NOD32 or KIS 2006?

[gracie123]

Hello, I've heard rumors from friends that their may be a new version of NOD32 coming out and a new version from Kaspersky called Kaspersky Internet Security 2006...

My question is, I am on a LAN with 5 other PCs on my wireless network. Would NOD32 or Kaspersky Internet Security be a better choice for trying to stay safe from malware... I also hear that KIS versions have been released for users to test so I would like to ask... would KIS features be better at eliminating malware than having NOD32?

Thanks....

Gracie

[rdsu]

Between NOD32 and KAV you always have the best protection agaisn't malware, so wait for the new versions, test them on your system, and see what it's better for your needs... ;)

[Brian N]

Your friends are right, NOD32 V3 and KIS 2k6 are being developed.

[Albinoni]

A question here. I'm using NOD32 V2.0, as I beleive that their bringing out V3.0 sometime in the near future, would I be entitled to a free upgrade to V3.0. And if so, how would this be done. Can I upgrade directly from the NOD32 control panel by clicking on the update now button or would I need to re-down load the the new version and re-install it.

[Mongol]

{QUOTE-> A question here. I'm using NOD32 V2.0, as I beleive that their bringing out V3.0 sometime in the near future, would I be entitled to a free upgrade to V3.0. And if so, how would this be done. Can I upgrade directly from the NOD32 control panel by clicking on the update now button or would I need to re-down load the the new version and re-install it. <-QUOTE}
You are always entitled to the upgrade. When it is released you can go to NOD's homepage and download it directly with your license number. Or you can wait and it will be fed out through the updater. I am impatient and always pounce on the download, new toys and all yah know...8)

[Chris12923]

{QUOTE-> My question is, I am on a LAN with 5 other PCs on my wireless network. Would NOD32 or Kaspersky Internet Security be a better choice for trying to stay safe from malware... <-QUOTE}
You are comparing an internet security suite to just an AV (I'm not sure why you would )but to answer your question of course the Suite should be the best choice. If you have more questions please feel free to post.

Thanks,

Chris

[gracie123]

Hi Chris,

I guess I'll have to wait and compare both products when they come out :)

[Kill]

I think when NOD32 ver3 comes, it will be better than KAV 2006...

[Chris12923]

Gracie,

I see you have edited you message but I will try to answer based your post before you edited it. From my personal use and what I have seen on this board and others KAV has better (more) definitions. NOD has better Hueristics. Lately NOD has really kicked it up a notch though and version 3 will likely be even better based on the way ESET has been going. It also depends on your usage I mean NOD does have 33 consecutive VBA awards. Then again if you encounter more zoo virus' than this may not matter much. Also NOD stops quite a few worms even without a definition update. I am a NOD user so I tend to think NOD is better but I am probably biased :)

Thanks,

Chris

[Don Pelotas]

Hi Gracie

Don't let yourself get confused be users posting their personal opinion about which one is best, the simple fact is that both are good choices and you should try them both to see which you like best.

Don't get caught up in statements about:VBA awards, zoo viruses, proactive defense, advanced heuristics, signatures etc.

Use Nod 3.0 when it arrives and then trial Kav or Kis 2006 and make your decision.:)

[RejZoR]

I just hope they won't change interface in NOD32 3.0 (much).
Especially not virus detected red messages with matrix like animation of characters in the background. I found it to be one of the nicest interfaces around. At least for me.

[Chris12923]

Don,

I hope you are not referring to me. If you read Gracies original question I feel I answered it unbiased in my first post of course the suite would be better.

As far as my second post this was Gracies question before he edited it.

"Well, I am more less curious if I should trust Kaspersky or NOD32 for virus updates. I've heard Kaspersky has some
features that sound good in the versions that have been released of the Suite but wondering if NOD32 or Kaspersky.. which
would be the better choice for trusting virus definitions."

I feel I answered it and then some. If you were not referring to me sorry for your time. I just don't want Gracie to think my answers were not correct. All the info I posted is correct to my knowledge.

Thanks,

Chris

[Don Pelotas]

{QUOTE-> Don,

I hope you are not referring to me. If you read Gracies original question I feel I answered it unbiased in my first post of course the suite would be better.

As far as my second post this was Gracies question before he edited it.

"Well, I am more less curious if I should trust Kaspersky or NOD32 for virus updates. I've heard Kaspersky has some
features that sound good in the versions that have been released of the Suite but wondering if NOD32 or Kaspersky.. which
would be the better choice for trusting virus definitions."

I feel I answered it and then some. If you were not referring to me sorry for your time. I just don't want Gracie to think my answers were not correct. All the info I posted is correct to my knowledge.

Thanks,

Chris <-QUOTE}
No, not at all Chris, i just had a feeling where this could be heading with the usual Nod/Kav battle.

IMO which ever you choose as a normal risk user should be based on which program you like the best, not on the other stuff, both are top AV's.

I'm sorry if it seemed like an attack on your opinion.:)

[Chris12923]

{QUOTE-> No, not at all Chris, i just had a feeling where this could be heading with the usual Nod/Kav battle.

IMO which ever you choose as a normal risk user should be based on which program you like the best, not on the other stuff, both are top AV's.

I'm sorry if it seemed like an attack on your opinion. <-QUOTE}
No problem at all. Definately I agree with you if he/she asked which is the better AV they have to try them and find out which is best for their needs. I tried to answer the specific questions asked using most factual info I could. But yeah when I first saw the post I was thinking Oh no not another which is better....

Thanks,

Chris

[YeOldeStonecat]

I'd go out on a limb and say that all antivirus brands out there have a new version coming out.

Albinoni, version 2.5 came out last winter...with some major improvements...you should upgrade your old 2.0.

[mHKm]

best protection = Process guard + kav2006 + outpost pro 3
;)

[grnic]

>> Also NOD stops quite a few worms even without a definition update
KIS has the same feature in the Proactive Defence subsystem (in addition to the base heuristics for Trojans & Backdoors).

[tazdevl]

{QUOTE-> >> Also NOD stops quite a few worms even without a definition update
KIS has the same feature in the Proactive Defence subsystem (in addition to the base heuristics for Trojans & Backdoors). <-QUOTE}

but are they as effective? ;)

[gracie123]

Hi everyone, thanks so much for all the posts (replys). I think I will test both when they come out, but so far, I am thinking Kaspersky Internet Security Suite 2006 will be the one for me.. we'll see what Eset (NOD32) offers in their new NOD32 :)

Thanks again,

Gracie

[Marcos]

NOD32 has protected its users from all recent numerous outbreaks immediately without needing to update. Hopefully someone will make a comparison of reaction times of AV vendors.

[gracie123]

Marcos,

Could you tell me any features that are coming out with the new NOD32 or is it too early to say or your not allowed to say? I understand completely if Eset is not allowed to disclose details, just wondering. :)

Thanks,

Gracie

[Marcos]

No, I can't yet. But I think it will be a nice surprise when it comes out :-)

[gracie123]

Okay Marcos, I will stay tuned to NOD32 website and this forum :)

[Firefighter]

{QUOTE-> NOD32 has protected its users from ALL recent numerous outbreaks immediately without needing to update. <-QUOTE}Never heard this before. Does the "outbreak" cover trojan like nasties too? If so, we don't need signatures anymore in NOD32! :)

Best regards,
Firefighter!

[Happy Bytes]

{QUOTE-> Does the "outbreak" cover trojan like nasties too? <-QUOTE}

What do you think what spammed TrojanDownloaders (bagle) are?
Colorized Smarties? :o

[Firefighter]

{QUOTE-> What do you think what spammed TrojanDownloaders (bagle) are?
Colorized Smarties? :o <-QUOTE}OK. Maybe this is a new False Positive then.

Best regards,
Firefighter!

[Happy Bytes]

And what has this to do with an outbreak? :o

[Firefighter]

{QUOTE-> And what has this to do with an outbreak? :o <-QUOTE}I'm just a curious to know how do you determine an outbreak. This "MulDrop" is today very commonly downloaded executable, which we can see in a few days detected by many other av:s.

Best regards,
Firefighter!

[Happy Bytes]

You should probably spend some time in basic understanding of malware before you try to educate people. How does YOUR trojan replicate itself? Does it get mass-spammed? No. Even if it's available on webservers that isn't an outbreak. Otherwise we would have daily outbreaks of spyware and dialers for instance! You have actually something TO DO before you get this! Downloading & Executing Files for instance. But if you get Malware on your machine without doing anything (a worm based on vulnerability for instance) or if every 2nd user get's a email with an infected attachment that's something different!

[RejZoR]

You can consider outbreak when there are massive numbers of same malware replicated globally in a very short timeframe. Rbots for example aren't outbreaks because they are constantly and slowly spreading among people (because of countless variants). While Beagles are usually causing outbreaks because they aren't seen for lets say month and then all the sudden we get loads of spam mails with it in mailboxes everywhere in the world.

[Firefighter]

{QUOTE-> You should probably spend some time in basic understanding of malware before you try to educate people. <-QUOTE}I think that SOME TIME isn't enough for me! ;D

After all, I just wanted an answer to this "outbreak", nothing more. The "educate" in this case was your own rendering. If someone is showing some scanning pictures, they are only informative to the case in subject.

Thanks anyway! :)

Btw, it was only because I couldn't understand that this outbreak doesn't need user intervention, maybe they have to add that too in the definition in here. In my mind, an outbreak is also that when a thousand people will get infected, when they have downloaded some infected executable and after that they were executing that too. After all, these are only issues when we are playing with words.

Best regards,
Firefighter!

[Mele20]

There is simply no doubt but that KIS is superior. I'll take a definition based AV any day over NOD32's heuristics. We also all know NOD32 is inferior to KAV when it comes to trojans. Now KIS has a process guard...we don't need Diamond CS ProcessGuard any longer. ; KIS has it all. I have never believed any AV was superior to Kaspersky even when I used NOD32 I didn't consider it to be better than Kaspersky. It's a good AV...was much better before all the stuff added to version 2 such as the unnecessary IMON HTTP scanner which slowed it down so that it is unrecognizable as NOD32.

The official KIS beta is great (except for the too tiny font in the crappy GUI). It is lacking bugs so far and the earlier betas were very buggy.

Edit: Found the part of KIS causing the style sheet to show here when I try to post! I thought the official beta wasn't doing it anymore...but that was because I had Anti-Hacker shut down.

[/I]

[fosius]

Hm, you cannot compare KIS 2006 BETA and NOD32 2.5 FINAL! You can compare KAV(final) to NOD32. KIS is still beta. How do you know that NOD32 3.0 maybe now in beta version which is not available but being developed has even better features?? ???

[SSK]

Yes you can compare KIS/KAV 2006 to NOD 2.5, BECAUSE there's no NOD beta release / feature set available.

[rdsu]

At this moment we can only compare the KAV and NOD32!

So, doesn't have any logic to say that KIS is better than NOD32...

[rdsu]

And the new version of KAV only now introduced features that NOD32 already have some time ago, like HTTP Scanner, only scan files that was modified, etc...

[POS]

Does NOD32 scan files again only if they´ve been modified, like KAV 5?

[rdsu]

{QUOTE-> Does NOD32 scan files again only if they´ve been modified, like KAV 5? <-QUOTE}
NOD32 have this, but only the new version of KAV will have it ;)

[Marcelo]

At least to me the absolute absence of solid NOD32 v.3 information is quite disturbing. We don´t know what are the planned features, we don´t have an open beta and we don´t have any release date Schedule.

At least in this point I believe Kaspersky had a better idea by releasing an open pre-beta program that at least gave us all some idea of what they are planning for their next version.

By installing it in a test machine you'll know they´re implementing a proccess/registry guard and an active internet monitor.

What is NOD implementing? They won´t even release a list of confirmed features!

I am a NOD user and, at least unitl now, plan to renew my licenses, but the lack of solid information about the next major release actually worries me.

[POS]

But KAV 5 have this too, or I´m wrong?

KAV 5 uses iStreams, and don´t need to rescan a file that have been scanned before, need only if the file have been modified...

[rdsu]

{QUOTE-> At least to me the absolute absence of solid NOD32 v.3 information is quite disturbing. We don´t know what are the planned features, we don´t have an open beta and we don´t have any release date Schedule.

At least in this point I believe Kaspersky had a better idea by releasing an open pre-beta program that at least gave us all some idea of what they are planning for their next version.

By installing it in a test machine you'll know they´re implementing a proccess/registry guard and an active internet monitor.

What is NOD implementing? They won´t even release a list of confirmed features!

I am a NOD user and, at least unitl now, plan to renew my licenses, but the lack of solid information about the next major release actually worries me. <-QUOTE}
Different ways of working ;)

Did you had some problems with the way that ESET works?
If you use NOD32, it seems that not... ;)

[....]

NOD32 3 will have a Process and a Registry protection...

[fosius]

{QUOTE-> And the new version of KAV only now introduced features that NOD32 already have some time ago, like HTTP Scanner, only scan files that was modified, etc... <-QUOTE}

I totally agree with you...

[hollywoodpc]

{QUOTE-> At this moment we can only compare the KAV and NOD32!

So, doesn't have any logic to say that KIS is better than NOD32... <-QUOTE}

Well put my friend . And this is starting to turn into a war , AGAIN . KAV is excellent . NOD is too ! And to say that KIS is superior because it detects trojans is just plain silly . NOD32 detects trojans . But , NOD is an Antivirus program . KAV tries to catch more trojans and succeeds . But , it is an unfair assesment . If you like KAV , use it . If you like NOD , use it . Either one will give the normal home user plenty of protection . No need to toss out opinions as though they are facts . Try each one and see what you like and dislike in each . Do not concern yourself with which will catch more . Again , they both provide ample protection for the home user . Either choice will be an excellent one . Choose on looks , slow downs , and so on . The protection is there . Pick one and roll on . You will be fine

[Firefighter]

{QUOTE-> Hopefully someone will make a comparison of reaction times of AV vendors. <-QUOTE}If we are talking about common new nasties detected in Jotti's or VirusTotal, the results are something else than admirable with almost any scanner. When I submitted my "MulDrop" sample on this morning to DrWeb in here,

http://support.drweb.com/sendnew/

it took only 1 h 30 min, when it was in Drweb's signatures. I scanned my sample then also in VirusTotal, but after about 11 hours, only Fortinet has added this sample to their signatures.

PS. Of course Kaspersky was able to detect this sample about four weeks ago, which else?

Best regards,
Firefighter!

[Marcelo]

{QUOTE-> Different ways of working ;)

Did you had some problems with the way that ESET works?
If you use NOD32, it seems that not... ;) <-QUOTE}


Nope, no problem at all, but november/december is when I usually start making my buying decisions for next year. I´d like to have some solid information to make my decisions ;)

[Firefighter]

{QUOTE-> Hopefully someone will make a comparison of reaction times of AV vendors. <-QUOTE}But what have happened to BitDefender now? Isn't that detection in here a heuristics one now, why not before?

Best regards,
Firefighter!

[Firecat]

{QUOTE-> How do you know that NOD32 3.0 maybe now in beta version which is not available but being developed has even better features?? <-QUOTE}

I'm 100% sure that NOD32 3.0 will have more features.....

If I hear rumours right, then within the coming year, Kaspersky *may* improve its heuristics. If this is true, then the decision is yours, and yours only to make!

[Firefighter]

{QUOTE-> Hopefully someone will make a comparison of reaction times of AV vendors. <-QUOTE}And Ikarus was a bit surprise too.

Best regards,
Firefighter!

[Firefighter]

In my mind Kaspersky has the best protection against all kind of nasties money can buy. Why I don't use KAV then? In my PC use KAV has always been more sensitive to some kind of bugs than DrWeb for instance. DrWeb has always had so low impact to my system that I can live it. Also DrWeb is very cheap commercial av and the renewing costs are low.

The "outbreak" issue is in my mind only a marketing hype. I have never been infected with so called "outbreak" nasties even though I've used plenty of different av:s during my 6 years surfing history. I have to admit that I have not used Outlook or any other Windows email solution because we have in Finland other email providers free to use Finnish in the web which are also av-protected (mainly with F-secure, but there are also AntiVir protected ones).

Those infections I've met were always common trojan like nasties, where I want good heuristics detection because lack of KAV. In my mind DrWeb has nowadays at least the first class protection concerning heuristics in this issue. I don't know how the other members here at Wilders were get infected, but it's the my case that matters.

Best regards,
Firefighter!

[RejZoR]

{QUOTE-> I'm 100% sure that NOD32 3.0 will have more features.....

If I hear rumours right, then within the coming year, Kaspersky *may* improve its heuristics. If this is true, then the decision is yours, and yours only to make! <-QUOTE}

I heard KAV2006 stopped those latest Beagles with Proactive Defense...

[fosius]

{QUOTE-> If we are talking about common new nasties detected in Jotti's or VirusTotal, the results are something else than admirable with almost any scanner. When I submitted my "MulDrop" sample on this morning to DrWeb in here,

http://support.drweb.com/sendnew/

it took only 1 h 30 min, when it was in Drweb's signatures. I scanned my sample then also in VirusTotal, but after about 11 hours, only Fortinet has added this sample to their signatures.

PS. Of course Kaspersky was able to detect this sample about four weeks ago, which else?
<-QUOTE}

So what do you say about this one? Never submitted and only NOD32 picked it up... don't show only cases when KAV succeed and NOD32 failed...

[Firefighter]

{QUOTE-> So what do you say about this one? Never submitted and only NOD32 picked it up... don't show only cases when KAV succeed and NOD32 failed... <-QUOTE}Propably you didn't read the quote in that post you was writing about. I meant to show only the reaction time against those common trojanlike nasties scanned in Jotti's and VT. That Kaspersky example was only there because it's true that they are the quickiest to add all kind of signatures overall.

Btw, does anybody know if BitDefender has done some changes to the heuristics engine lately just because of my scanning results?

Best regards,
Firefighter!

[Marcos]

Well, maybe you think that adding several thousands signatures incoming every day is a doddle. I wouldn't be surprised if the file dropped would be picked up by NOD32. In my opinion, it's much more important to detect dropped files rather than the dropper itself.

I'm enclosing another example which is not a dropper but a trojan itself. It's detected only by 3 AVs, including NOD32.

Please remember that signatures are picked up on a per-need basis which means not everything is added immediately. It's a matter of fact that no AV will detect every malicious file. However, some of them pose bigger threats than the others (e.g. trojans vs droppers).

[Firefighter]

{QUOTE-> Hopefully someone will make a comparison of reaction times of AV vendors. <-QUOTE}Just now this race is going to even more strange direction. Look at QuickHeal now.

Best regards,
Firefighter!

[Firecat]

{QUOTE-> I heard KAV2006 stopped those latest Beagles with Proactive Defense... <-QUOTE}
I heard that KAV may improve its file heuristics (not the proactive defense) in the coming year. :)

[Tooltimetim]

I would say that both are very good antivirus's. But because Kaspersky I believe probably has more signatures in it, its more likely to find an old virus or kind of malware than to rely on advanced heuristics which NOD32 has which is a 50/50 chance on catching anything. Advanced heuristics are helpful yes... but not as helpful as signatures + quickness in responding to new threats.

Does anyone agree?

[The Hammer]

{QUOTE-> I would say that both are very good antivirus's. But because Kaspersky I believe probably has more signatures in it, its more likely to find an old virus or kind of malware than to rely on advanced heuristics which NOD32 has which is a 50/50 chance on catching anything. Advanced heuristics are helpful yes... but not as helpful as signatures + quickness in responding to new threats.

Does anyone agree? <-QUOTE}No I don't agree. I think heuristics would be based on previously seen behaviour and would be just as likely catch something that has not been seen for eons before a updated signature could be introduced.

[Firefighter]

{QUOTE-> Hopefully someone will make a comparison of reaction times of AV vendors. <-QUOTE}And now even one more av capable to detect this. But AntiVir seemed to change the name of this nasty.

Best regards,
Firefighter!

[Firefighter]

{QUOTE-> Hopefully someone will make a comparison of reaction times of AV vendors. <-QUOTE}I'll hope this helps a bit. After 13 days I've submitted this sample to certain av-vendor, it was capable to detect this on 17:th November 2005. Unfortunately I've got any feedback of that infection yet from that av-vendor.

PS. I didn't submit this sample to McAfee, but it was able to detect this one day later than the one av mentioned above.

Best regards,
Firefighter!