running Immunet-3 alongside MSE and Comodo (firewall-active protection) (as I have for quite awhile now).

 

The 3 layers of protection (immunet cloud based, MSE real time protection and Comodo active protection) are sufficient for my needs.

 

When I do a full system check, I turn on clamav, let it download any required definitions and do a full scan with immunet.

 

Also I do a full scan with MSE about once a week, and malwarebytes.

 

If I am under the impression that a virus may be onboard then I run about 6 on demand scanners (1 at a time, in the background whilst online)

 

 

[millard@immunet.com]

I'm having what I believe is an issue dealing with having two cloud based anti-virus programs running at the same time since the introduction of ClamAV to Immunet. At startup both Panda Cloud and Immunet (ClamAV turned on) are attempting to pull definitions down from the cloud at the same time and ClamAV trying to update which is causing a slowdown for Panda and the other startup programs. Perhaps this wouldn't be an issue if I had Broadband but unfortunately for economic reasons I'm pressed to use a DSL service (about 1 MBs). I have noticed that between agent.exe and iptray.exe ,at startup, uses 9 or 10, or sometimes more, active ports through the firewall. I turned Allow Definition Updates off and that seemed to help a little. With ClamAV turned off everything loads just like it always did. I really would like to continue using the engine for the extra security. I could turn Clam off before shutdown and then turn it back on once everything loads at startup and check for updates manually I guess. Maybe it's not a Internet speed issue but perhaps a programs fighting for computer resources issue instead. Any thoughts on this?

What type of connections are you seeing at start-up UDP, DNS, or TCP(HTTP)? At startup, we use freshclam ( http://linux.die.net/man/1/freshclam ) to grab signatures. That should be straight HTTP requests. UDP/DNS will be all the connections to the cloud and those are looking up file dispositions (malicious, clean, etc). I kind of wondering if we're looking up the same thing Panda is and doing double duty.

[ritchie58]

This is what I saw at startup: agent.exe [1720], 8 ports - UDP OUT iptray.exe [1472], 3 ports - TCP OUT PSANHost.exe (Panda) [1840], 4 ports - TCP OUT agent.exe is the most active process at startup with inbound and outbound data. Once all inbound and outbound data is completed for agent.exe is when everything else finishes loading.