Microsoft Security Essentials last in banking trojan detection test

[A Guy]

Microsoft Security Essentials is amongst the most popular Windows virus scanners but scores low on detection of malware that tries to steal money from bank accounts, according to security researchers from MRG Effitas. They tested Security Essentials with 300 banking trojans that were found “in the wild”.

Source

A Guy

 

[RoasterMen]

How come? Oh I know! They are busy keeping their heads up on Windows 10 rather than the security of their customers.

 

[4wd]

The design of the graph (when just having a quick glance) makes it look much worse than it really is. 87,3 % ain't that bad for a free AV, one gets much more than one has paid for :O) The rest of the 'red ones' are in the 95 to 99 % range, very good IMO.

 

[Wordsworth]

As 4wd said, the chart does skew the look of the results since it starts at 80%, rather than the usual 0%; but the interest is in the last 20% to show just how much the malware detection software differ in failing to detect a percentage of the three-hundred samples, and MSE failed with thirty-eight of the three-hundred. Still, the take should still be that if are going to do online banking, you need to take other security measures besides an anti-virus or malware program as even Kaspersky succeeded here with these three-hundred samples, but what about three-hundred and one? It will only take one getting through to empty your bank account.

I use MSE, other anti-malware products, light virtualization, and an engaged mind while on the Net and if all that fails I'll restore from backup, and where online banking is concerned, I don't.

 

[Phone Man]

For those that want the actual tests and reports here is the link.
Not for light reading on a rainy day.

https://www.mrg-effitas.com/mrg-eff...owser-security-certification-project-q4-2014/

Jim

 

[whs]

Kaspersky has always been the champ in finding trojans. But it is not easy to deal with it. MSE is easy but it never finds anything. I still use it, LOL, but I do most of my internet work from a virtual Linux system.

 

[Lady Fitzgerald]

Repeatedly we see reports of professionally conducted tests that puts MSE at or very near the bottom of rankings with anti-virus programs and yet there are a large number of geeks, people who should know better, who stubbornly cling to MSE, often vehemently justifying their action by saying they use other malware programs with it. Why use a proven inferior AV when there are other free AVs that are much better and still do not slow down one's computer? Yes, multiple layers of protection are better than just one but why not have the best on each layer? Sure, no amount of protection will stop everything but why not try to minimize the amount that does get through?

Another pet peeve of mine are the people who claim they do not use AVs and other antimalware programs and have never gotten a virus. Without those programs to detect the presence of a virus, how do they know they have one? Gone are the days when all viruses blatantly announced their presence or slowed down computers. With the obvious exception of the few that blatantly hijack or lock your browser or computer, most now are very stealthy, quietly doing their damage behind the scenes.

Then there are the ones who feel they are safe because the employ safe browsing habits, apparently blissfully unaware that just connecting a computer to the internet exposes them to infection.

Another misconception that one can keep their bank accounts safe by not using internet banking. That concept would be better used for keeping grass green. Banks are already connected to the internet. Every time use a debit or credit card, the transaction is transmitted over the internet. Even if a vendor manually accepts plastic, that information will hit the internet once it gets turned in to the vendor's bank. Even if one spent cash only and never used checks or plastic, money setting in a bank account can still be accessed by hackers. The ONLY way to protect one's bank accounts from being hacked is to not have any, using only cash only and hiding your money somewhere. Never mind someone might find that money, that some disaster, such as fire, could destroy it, and that you will never earn any interest on it, you won't have to worry about a hacker getting it.

Some people think using a different OS than Windows will make the internet safer. It will...for a while. Once enough people start doing that, hackers will realize what a rich treasure trove that is and will start hacking through it. It's been happening to MACs for some time now yet many MAC users still think they are safe, it won't be long before the popular flavors of Linux will be getting hit on a regular basis.

 

[whs]

You may be painting a doomsday scenario. I think we all know that MSE is not the brightest star in the AV world, but it is convenient because it is there by default. I actually like NIS the best and still have 3 unused licenses sitting on the shelf.

But my best protection are my frequent images. I trust that strategy more than any AV. And for my virtual Linux systems I just make a copy of the VMware Player folder. Since I only use Linux for the internet, I need not update those backups too often. Only after major Linux updates.

 

[Lady Fitzgerald]

You may be painting a doomsday scenario. I think we all know that MSE is not the brightest star in the AV world, but it is convenient because it is there by default. I actually like NIS the best and still have 3 unused licenses sitting on the shelf.

But my best protection are my frequent images. I trust that strategy more than any AV. And for my virtual Linux systems I just make a copy of the VMware Player folder. Since I only use Linux for the internet, I need not update those backups too often. Only after major Linux updates.

I also use frequent images. I agree that restoring to an earlier image is the easiest, and sometimes the only, way to get rid of a virus. However, one has to know if one has a virus to before knowing the need to get rid of it and, nowadays, most viruses can't be detected without a good AV or other anti-malware program.

Linux is the safest OS for web surfing but, same as OSx, it will be getting viruses and other malware someday.

 

[whs]

There are Linux AV options too. At least those have a Linux version:

Avast
Bit Defender
ClamAV
AVG

I guess ClamAV is the classic in Linux. There are others like Commodo, but those I would rather not use.

 

[Wordsworth]

LF, I have from time to time thought of purchasing Kaspersky to replace MSE. Problem is, I'm fairly well convinced that anti-virus and malware programs are good business for the companies selling them, but probably not so effective at really protecting you anyway. LOL, my father and I go back and forth since he is a Mac and I a PC but when he jokes that the PC anti-virus companies probably have a back-office with virus coders making all this malware I laugh but sometimes wonder, but also keep him in mind that malware for other platforms will increase. But that is why since the Net is getting more and more hostile and I don't expect the malware companies can keep up, I really rely upon virtualization, though not perfect either, having a backup, and my own common sense. At least the last two are something I can control.

As for banking, I stay away from ATMs and go inside my bank to do business.

 

[Lady Fitzgerald]

LF, I have from time to time thought of purchasing Kaspersky to replace MSE. Problem is, I'm fairly well convinced that anti-virus and malware programs are good business for the companies selling them, but probably not so effective at really protecting you anyway. LOL, my father and I go back and forth since he is a Mac and I a PC but when he jokes that the PC anti-virus companies probably have a back-office with virus coders making all this malware I laugh but sometimes wonder, but also keep him in mind that malware for other platforms will increase. But that is why since the Net is getting more and more hostile and I don't expect the malware companies can keep up, I really rely upon virtualization, though not perfect either, having a backup, and my own common sense. At least the last two are something I can control.

As for banking, I stay away from ATMs and go inside my bank to do business.

True, AV companies can't keep up but the AVs are still better than nothing. The better AVs do more than just react to known viruses, they also watch for processes that behave suspiciously.

I also never use ATMs. I rarely use cash and when I do need some, I just use cash back at checkout when buying something. I do most of my "banking" (I use a credit union) online and have never had a problem with it. The credit union's website uses two factor authentication, making it much more difficult for a hacker to get in. I also don't access it anywhere other than home except, rarely, another trusted connection, such as at the home of a friend I know has a secure network. I never go there from a hotel or motel Wi-Fi.

 

[ignatzatsonic]

What are the prime candidates that are NOT free, but DON'T have a subscription model (annual or periodic fee after original purchase)?

A quick look at Newegg doesn't turn up much, at least of the "Internet Security" types.

Cable TV being what it is, I strongly resist the idea of continued payments.

I waded through the Newegg reviews and no one stated what the annual subscription renewal fee is for the likes of Kaspersky. Anybody know? Several people said they don't bother, they just buy another version when on sale for a considerable discount.

Looks like you can get Kaspersky Internet Security through today for $20, a "major discount", but for all I know that's a common net price.

I'm itching to buy something while I suffer waiting for Skylake processors and new hardware.

 

[Wordsworth]

LF, I have from time to time thought of purchasing Kaspersky to replace MSE. Problem is, I'm fairly well convinced that anti-virus and malware programs are good business for the companies selling them, but probably not so effective at really protecting you anyway. LOL, my father and I go back and forth since he is a Mac and I a PC but when he jokes that the PC anti-virus companies probably have a back-office with virus coders making all this malware I laugh but sometimes wonder, but also keep him in mind that malware for other platforms will increase. But that is why since the Net is getting more and more hostile and I don't expect the malware companies can keep up, I really rely upon virtualization, though not perfect either, having a backup, and my own common sense. At least the last two are something I can control.

As for banking, I stay away from ATMs and go inside my bank to do business.

True, AV companies can't keep up but the AVs are still better than nothing. The better AVs do more than just react to known viruses, they also watch for processes that behave suspiciously.

I also never use ATMs. I rarely use cash and when I do need some, I just use cash back at checkout when buying something. I do most of my "banking" (I use a credit union) online and have never had a problem with it. The credit union's website uses two factor authentication, making it much more difficult for a hacker to get in. I also don't access it anywhere other than home except, rarely, another trusted connection, such as at the home of a friend I know has a secure network. I never go there from a hotel or motel Wi-Fi.

LF, suspicious behavior is principally why I've bought Malwarebytes Anti-Exploit, in addition to MBAM. While I have a lifetime license for MBAM, they only offer annual for the premium version of MBAE and I don't like companies' auto-resubscribing crap as I've found in some cases that it's a hassle to shut-down. But in this case I went ahead and bit the bullet. I've been infected twice, once in 1995 from a floppy from work, and two years ago from the Net, so if I remain clean I'll probably remain with what I've got. If not....

Sometimes after reading of yet more crap occuring out there with these damned hackers I feel like going Brill, the character Gene Hackman played in Enemy of the State. Just go off the grid.

 

[Layback Bear]

Here we go again. Some one found another test of anti virus programs.

I use to buy 3 or 4 different anti virus programs a year trying to keep up with the latest surveys and test.
What a waist of money. I couldn't keep up with the reported latest and greatest. Either they wouldn't work well with Windows or they would make me jump through hoop just do normal things on my computers.

If one wants to do 3 or 4 redundant backups on 3 or 4 different externals go for it. I choose not to.

Things we know if you have been on this forum for more that a week.

1. Lady Fitzgerald does not like MSE and does many many backups.

2. Whs tries many anti virus programs and uses virtual Linux systems along with images.

3. I (Layback Bear) use MSE and Malwarebytes Premium and do one image every now and then.

What you can be sure of concerning my choices is that it works for me and I have tried many.
I do not use online banking.
I do not use ATM's
I do not plug phones into my computers because it my opinion that is one of the best ways of getting infected.
Most phones do not have enough protection and are willing to share their infection with your computer.

To me it boils down to choosing the programs and methods that suite your needs and desires.
That is where the problems lay. Most users don't even think about security.
We post back and forth our methods and programs we select but we are only a few out of Billions of internet users who just don't know or care about security.

Example:

For decades people have been warned about opening questionable emails but to this day they still do.
We all could all make a large list of things not to do but the masses don't seem to care.
That is what the crooks depend on and with the Billions that don't use security methods of some kind. The crooks are winning.

This is one of many showing banking problems. Yes their is many crooks figuring out how to steal from us.

http://www.sevenforums.com/security...rget-nearly-1-500-financial-institutions.html

 

[RoasterMen]

Avast Free version is good enough for me. I have tried other anti-malware programs but I don't trust them (MSE puts my f**kin computer on risk and the others just grasps up my 2GB of ram which is annoying.)

 

[TheDeerDude]

I used to use Avast about 2 years ago, but since they removed its useful functionality and turned it into a huge ugly advert, I gave up on it. I also tried AVG on several computers, not only was is slow but it kept changing the default search engines - unacceptable. There was Norton 360, too. Never again.

For a while I've been using MSE and MBAM Pro, those two seem to work well for now. Not to mention common sense, which somebody's signature mentions as "not so common".

 

[maxseven]

Regarding MSE, you said:

Why use a proven inferior AV when there are other free AVs that are much better and still do not slow down one's computer?

You used the acronym AVs (plural) yet in looking at your posts to-date I see you apparently use Avast Free and have mentioned no others. So what are all the "other free AVs that are much better" please.

I have on a couple of my computers Comodo Internet Security (it's free) and on others MSE, having paid for ZoneAlarm a few years back and found it to be awful. CIS 8 works real well except when it doesn't (blocks program operations and is hard to know why and fix it).

 

[Bertison]

AV requirements may vary across borders, but some years ago, after my PC was attacked via a disc from my then 11 year old g'son, I went through a dark night of cleaning my systems. I scrubbed with Mbam, Adware Cleaner and Hitman Pro, then installed AVG Pro and was again attacked, as AVG just allowed in more garbage. This time I carried out a complete reinstall using tutorials here, then I researched programmes. Eventually I settled for a combination of Bitdefender Total security, Mbam Pro and Windows Defender, none of which cause conflicts. Later I installed Mwb Anti-Exploit.

This combination keeps my machine protected and I also install all of these on family machines: I have just upgraded to Bitdefender TS 2015 on 3 PC's. However, I don't just leave it at that, I also take precautions to upgrade regularly and carry out Win7 Updates. I believe that the user has to keep an eye on his own hardware and take care with downloads, not just leave it to the AV software. I do make regular backups to my NAS and I also back up that to an external drive. Everything is set to delete last backup, after installing another. I am not paranoid, I just want to make sure that we can carry on using the family computers without the kind of hassle that I once had to endure. Not happening again, thank you!

I will not listen listen to any more 'experts' telling me that I can do without paid programmes and survive unmolested, we have a relevant quote in the UK -"It don't work like that!"

 

[lehnerus2000]

As for banking, I stay away from ATMs and go inside my bank to do business.

Here in Australia, Banks charge "over the counter" fees if you dare to enter the premises.

I used to use Avast about 2 years ago, but since they removed its useful functionality and turned it into a huge ugly advert, I gave up on it. I also tried AVG on several computers, not only was is slow but it kept changing the default search engines - unacceptable. There was Norton 360, too. Never again.

I have Avast installed on my physical PC.
It seems to work OK, but the pop-ups are annoying.

Every so often I run MBAM scans just to double check.

I have AVG installed in my VMs and it seems to work OK too.