AVLAB Dynamic test (November 2013)

[masterbaba]

Blocking malicious URL-links: November 2013

Source

Edited December 1, 2013 by masterbaba

[pintas]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

[Gabben]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

[Nastrahl]

How could Comodo have 1% of web protection since they don't offer any ?

Also, 100% of detection sounds fishy. The source isn't understandable for me. :(

[pintas]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

Oh, right. But it does offer secure DNS, that's a pretty decent Web protection, or am i wrong?

[Nastrahl]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

Oh, right. But it does offer secure DNS, that's a pretty decent Web protection, or am i wrong?

You are probably right, but since it's not really a part of the AV program, AVLab probably didn't actually inclued it in the test.

[masterbaba]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

Oh, right. But it does offer secure DNS, that's a pretty decent Web protection, or am i wrong?

You are probably right, but since it's not really a part of the AV program, AVLab probably didn't actually inclued it in the test.

Testing Methodology

Testing is done on Windows 7 32-bit.

To test the dynamic (real-time)

1. Programs are installed with default settings.

2. Updated signature database.

3. Test checks malicious sites containing various risks.

4. In the case where anti-virus modules allow you to save the file to disk malicious, it starts.

5 Results are analyzed and recorded in the results. To test malicious links 1.Programs are installed with default settings. 2. Updated signature database. 3.Test checks malicious sites containing various risks. 4. The cases where the anti-virus modules open a malicious Web site and / or blocks possible attacks on the system. 5 Results are analyzed and recorded in the results.

Note to the test

Test lab does not test AVLab antivirus protection with thousands of files at once. In laboratory tests do on a regular basis, but on a smaller number of malicious samples studied, which receive the resource malware.pl. Cases where the user will be dealt with in a single day with thousands of viruses are almost unheard of, and therefore implemented a realistic approach to testing.

Used 40 samples per day for one antivirus program (20 for dynamic testing and 20 to check the malicious URL-links) that the situation is closer to real use.

Checking the anti-virus software so that compares the level of detection and performance in everyday life. AVLab tests focused on Polish users.

More test results for November 2013 and the procedure can be found at the laboratory AVLab (in Polish).

Edited December 1, 2013 by masterbaba

[pintas]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

Oh, right. But it does offer secure DNS, that's a pretty decent Web protection, or am i wrong?

You are probably right, but since it's not really a part of the AV program, AVLab probably didn't actually inclued it in the test.

Testing Methodology

Testing is done on Windows 7 32-bit.

To test the dynamic (real-time)

1. Programs are installed with default settings.

2. Updated signature database.

3. Test checks malicious sites containing various risks.

4. In the case where anti-virus modules allow you to save the file to disk malicious, it starts.

5 Results are analyzed and recorded in the results. To test malicious links 1.Programs are installed with default settings. 2. Updated signature database. 3.Test checks malicious sites containing various risks. 4. The cases where the anti-virus modules open a malicious Web site and / or blocks possible attacks on the system. 5 Results are analyzed and recorded in the results.

Note to the test

Test lab does not test AVLab antivirus protection with thousands of files at once. In laboratory tests do on a regular basis, but on a smaller number of malicious samples studied, which receive the resource malware.pl. Cases where the user will be dealt with in a single day with thousands of viruses are almost unheard of, and therefore implemented a realistic approach to testing.

Used 40 samples per day for one antivirus program (20 for dynamic testing and 20 to check the malicious URL-links) that the situation is closer to real use.

Checking the anti-virus software so that compares the level of detection and performance in everyday life. AVLab tests focused on Polish users.

More test results for November 2013 and the procedure can be found at the laboratory AVLab (in Polish).

Again, correct me if i'm wrong, but doesn't Comodo install DNS servers automatically? I may be wrong, but i have the idea that when you install it, the box to install DNS servers is selected by default...

[Gabben]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

Oh, right. But it does offer secure DNS, that's a pretty decent Web protection, or am i wrong?

You are probably right, but since it's not really a part of the AV program, AVLab probably didn't actually inclued it in the test.

Testing Methodology

Testing is done on Windows 7 32-bit.

To test the dynamic (real-time)

1. Programs are installed with default settings.

2. Updated signature database.

3. Test checks malicious sites containing various risks.

4. In the case where anti-virus modules allow you to save the file to disk malicious, it starts.

5 Results are analyzed and recorded in the results. To test malicious links 1.Programs are installed with default settings. 2. Updated signature database. 3.Test checks malicious sites containing various risks. 4. The cases where the anti-virus modules open a malicious Web site and / or blocks possible attacks on the system. 5 Results are analyzed and recorded in the results.

Note to the test

Test lab does not test AVLab antivirus protection with thousands of files at once. In laboratory tests do on a regular basis, but on a smaller number of malicious samples studied, which receive the resource malware.pl. Cases where the user will be dealt with in a single day with thousands of viruses are almost unheard of, and therefore implemented a realistic approach to testing.

Used 40 samples per day for one antivirus program (20 for dynamic testing and 20 to check the malicious URL-links) that the situation is closer to real use.

Checking the anti-virus software so that compares the level of detection and performance in everyday life. AVLab tests focused on Polish users.

More test results for November 2013 and the procedure can be found at the laboratory AVLab (in Polish).

Again, correct me if i'm wrong, but doesn't Comodo install DNS servers automatically? I may be wrong, but i have the idea that when you install it, the box to install DNS servers is selected by default...

Yeah but DNS is not the same as web protection. It's simple blacklisting some domains i think...

Web protection is checking real time the web page code and looks up the url in database and cloud.

[pintas]

Comodo 1% in blocking malicious URL? WTF? Something went wrong there.

Comodo has no web protection.

Oh, right. But it does offer secure DNS, that's a pretty decent Web protection, or am i wrong?

You are probably right, but since it's not really a part of the AV program, AVLab probably didn't actually inclued it in the test.

Testing Methodology

Testing is done on Windows 7 32-bit.

To test the dynamic (real-time)

1. Programs are installed with default settings.

2. Updated signature database.

3. Test checks malicious sites containing various risks.

4. In the case where anti-virus modules allow you to save the file to disk malicious, it starts.

5 Results are analyzed and recorded in the results. To test malicious links 1.Programs are installed with default settings. 2. Updated signature database. 3.Test checks malicious sites containing various risks. 4. The cases where the anti-virus modules open a malicious Web site and / or blocks possible attacks on the system. 5 Results are analyzed and recorded in the results.

Note to the test

Test lab does not test AVLab antivirus protection with thousands of files at once. In laboratory tests do on a regular basis, but on a smaller number of malicious samples studied, which receive the resource malware.pl. Cases where the user will be dealt with in a single day with thousands of viruses are almost unheard of, and therefore implemented a realistic approach to testing.

Used 40 samples per day for one antivirus program (20 for dynamic testing and 20 to check the malicious URL-links) that the situation is closer to real use.

Checking the anti-virus software so that compares the level of detection and performance in everyday life. AVLab tests focused on Polish users.

More test results for November 2013 and the procedure can be found at the laboratory AVLab (in Polish).

Again, correct me if i'm wrong, but doesn't Comodo install DNS servers automatically? I may be wrong, but i have the idea that when you install it, the box to install DNS servers is selected by default...

Yeah but DNS is not the same as web protection. It's simple blacklisting some domains i think...

Web protection is checking real time the web page code and looks up the url in database and cloud.

Yeah, i understand that, But it sure sounds like Web protection to me. The problem resides in assuming 'web protection' has a specific feature set just because they're commonly used by vendors and we get used to that. Just like Internet Security means AV + Firewall (+ etc.)

But again, yes, i understand what you're saying. :)

P.S.: I'm realy enjoying this multi-mega-quote, maybe i should stop this :D