PDA

View Full Version : Symantec updates


ugly
December 28th, 2005, 12:52 PM
Symantec is adding only one-two new definitions every day !!!!
In those condition hourly updates (like kaspersky) will be a nonsense !
But ,with a small database , compared with others they still recive very good results on comparative tests (among the best).
Can anyone explain this ?

ugly
December 28th, 2005, 03:27 PM
Nothing ????

Randy_Bell
December 28th, 2005, 03:32 PM
Hello ugly,

Symantec uses some "generic" names such as Backdoor.Trojan, IRC.Trojan, Trojan Horse, Construction Kit, etc. There may be, for example, ten thousand signatures mapped to one name such as the Backdoor.Trojan. Thus there is no way to tell how many distinct signatures that exist in their database. Kaspersky and other vendors assign UNIQUE names to malware so there is closer to a one-to-one correspondence between the number of signatures and the number of names. All that you can "see" on Symantec's list are new NAMES but there is no way to know how many new Signatures they have added from one update to the next.

Warmly, Ran

ugly
December 29th, 2005, 01:02 AM
Thank you very much !
Very usefull.
Best regards.