AV Comparatives : the newest report

TheIgster · 20 Mar 2010

malexous said:

JordanJP said:

thanks more proof that ESET aka NOD32 is the best !

How did you work that out? ESET is number 9.

ESET fanboy?

polarbear · 20 Mar 2010

It seems that every test shows different results... The main thing is to use one that has a high score.. Who cares if it's 1st today and 10th tomorrow... If it does the job for you use it.. If not, move on... GL :)

TheIgster · 20 Mar 2010

The other thing to keep in mind about these tests is they are "On Demand" tests. Basically they put malware into a folder and used the AV's to scan the folder. These are NOT "prevention" tests. The tests that I posted previously on the site here were just that, "prevention" tests, which IMO are much more important.

I would personally rather have something that is better at stopping malware before it gets into my system, not necessarily detecting it after the fact by scanning. While my tests by no means had anywhere near the amount of malware AV Comparatives used, these "On Demand" tests don't tell the whole story as far as I'm concerned.

malexous · 20 Mar 2010

Which is why you should check out AV-Comparatives dynamic testing and AV-Test.org's

AV-Test.Org Releases Real-World Malware Protection Report - Security Watch

TheIgster · 20 Mar 2010

Sure, but I was talking about this test and the results from this test alone.

Johnson · 20 Mar 2010

TheIgster said:

I would personally rather have something that is better at stopping malware before it gets into my system, not necessarily detecting it after the fact by scanning. While my tests by no means had anywhere near the amount of malware AV Comparatives used, these "On Demand" tests don't tell the whole story as far as I'm concerned.

Hello TheIgster,

I generally agree.

However, there are people that work with files that are handed to them via optical/flash/drive media and in those situations scanning is very important.

whs · 20 Mar 2010

polarbear said:

It seems that every test shows different results... The main thing is to use one that has a high score.. Who cares if it's 1st today and 10th tomorrow... If it does the job for you use it.. If not, move on... GL :)

Problem is, how do you know whether it does the job well or you were just lucky because nothing attacked your system.
Until 2 days ago I was convinced that MSE did a good job. But then I caught a trojan and a browser highjacker within 2 days. Is that a good score?

**Capt.Jack Sparrow** · 20 Mar 2010

Corrine said:

The f/p report is rather telling: http://www.av-comparatives.org/image...eport25_fp.pdf

Thanks for the Link Corrine !! Interesting report !!

I gave up MSE and went to Avast. It says it found 3 or 4 Trojan not sure whether its flase alarm

- Captain

thathagat · 20 Mar 2010

whs said:

Problem is, how do you know whether it does the job well or you were just lucky because nothing attacked your system.

agreed....

But then I caught a trojan and a browser highjacker within 2 days. Is that a good score?

for browser highjacker or any other threat vector incl trojans that targets the browser or gets through the browser the best solution is Sandboxie
Sandboxie - Sandbox software for application isolation and secure Web browsing
a very good guide of using sandboxie( with mse/other av) is in these two posts
Wilders Security Forums - View Single Post - Who says MSE doesn't have heuristics??
Wilders Security Forums - View Single Post - Who says MSE doesn't have heuristics??

also mbam pro with its ip protection is an ideal compliment for any av

whs · 20 Mar 2010

Sandboxie is part of my standard arsenal. But I only use it when I go "off-topic". When I am just on the forum and similar technical sites, I did not think that the overhead was justified - especially since I can always fall back to a prior image.