Ikarus Antivirus

[Ghostcloak]

Anyone Tried Ikarus here.???
I tried it but did not like it, it is haeavy on cpu & memory usage.>:(

[jlo]

And just wondered if the site translated in to English? On VirusTotal seems very strong detection.

Cheers

Jlo

[trjam]

Detection can work one of two ways.

[Ghostcloak]

{QUOTE-> And just wondered if the site translated in to English? On VirusTotal seems very strong detection.

Cheers

Jlo <-QUOTE}

Its easy just search in google & translate this link
http://www.ikarus.at/

[Blackcat]

{QUOTE-> Anyone Tried Ikarus here.???
I tried it but did not like it, it is haeavy on cpu & memory usage.>:( <-QUOTE}
I tried the new version for about a month in the summer.

It ran very light here, hardly any effect on system performance. Although not as light as the previous version. Recent detection rates on a number of sites seem very impressive.

[Bob D]

At >$60 for customers on this side of the pond (due to the currently weak dollar), it ain't no bargain.

[jlo]

Does anyone know if they use their own in house AV engine or do they use multiengine aprouch like G Data?

Cheers

Jlo

[IBK]

in house.

[C.S.J]

if memory serves me right, there is something not qute right with this antivirus

[jlo]

{QUOTE-> in house. <-QUOTE}

Thanks

Jlo

[Ghostcloak]

{QUOTE-> if memory serves me right, there is something not qute right with this antivirus <-QUOTE}

What is something wrong with Ikarus???? I heard it uses many signature database from many av companies like kaspesky, I dont know the other companies. Maybe someone here know the other av companies.:lurking:

[C.S.J]

I don't know, but I remember ibk mentioning something many moons ago about this particular antivirus, although he kept his mouth shut and rightly so, it left a bitter taste in my mouth

[trjam]

The way I see it is, if it hasnt been spoken about here in the last 2 years on a reguarly basis, be it good or bad, then like Chris said, that should tell you something right off the bat.:thumbd:

[C.S.J]

{QUOTE-> The way I see it is, if it hasnt been spoken about here in the last 2 years on a reguarly basis, be it good or bad, then like Chris said, that should tell you something right off the bat.:thumbd: <-QUOTE}
lol, thats not what i said.

nice try though ;)

[trjam]

I have watched it at jottis for a few weeks now and it will sometimes be the only AV that finds something. Now that either means it is damn good, or it is like Webwasher and detects everything, including the stuff that should not be detected. I think it is good, but loaded with FPs. And I mean loaded.

[C.S.J]

jeff, why will IBK not test it? (unless im wrong, or something has changed)

an answer we will probably not find out.

[trjam]

I think that is his choice and that is fine by me. Heck, he is already testing a ton of stuff now.;) I have the utmost respect for him and that is all that needs to be said.

[C.S.J]

there is a reason, but i rememeber IBK saying it would be disrespectfull to the AV company if he shared his views to the public.

or something like that, either way... something sounds fishy to me regarding this particular AV.

[trjam]

A individuals privacy should always be respected. Anyway, more will be learned about this product over the next year.

[likuidkewl]

Maybe IBK is afraid of reprisals since he is in Austria! HA!

I tried it for a bit too and liked it, although the interface left much to be desired it was a free trial for 6 months or so I posted a while back, although it is expired now.

It looks promising. I cannot base my opinion of the software on another's reasoning, I just hope they are not doing what another Asian AV did in regards to signatures.

[bellgamin]

Search the web. I did -- LOTS of reports on Ikarus. None of them negative as to ethics, honesty, etc.

No one should have the power to harm someone's business strictly by innuendo -- without offering any facts. Doing that sort of thing borders on McCarthyism -- somewhat on a par with asking: "Have you stopped beating your wife yet?"

If someone has specifics, then let's see them. Otherwise, it equates to something like a FUD attack against the livelihood of the Ikarus folks. :ouch:

Blackcat's review is what I shall go by, plus the pcwelt test reports. To wit -- Ikarus looks to be a good AV ( but it's waaaay out of my price range).

[C.S.J]

of course BELL,

it should always be user-preferance.

trials are fun ;)

[bellgamin]

{QUOTE-> it should always be user-preferance.

trials are fun <-QUOTE}Hola Chris. Tu tu tru whatcha said, mon. 8)

[C.S.J]

{QUOTE-> Hola Chris. Tu tu tru whatcha said, mon. 8) <-QUOTE}
i do say the right things, ....

.... sometimes :D

happy birthday! ;D

77 and still worried for the internet viruses? :)

[trjam]

Happy Birthday BG.:thumb:

[lucas1985]

It seems to me that Ikarus does very few sample analysis. It seems to add signatures if they are detected by someone else. Maybe this is what IBK didn't like.
Happy birthday bellgamin :)

[ellison64]

{QUOTE-> I have watched it at jottis for a few weeks now and it will sometimes be the only AV that finds something. Now that either means it is damn good, or it is like Webwasher and detects everything, including the stuff that should not be detected. I think it is good, but loaded with FPs. And I mean loaded. <-QUOTE}

Just thought id try this av,and it seems there is a few false positives.It flagged startup delayer ,and process lass ,as malware ::)
That said it has a nice simple interface ,no slowdown,and the popups are not intrusive either.I know that any av can get FPs but im always wary when it flags common applications.
ellison

[jlo]

Thanks for giving it a try. Nice to see a screen shot! I emailed there support. Virus samples should be sent to samples@ikarus.at and false positives should be sent to false-positive@ikarus.at

Cheers

Jlo

[C.S.J]

@ jlo

Av Screenshots Thead (http://www.wilderssecurity.com/showthread.php?t=179976)

Ikarus (http://www.wilderssecurity.com/showpost.php?p=1041290)

[Ikarus_bpaar]

Hi all,

Im technician @ IKARUS and thought it could be usefull for you if you can ask me few things about our AV.

Because of our new scan-engine T3, maybe there will be more FP than in our old scanner T2.

When we developed the new scanner, we implemented a completely new vdb and failtest system, which is still in the learn phase. There are about 0.5 million files in our failtest-system and we are learning in more and more. So if there are still FP on your systems, we will be glad if you can send the files to us so we can load them in our failtest-system immediately.

Hope my english is not to bad :)

Cheers

[Blackcat]

Good to see you drop in here. Hope you stay around.

[bellgamin]

Hello Ikarus_bpaar...

It's great to have an Ikarus representative visit Wilders forum. It is THE best English-language security forum on the internet.

The greatly improved detection of Ikarus is VERY impressive. Please tell us more about the new T3 engine. If you are allowed to do so by your company, please tell us more about the heuristics, emulator, unpackers of Ikarus -- anything that you can discuss without over-stepping your company's guidelines.

By the way -- your English is very clear and understandable.:)

[zfactor]

very interested to learn more about it myself.. thanks

[jlo]

{QUOTE-> @ jlo

Av Screenshots Thead (http://www.wilderssecurity.com/showthread.php?t=179976)

Ikarus (http://www.wilderssecurity.com/showpost.php?p=1041290) <-QUOTE}

Thanks!

[jlo]

{QUOTE-> Hi all,

Im technician @ IKARUS and thought it could be usefull for you if you can ask me few things about our AV.

Because of our new scan-engine T3, maybe there will be more FP than in our old scanner T2.


Hope my english is not to bad :)

Cheers <-QUOTE}

Welcome. Great to have someone from Ikarus join this forum!

[C.S.J]

just browsing through the vb records,

and noticed failed the vista x64 VB test, due to 46 FP's. :o

latest dec07 test for win2000 was:

9 wildlist misses, 13 false positive

looks like it may have a paranoid detection.

[newposter]

{QUOTE-> And just wondered if the site translated in to English? On VirusTotal seems very strong detection.

Cheers

Jlo <-QUOTE}

And very strong fps;D

[DVD+R]

Wasent Ikarus that Greek dude who flew too close to the Sun, and got his Ass Burnt and the Sun melted his wings, and He crashed and Burned :blink:

First I've heard of Ikarus.. but I might take a sneaky at it sometime :lurking:

[bellgamin]

{QUOTE-> ...got his Ass Burnt... <-QUOTE}No, he left his donkey in the parking lot while he indulged in flying.

Anyhoo, I hope you DO fly Icky for a trial -- and let us hear what you think of it afterward. Just don't get too close to the sun.8)

[Ikarus_bpaar]

{QUOTE->
It is THE best English-language security forum on the internet. <-QUOTE}

who paied you for that ? ;) *jokingly*


{QUOTE->
The greatly improved detection of Ikarus is VERY impressive. Please tell us more about the new T3 engine. If you are allowed to do so by your company, please tell us more about the heuristics, emulator, unpackers of Ikarus -- anything that you can discuss without over-stepping your company's guidelines. <-QUOTE}

When i'm right, the new T3 has about 17 different pack algorithms, relaized by our selfmade unpacking engine. The new emulator ist also developed by ourselfs, but because of restricted informations i dont know much about it. Just our scannerdevelopment team knows the details, i will see if i can get few details, which I may publish. :)


{QUOTE->
By the way -- your English is very clear and understandable.:) <-QUOTE}

thx :)


{QUOTE-> And very strong fps;D <-QUOTE}

were working on it :)


{QUOTE-> Wasent Ikarus that Greek dude who flew too close to the Sun, and got his Ass Burnt and the Sun melted his wings, and He crashed and Burned :blink: <-QUOTE}

http://en.wikipedia.org/wiki/Icarus

;D

[bigc73542]

I may have missd it and if I did I apologize, but how long is the trial for Ikarus?

[Ikarus_bpaar]

{QUOTE-> I may have missd it and if I did I apologize, but how long is the trial for Ikarus? <-QUOTE}

From the day of preparation, 30 days.

Link in my signature :) (sry its a german site ... our website is an temporarily website an will be renewed in a while, in ENGLISH :D)

[Sjoeii]

Any chance on a Ikarus Suite in the future?

[zfactor]

{QUOTE-> Any chance on a Ikarus Suite in the future? <-QUOTE}

would you be leaving kas then? lol

[Sjoeii]

{QUOTE-> would you be leaving kas then? lol <-QUOTE}
No

But ikarus is doing some same things. Just curious

[Blackcat]

{QUOTE-> our website is an temporarily website an will be renewed in a while, in ENGLISH :D) <-QUOTE}
Good idea as it should extend the geographical area of your userbase.

[Chappy]

Well, I was an independent virus/trojan/malware tester for over 6 years, and reported to many of the top name vendors out there. Due to being an "Independent", I'm not allowed by rule to list any vendors I reported to, but I have a lifetime subscription t Virus Bulletin. The VB100% award is the Industry Standard and has been since it's inception, every AV vendor strives to this award.

Here is a screenshot of IKARUS's history in the VB awards:

196331


Usually vendors who have a number of "No Entry" in their report means that they had a product during that test period but did not submit it for the test, and that's mainly due to the vendor knowing that the product was not up to par at the time. This is not true tho all of the time. Some vendors simply didn't have a product for public use during the testing phase, and without further clarification of this it's best to not read anything into the "No Entry" number. It's up to an Ikarus rep to tell you whether or not they had a product out during those test periods (usually 2-3 times per year).

Personally, I would give this vendor a "wide berth" at this moment. The 46 False Positives in August 2007 and another 13 in December 2007 don't bode well for Ikarus. Most testers prefer a product miss 1 or 2 of the newer "In The Wild" virus than to pop up a pile of False Positives. False positives can result in the deletion of non-infected, and many times, needed files.

Dave

P.S. - I'm very glad to see an Ikarus rep posting here! That means they're pretty up front on what's happening with their product and willing to accept that their product has a few issues to settle still. Myself, I would like to hear about the 9 Wildlist misses in the latest test platform? The detection signatures for these are all provided to the vendors beforehand, so wildlist misses indicate an engine or database failure. Are you guys actively working on this and are you planning on having an upgraded product ready for the next VB test?
Good to see you here! Anyone working to combat the nasties is OK in my book and the more "Quality" products out there, the better...so I would like nothing better than to see Ikarus perfect their product! It's not an easy task so keep up the hard work.

[DVD+R]

That post above is mean :( The Ikarus rep has already posted to state they are researching on how to make their product better. The past is past. Its how it progresses that matters

[Blackcat]

IBK has just tested Ikarus again (26th March) against a 2-month-old test-bed of nearly 1,700,000 malware samples.

It achieved a total detection rate of 97.3% which was very similar to another on-demand test last September.

Overall "it would in our regular tests probably reach the Advanced certification level".

[bellgamin]

If they would just get their price down below $35/year, I would consider using it. As it now stands, IMO it's a bit overpriced when compared to the prices of other AVs with equal or better abilities.

[risl]

Well,

~VirusTotal/Jotti screenshot link removed per Policy. (http://www.wilderssecurity.com/showthread.php?t=180057)~

::)

[JasSolo]

Last time i trailed it (2 months ago, or there about), it still had way too many FP's for my taste. So until they have that part fixed, thanks but no thanks.

[C.S.J]

{QUOTE-> Well,

~VirusTotal/Jotti screenshot link removed per Policy. (http://www.wilderssecurity.com/showthread.php?t=180057)~

::) <-QUOTE}
yep, it has been said before...... but whether its true, i doubt they would say.

[risl]

{QUOTE-> yep, it has been said before...... but whether its true, i doubt they would say. <-QUOTE}

Ofcourse they don't, but it's obvious. I would never trust an av vendor that doesn't do their own analyzing. Though it's probably good business for a small and new vendor to steal work from others that are respected/established in "computer security world." Plus all the false positives from some automated system that creates crappy signatures.