sri antivirus test of 6 September

[simisg]

http://mtc.sri.com/live_data/av_rankings/
microsoft is first!

[clocks]

Interesting results. Where is Comodo?

[andyman35]

Very odd to see Nod32 with such an abysmal result.:-\

[EraserHW]

http://www.prevx.com/blog/106/Why-using-VirusTotal-for-AV-testing-is-a-bad-idea.html

http://blog.hispasec.com/virustotal/22

:dry: :dry:

[Derelict_NY]

{QUOTE-> Very odd to see Nod32 with such an abysmal result.:-\ <-QUOTE}

I asked about this website's results in the NOD32 forum recently, specifically if v4 would rate higher than v2. The posting was locked by a moderator in no time and I expect this one will be too.

Thanks to EraserHW for posting the interesting articles on these types of tests. Good reading and insight.

[Carver]

Interesting results though.

[stapp]

I found it odd that Ewido was listed.

[andyman35]

{QUOTE-> I asked about this website's results in the NOD32 forum recently, specifically if v4 would rate higher than v2. The posting was locked by a moderator in no time and I expect this one will be too. <-QUOTE}

That's a strange reaction from Nod to a perfectly legitimate question,the mystery deepens.

[andyman35]

{QUOTE-> I found it odd that Ewido was listed. <-QUOTE}
Me too,I wasn't aware that it still existed as a separate entity from AVG.???

[Thankful]

A thread discussing NOD32 and results to this test. The thread may have referred to a prior month's results:
http://www.wilderssecurity.com/showthread.php?p=1521451

[Derelict_NY]

{QUOTE-> That's a strange reaction from Nod to a perfectly legitimate question,the mystery deepens. <-QUOTE}

NOD's response was just that these types of tests shouldn't be taken seriously and that many of the samples caught by honeypots are corrupt. I guess that if that's true then corrupt executables are no threat and therefore not flagged by NOD. It wasn't a NOD moderator that closed the thread. The thread is the one linked to by Thankful in his post prior to mine.

I think the problem is that these types of posts spiral into a this product vs. that product type of discussion which understandably is not allowed in these forums.

I had just wanted to know if NOD32 v4 would offer better results. I was contemplating upgrading from v2. However, it doesn't matter anymore to me as I've decided to switch to F-Secure 2010. I wanted a more recent AV solution and one that wouldn't proxy all of my network connections while still being able to scan my network traffic and F-Secure seems to be the only vendor to offer such a solution.

Darrell

[andyman35]

{QUOTE-> NOD's response was just that these types of tests shouldn't be taken seriously and that many of the samples caught by honeypots are corrupt. I guess that if that's true then corrupt executables are no threat and therefore not flagged by NOD. It wasn't a NOD moderator that closed the thread. The thread is the one linked to by Thankful in his post prior to mine.

I think the problem is that these types of posts spiral into a this product vs. that product type of discussion which understandably is not allowed in these forums.

I had just wanted to know if NOD32 v4 would offer better results. I was contemplating upgrading from v2. However, it doesn't matter anymore to me as I've decided to switch to F-Secure 2010. I wanted a more recent AV solution and one that wouldn't proxy all of my network connections while still being able to scan my network traffic and F-Secure seems to be the only vendor to offer such a solution.

Darrell <-QUOTE}
Yes I've read the links PrevX posted and this particular test does seem to be open to debate.TBH any test showing Nod32 (whichever version) at 7% just doesn't ring true,it may not compare with the very top products such as Avira but I've seen rogues that score higher than 7% lol.

[Thankful]

Even though I am currently not using NOD32, I find the result for NOD32 to be VERY questionable. NOD32 releases several updates a day. If NOD32 left their customers vulnerable to the latest threats, pretty soon they'd have no customers.

[aigle]

How the hell they were able to test Ewido?

[Paul Wilders]

Since Hispasec = VirusTotal, I suggest reading up. Start here:

{QUOTE-> We are rather tired of repeating that VirusTotal was not designed as a tool to perform AV comparative analyses, but as a tool that checks suspicious samples with several AV programs and helps AV labs by forwarding them the malware they failed to detect. Those who use VirusTotal to perform AV comparative analyses should know that they are making many implicit errors in the methodology, the most obvious being:... <-QUOTE}

As posted earlier, full story here (http://blog.hispasec.com/virustotal/22)