Jump to content

Security suites 2008 under test (Q1/2008)


Zeus_Hunt

Recommended Posts

av-test-org-q1-2008-chart.png

Indie antivirus testing organization AV-Test.org has released its quarterly comparison test of 28 antivirus products, and the results show that one thing's for sure: Few are good at sniffing out rootkits.

There were no big surprises when it came to how the products performed in standard signature detection, generating false positives, proactive detection, and their response time to malware attacks. "Products which performed well last time did perform well this time, too -- the changes are usually plus or minus three percent or so at the maximum," says Andreas Marx, CEO and managing director for the Germany-based AV-Test.org.

But many of the products didn't perform as well when it came to detecting active rootkits on systems. "Many products still have quite some problems here," Marx says. "Active rootkits are very tricky to detect. Without special detection routines, a scanner might report that a system is clean even if it's indeed infected and might be part of a botnet already."

F-Secure, Panda, Symantec, and Trend Micro were the only AV packages that detected all 12 active rootkits in the test, and AntiVir, Avast, AVG, BitDefender, Dr Web, eTrust-VET, Kaspersky, McAfee, Nod32, and Sophos caught all but one rootkit. Microsoft missed two rootkits.

The worst performers: ClamAV, Command, and K7 Computing, which missed three or more of the 12 rootkits.

Symantec performed well in most categories, with 98 percent or more in successful signature detection and zero false positives, but earned only a "satisfactory" rating for its four- to six-hour response time for widespread malware outbreaks. McAfee had a 90 percent or more success rate in signature detection, zero false positives, and a six- to eight-hour response time for widespread malware outbreaks. Both McAfee and Symantec scored in the "good" range for proactive detection.

Microsoft fared the same as McAfee in signature detection (90 percent or more) and generated no false positives. But Microsoft received a "poor" grade in proactive detection, and a "very poor" in its over eight-hour response time in widespread malware outbreaks.

Meanwhile, the number of MD5-unique malware samples received by AV-Test.org has increased dramatically -- from 972,000 in 2006 to 5,490,000 in 2007. Marx says the good news is that AV vendors are now more frequently updating signatures to keep up with the barrage of new malware.

Those numbers have a lot to do with the increasing number of variants for Trojans and other malware samples, notes Alex Eckelberry, president and CEO of Sunbelt Software. "There are many [samples] that are variants of the same piece of malware," he says.

The test categories

Original Site : AV-Test.org

Link to comment
Share on other sites


  • Replies 20
  • Views 5.8k
  • Created
  • Last Reply
so r u saying norton is good, i don't beleive this !!!!!!

Agreed!, though the biggest downside of norton is that it slows any setup down-1; and is itself like a virus- imossible to remove thoroughly all of the components-2; the test from test ar'nt equal and real deal- uknown viruses that really mater at the end of a day-3

Link to comment
Share on other sites


i have see a test , from a french guy, somewhere (branchez-vous or cyberpresse i think) that test many software, saying that norton, with his 2006 and 2007 edition, was going in the right direction, was faster and less intrusive, taking less system ressources. BUT, testing the 2008 suite, he say to stay clear! the 2008 version slow down XP and Vista, more than ever. and the best way to uninstall it completly is...to format, and do a new system install...

Proactive detection rate(unknown virus) is what is more important, in an antivirus, and NOD32 is the best there.

and it doesn't slow down the system.

i stay with NOD32...

Link to comment
Share on other sites


All the NOD32 hype lol... Looks who laughing now x]

Eset just missed one... And i don't really trust this test, since symantec has a top spot... But hey, everyone is free to choose whatever antivirus he likes so don't make fun of people for having one or another. It's just like laughing at people that wear different clothes than you do, inappropriate and childish.

I know, (some of the)people that use(d) Nod32 have done the same thing but don't you think one side has to grow up?

Link to comment
Share on other sites


All the NOD32 hype lol... Looks who laughing now x]

did it ever come to mind that these are the results they want you to see ?

cos this is a very good way to make people into buying their stuff ??¿¿

Link to comment
Share on other sites


So this isn't security suite test, it's an AV test.. Would've been more interesting to see what they say about ESS overall..

Link to comment
Share on other sites


All the NOD32 hype lol... Looks who laughing now x]

did it ever come to mind that these are the results they want you to see ?

cos this is a very good way to make people into buying their stuff ??¿¿

Very true we dont know... ;)

Link to comment
Share on other sites


einstürzende

I must say that this is too sloppy test, look at "Wilders Security Forums" you will find out why is "av-comparatives.org" way too reliable set of tests than this "fable"...

Link to comment
Share on other sites


I must say that this is too sloppy test, look at "Wilders Security Forums" you will find out why is av-comparatives.org way too reliable set of tests than this "fable"...

yeah thats true gotta look in places where it is know.. and also im trippin out on your picture its a trip lol but funny :) i seen it before but i dint say nohting :P 82000uq1.jpg

Link to comment
Share on other sites


einstürzende
I must say that this is too sloppy test, look at "Wilders Security Forums" you will find out why is av-comparatives.org way too reliable set of tests than this "fable"...

yeah thats true gotta look in places where it is know.. and also im trippin out on your picture its a trip lol but funny :) i seen it before but i dint say nohting :P 82000uq1.jpg

Off topic, I recommend Einsturzende Neubauten for listening, do not ask me where to find it...

Link to comment
Share on other sites


einstürzende
i dint not ask what it was, its just a side comment... in a way a complement :) lol

It is something that is way too much out of english-american "calibre"...

Link to comment
Share on other sites


i have see a test , from a french guy, somewhere (branchez-vous or cyberpresse i think) that test many software, saying that norton, with his 2006 and 2007 edition, was going in the right direction, was faster and less intrusive, taking less system ressources. BUT, testing the 2008 suite, he say to stay clear! the 2008 version slow down XP and Vista, more than ever. and the best way to uninstall it completly is...to format, and do a new system install...

Proactive detection rate(unknown virus) is what is more important, in an antivirus, and NOD32 is the best there.

and it doesn't slow down the system.

i stay with NOD32...

Nod 32 (new build) seems to be the most accurate and reliable , and certainly the best when it comes to CPU usage it really is miles ahead of the rest :rofl:.

Link to comment
Share on other sites


All the NOD32 hype lol... Looks who laughing now x]

did it ever come to mind that these are the results they want you to see ?

cos this is a very good way to make people into buying their stuff ??¿¿

yeap.

in iraq nod32 found the viruses and other crap as soon as they connected their external sticks, harddrives, ipod to my computer. stopping them before getting to my system. norton, mc and others that where on their own computers never caught them.

Link to comment
Share on other sites


i think the best software is us, because we are the ones who try and test them and we see the results, we don't need any survey to tell us anything :) Nod is the bomb interms of detection and usage of memory until i get hit with a worm or virus which it did not detect that's when u start questioning ur software

Link to comment
Share on other sites


All the NOD32 hype lol... Looks who laughing now x]

did it ever come to mind that these are the results they want you to see ?

cos this is a very good way to make people into buying their stuff ??¿¿

yeap.

in iraq nod32 found the viruses and other crap as soon as they connected their external sticks, harddrives, ipod to my computer. stopping them before getting to my system. norton, mc and others that where on their own computers never caught them.

lol funny you say that, I "introduced" Nod to a bunch of Iraqi Army buddies in Anbar. They were having such a hard time with viruses, think of a group of people taken from the early 1980's and then put in today's cyberculture. They were so naive. I couldn't believe how much crap they picked up off the Internet.

Not that the guys in my Battalion were a whole lot better. If I had a day off, I usually had 8-9 computers in my room that I would be working on for people. Viruses were the biggest problem. Everyone used Norton or Mcafee, neither of which could do the deed. The guys were also pretty happy when they found out that their computer ran a whole lot faster with Nod NOT using up all their resources. Every year I try and see if I still like Nod the best, low resources, I can still get to the advanced menu tree, good find rate... Yep, Ill keep it for another year :)

Link to comment
Share on other sites


As long as NOD/ESS won't use too much resources they are keepers, especially when they excel @ every other aspect too..

Link to comment
Share on other sites


All the NOD32 hype lol... Looks who laughing now x]

Eset just missed one... And i don't really trust this test, since symantec has a top spot... But hey, everyone is free to choose whatever antivirus he likes so don't make fun of people for having one or another. It's just like laughing at people that wear different clothes than you do, inappropriate and childish.

I know, (some of the)people that use(d) Nod32 have done the same thing but don't you think one side has to grow up?

I'm just saying that with all the hype around NOD32 in this forum and then for this data to come out and raise a little doubt is funny :) Dont take it personally! Its like you are trying to defend yourself when there is no one attacking ^^

Link to comment
Share on other sites


Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...