My AV Choices for 2011/12

[Escalader]

This post is NOT a AV vs other AV which as we all know is against the rules.

It mearly describes what I have decided to do on the 2 PC's I manage on this LAN. One is a 64 bit HP vista based desktop the other is a 64 bit Dell Notebook under Windows 7

I have been facing the expiry of my Nod32 2 year license this month so I've been following my own guidelines and used the AV-Comparatives testing results to make choices.

What I do (you ideas may be different ) is select ONLY products that score ADVANCED + on both the most recent tests:

On Demand Certification Level

Proactive Retrospective Certification Level

Only 2 vendors did that:

Avira and Kaspersky. So I will put the free Avira on the Desk top and the Kaspersky on the note book.

I have a license (bargin a few weeks back) for KAV Pure which has a few more bells and features but they are just a bonus

If I have huge issues with either I'm quite prepared to revert.


From time to time I'll do a web based SCAN from Nod32 as an extra.

This post is for information only

[ingem64]

NOD32 Antivirus 5
:D

[clocks]

There is a thread for this here:

http://www.wilderssecurity.com/showthread.php?p=1948590#post1948590

[Escalader]

-{ Quote: "NOD32 Antivirus 5
:D" }-

The last test on Proactive Retrospective Certification Level was


http://www.av-comparatives.org/en/comparativesreviews/retrospective-test

I did have the V5 Nod32 running and I liked it (except for the buggy HIPS)BUT it hasn't yet been tested in retrospective.

That will likely come in November and I have to base choices on what has happened not what might happen.

If it goes double , double for both a year from now well it would be a choice for me again.

[toxinon12345]

I would replace Kasperky with Panda IS

[De Hollander]

-{ Quote: "
Avira and Kaspersky. So I will put the free Avira on the Desk top and the Kaspersky on the note book.

" }-

Any special reason why you made that particular choice, what about cross-reference

[The Hammer]

With the free Avira I hope your aware you have to decline the toolbar three times.

[Escalader]

-{ Quote: "I would replace Kasperky with Panda IS" }-



Go for it. but as the tital of the thread is MY AV choices I did the work of evaluation using my evaluation criteria. Panda unfortunatly did not make Advanced + on the:

Proactive Retrospective Certification Level

If in 1 year it does I will consider it.

[Escalader]

-{ Quote: "Escalader/mods: Typo alert, this might mislead other readers, we know it should be scan :)" }-

TY, I have corrected the error!

[Escalader]

-{ Quote: "With the free Avira I hope your aware you have to decline the toolbar three times." }-


Well TY I do know that now. What happens if the user accepts the tool bar?

[Escalader]

-{ Quote: "Any special reason why you made that particular choice, what about cross-reference" }-


Well, the desk top doesn't do much, just email really and downloading the odd attachment. No OLB etc.

If I need to I can put KAV on the desk top.

I don't know what you mean by cross reference... can you explain?

[cozumel]

I think he means cross-referencing against other reputable av test sites.

[Dark Shadow]

-{ Quote: "Well TY I do know that now. What happens if the user accepts the tool bar?" }-
If you except the tool bar you get web guard,If you dont mind ask tool bar.You can't install web guard alone.It's all or none.

[J_L]

Shouldn't the lighter Avira be on the weaker machine? No choices for me, because I don't depend on them.

[Dark Shadow]

-{ Quote: "Shouldn't the lighter Avira be on the weaker machine? No choices for me, because I don't depend on them." }-
Actually I was thinking the same thing but I left it alone.

[Escalader]

-{ Quote: "Shouldn't the lighter Avira be on the weaker machine? No choices for me, because I don't depend on them." }-

The Avira would be on the weaker machine. If you mean slightly less memory and CPU power. Speed on both PC's is good.

But it really doesn't matter. The HP is 64 bit vista under UAC control does next to nothing applications wise. Spouse uses it for email (outlook) and some word and pdf reading.

[Escalader]

-{ Quote: "If you except the tool bar you get web guard,If you dont mind ask tool bar.You can't install web guard alone.It's all or none." }-

TY. When the time to install I'll pass on the tool bar.

It uses IE 9 and I've loaded the HOST file. If ever surfing becomes an activity on this one I'll upgrade to KAV Pure as it does have very very strong web site control plus a FW.

[Nevis]

isnt this thread somewhat going in direction of A vs B.

we have security setup thread for this .

[Dark Shadow]

-{ Quote: "isnt this thread somewhat going in direction of A vs B.

we have security setup thread for this ." }-
No its not,as long as others stay OT about the two products picked by Escalader for two different machines and not suggest or compare.any others.Cheers

[xxJackxx]

-{ Quote: "I have a license (bargin a few weeks back) for KAV Pure which has a few more bells and features but they are just a bonus " }-

Remember that PURE is not the same 2012 engine as the current KIS/KAV so if you are running PURE based on the score KIS/KAV got you may be incorrect.

[J_L]

-{ Quote: "If you except the tool bar you get web guard,If you dont mind ask tool bar.You can't install web guard alone.It's all or none." }-
Actually, you can disable it after installation. Someone from Avira said this.

[The Hammer]

-{ Quote: "Actually, you can disable it after installation. Someone from Avira said this." }-
If you do you don't retain web guard. I can tell you the powers that be at Avira's forum have said that.

[Dark Shadow]

-{ Quote: "Actually, you can disable it after installation. Someone from Avira said this." }-
Cool but thought if the tool bar was disabled so was the web guard.

(Edit) I posted before seeing hammers post,Thanks hammer

[Escalader]

-{ Quote: "Remember that PURE is not the same 2012 engine as the current KIS/KAV so if you are running PURE based on the score KIS/KAV got you may be incorrect." }-


Hi: I've been wrong before and may be wrong again!

I will check out this engine vintage with KAV Lab guys.

The AV-Comparatives 2011 Cerification Levels for KAV were:

Kaspersky Antivirus 12.0.0.374 (abc) test date for ON Demand was

September 27, 2011 rated as ADVANCED +

Kaspersky Anti-Virus 2011 test date for Proactive Retrospective was May 21,2011 rated as Advanced +


Pure "about" says Version 9.1.0.124 (a.b)
1997-2010 in the copyright but that may or may not confirm an engine vintage.

I also think (not the same as knowing) that Pure may be a beta:-\

Although how I bought a beta from Best Buy on sale seems to say that ani't the case one of my many questions for KAV.


Let's be careful NOT to turn my thread about MY choices into A vs B AV products.

My loyalty to security products is zero. I'm not saying anybody else should do what I'm doing. There are many other AV's that have Advanced + ratings at AV-Comparitives. It's just my "preference" for double double ADVANCED + certifications that drives me down these routes.

2 years back this requirement drove me to a different choice.;D

Now I'm in a new setup and enjoying the learning. 8)

[xxJackxx]

-{ Quote: "Pure "about" says Version 9.1.0.124 (a.b)
1997-2010 in the copyright but that may or may not confirm an engine vintage.

I also think (not the same as knowing) that Pure may be a beta:-\
" }-

PURE is not beta but the version you are running (the latest available) is based on the 2010 engine. I went ahead and looked on the Kaspersky forum and found this:
"PURE uses the same core engine as KIS 2010 and KAV 2010"
http://forum.kaspersky.com/index.php?s=&showtopic=216439&view=findpost&p=1719333

They will eventually update it but it is not on the same update schedule as KIS/KAV.

[BoerenkoolMetWorst]

Why only look at the On-demand and Proactive/retrospective tests and not the Whole product dynamic tests?

[toxinon12345]

How could you know the date of the tests?
Are you working in AV-C?

Speculations are not the same as knowledge. Enjoy the learning. :D

[RJK3]

On demand results aren't worth as much as some of the other tests, as they all tend to do well including McAfee - but people still get infected.

As the OP points out, the Kings of Restrospective tests have been Avira, Eset, and Kaspersky for years. Avira have steadily reduced their FPs to be in line with Eset and Kaspersky. IMO FPs aren't so important for a competent user, but that can get annoying (ala A-Squared Free).

Also, Kaspersky 2012 is much less heavy than previous versions.

Panda is making strides in the retrospective tests as well - it's my current choice, partly because my security setup doesn't rely on an antivirus so I just needed something light that complemented everything else I use. Anyone designing a security setup should actually have the main vectors for infection in mind: user dependent (trojans, email attachments), browser / Exploit Kits, and internet worms.

[Escalader]

;D -{ Quote: "How could you know the date of the tests?
Are you working in AV-C?

Speculations are not the same as knowledge. Enjoy the learning. :D" }-


These AV-C reports anybody can download from their web site as pdf files.

The dates of the tests are recorded in their reports.

I'm too olde to work for anybody now including AV_C.

I don't speculate in choosing software. ;D

[Escalader]

-{ Quote: "PURE is not beta but the version you are running (the latest available) is based on the 2010 engine. I went ahead and looked on the Kaspersky forum and found this:
"PURE uses the same core engine as KIS 2010 and KAV 2010"
http://forum.kaspersky.com/index.php?s=&showtopic=216439&view=findpost&p=1719333

They will eventually update it but it is not on the same update schedule as KIS/KAV." }-


Thanks very much for the link.

It's good to know they will update but I will not wait for them forever.

Attached for information is a jpg of my Not so current Pure Update Screen:

It updates every 5 minutes which seems pretty current BUT if it is dipping into a slightly behind malware database then I'm NOT optimal with KAV!:'(

[Rampastein]

-{ Quote: "It updates every 5 minutes which seems pretty current BUT if it is dipping into a slightly behind malware database then I'm NOT optimal with KAV!:'(" }-AFAIK the malware database isn't behind at all, but the core engine is older and lacks some of the improvements which have been made with versions 2011 and 2012. I believe it's mostly visible as Pure being slower/heavier than 2012, there shouldn't be a large difference in protection, especially with default settings.

[Escalader]

-{ Quote: "AFAIK the malware database isn't behind at all, but the core engine is older and lacks some of the improvements which have been made with versions 2011 and 2012. I believe it's mostly visible as Pure being slower/heavier than 2012, there shouldn't be a large difference in protection, especially with default settings." }-


What you are saying here makes sense to me as KAV would not likely keep 2 versions of a malware database.

The programming code in the engine is what we are dealing with here.

KAV indicates that PURE will be updated to 2012 level before year end.

That is good enough for me.

The additional features of Pure are important to me as I can consolidate PSW management and encryption AND install on 3 computers with 1 license.
The encryption feature creats a virtual drive where every file I put there (tax, banking statements etc etc) gets encrypted.

Once I figure out how to do it (later after upgrade) it can control all 3 PC's on the same LAN. That is IF I install PURE on each PC then I can update the malware database and scan from the master PC. There is also a RUN SAFE feature which is only relevent for the 32 bit pc's. Mine is Windows 7 64 so I don't need that.

So this beast is just a bit more than an AV.

[Escalader]

-{ Quote: "Why only look at the On-demand and Proactive/retrospective tests and not the Whole product dynamic tests?" }-

TY. Interesting point. I haven't looked at those tests.

If we did the double double ADVANCED + and ended up with say 4 or 4 tied vendors then we would need tie braking factors. Performance, scan speed etc,

What types of data/information is available from Whole product tests?

[BoerenkoolMetWorst]

-{ Quote: "TY. Interesting point. I haven't looked at those tests.

If we did the double double ADVANCED + and ended up with say 4 or 4 tied vendors then we would need tie braking factors. Performance, scan speed etc,

What types of data/information is available from Whole product tests?" }-
The whole product test has a more real world scenario and all features of the products come into testing. There is vulnerable out-dated software on the test pc's, samples are downloaded through the internet so URL blockers can show what they're worth, samples are executed so behaviour-blockers or analyzers and HIPS come into play, and because the machines are connected to the net products can profit from cloud/reputation data etc.
If you end up with tied vendors you can use the results from AV-C's performance test.

[Escalader]

-{ Quote: "The whole product test has a more real world scenario and all features of the products come into testing. There is vulnerable out-dated software on the test pc's, samples are downloaded through the internet so URL blockers can show what they're worth, samples are executed so behaviour-blockers or analyzers and HIPS come into play, and because the machines are connected to the net products can profit from cloud/reputation data etc.
If you end up with tied vendors you can use the results from AV-C's performance test." }-

Yes! Excellent!8)

I'm going to their site to do a tie breaker if possible!

More later.;D

[Escalader]

-{ Quote: "The whole product test has a more real world scenario and all features of the products come into testing. There is vulnerable out-dated software on the test pc's, samples are downloaded through the internet so URL blockers can show what they're worth, samples are executed so behaviour-blockers or analyzers and HIPS come into play, and because the machines are connected to the net products can profit from cloud/reputation data etc.
If you end up with tied vendors you can use the results from AV-C's performance test." }-

Yes I just reviewed the report. It is a signicant piece of technical analysis since with the involvement of a Computer Science and Engineering university.

As far as my two choices earlier described the report does not change the outcome in fact it confirms it.

However it is my initial sense that this report will be my starting point in the future and use the on demand and proactive reports to rank those products.

I would just use the top catergory as my starting set. Had I done that Avira would not have been considered. :'(

A year from now we will visit this again. Thanks for the idea and I recommend this report to anybody considering a change or having a license expire.

On the other hand if users feel so strongly about their selections and loyal to a vendor none of this has any value for them. This is just my opinion.

[Atomic_Ed]

I like your selection of options for your computers. I did basically the same thing as you, as I was removing Vipre and looking for a replacement, I went to AV-C and also looked for advanced + options for my systems too.

I actually narrowed it down to Avira or Kaspersky. Both of which I trialed on my system and ultimately I just bought KIS 2012. I actually thought both products were really nice and ran great. I only selected KIS due to my personal preference of the interface. I appreciate your sharing your personal selections, I found it interesting since I just did the same thing myself.

[JerryM]

I have not experienced FPs with my choice, and see no reason to change.
Jerry

[BoerenkoolMetWorst]

-{ Quote: "Yes I just reviewed the report. It is a signicant piece of technical analysis since with the involvement of a Computer Science and Engineering university.

As far as my two choices earlier described the report does not change the outcome in fact it confirms it.

However it is my initial sense that this report will be my starting point in the future and use the on demand and proactive reports to rank those products.

I would just use the top catergory as my starting set. Had I done that Avira would not have been considered. :'(

A year from now we will visit this again. Thanks for the idea and I recommend this report to anybody considering a change or having a license expire." }-
Yes, it is a very nice report to help choosing a product, though I would recommend to take in account tests from other respectable testing organizations like AV-Test and MRG as well to get a more complete view.
-{ Quote: "
On the other hand if users feel so strongly about their selections and loyal to a vendor none of this has any value for them. This is just my opinion." }-
Very true :P

[Escalader]

-{ Quote: "Yes, it is a very nice report to help choosing a product, though I would recommend to take in account tests from other respectable testing organizations like AV-Test and MRG as well to get a more complete view.

Very true :P" }-

Yes, it would be wise I think to check other reliable sources.

Thing is, I'm unfamilar with both those organizations.

It would be interesting to compare the rankings / methods from them but I don't have time at the moment.

Maybe someone else can invest some effort and do that. That might have to be another thread.

[Escalader]

Info For the thread:

I re-installed KAV PURE this time leaving out the backup feature, the Password system AND their FW. I have Paragon for backup Roboform for PSW management and I installed OP FW Pro 64 bit because I have the rules for it and can manage it.

On OP Pro I choose not to install their ASW and their web site management.

It is very interesting to me anyway that KAV and OP seem to work together okay. I also added them to each others exclusion lists.

[Escalader]

-{ Quote: "This post is NOT a AV vs other AV which as we all know is against the rules.

It mearly describes what I have decided to do on the 2 PC's I manage on this LAN. One is a 64 bit HP vista based desktop the other is a 64 bit Dell Notebook under Windows 7

I have been facing the expiry of my Nod32 2 year license this month so I've been following my own guidelines and used the AV-Comparatives testing results to make choices.

What I do (you ideas may be different ) is select ONLY products that score ADVANCED + on both the most recent tests:

On Demand Certification Level

Proactive Retrospective Certification Level

Only 2 vendors did that:

Avira and Kaspersky. So I will put the free Avira on the Desk top and the Kaspersky on the note book.

I have a license (bargin a few weeks back) for KAV Pure which has a few more bells and features but they are just a bonus

If I have huge issues with either I'm quite prepared to revert.


From time to time I'll do a web based SCAN from Nod32 as an extra.

This post is for information only" }-

Hello Thread:

Well I ran into a "huge issue" for me. (that's me not you).

On KAV Pure when I added sites to the "blocked" list which included wild characters using *, my entire W7 64bit system refused to boot!


So I recovered an image using Paragon Backup and recovery suite 10 to when I had OP FW Pro and Nod32 V5 working together.

Then I simply renewed my Nod32 license and have carried on from there.


On the second PC I'm still on MSE but as users know it is a shade slow on scanning time. So to get some value out of my KAV Pure licence (1 year) I'll replace MSE with PUre. It is a Vista setup so it should work.

I will not be using the block site feature with my own added sites on the Vista setup.

See yah8)

[acr1965]

-{ Quote: "This post is NOT a AV vs other AV which as we all know is against the rules.

It mearly describes what I have decided to do on the 2 PC's I manage on this LAN. One is a 64 bit HP vista based desktop the other is a 64 bit Dell Notebook under Windows 7

I have been facing the expiry of my Nod32 2 year license this month so I've been following my own guidelines and used the AV-Comparatives testing results to make choices.

What I do (you ideas may be different ) is select ONLY products that score ADVANCED + on both the most recent tests:

On Demand Certification Level

Proactive Retrospective Certification Level

Only 2 vendors did that:

Avira and Kaspersky. So I will put the free Avira on the Desk top and the Kaspersky on the note book.

I have a license (bargin a few weeks back) for KAV Pure which has a few more bells and features but they are just a bonus

If I have huge issues with either I'm quite prepared to revert.


From time to time I'll do a web based SCAN from Nod32 as an extra.

This post is for information only" }-

Question about Kaspersky Pure - does the Pure version use the SDK engine? If so, why and what's the difference between the sdk vs. the engine used in other Kaspersky products?

[fax]

-{ Quote: "Question about Kaspersky Pure - does the Pure version use the SDK engine? If so, why and what's the difference between the sdk vs. the engine used in other Kaspersky products?" }- No, SDK package is for third party companies only.

[Escalader]

-{ Quote: "Question about Kaspersky Pure - does the Pure version use the SDK engine? If so, why and what's the difference between the sdk vs. the engine used in other Kaspersky products?" }-

Sorry I can't answer this I leery of the threads going off rails you know my AV is best etc etc.... never achieves anything.

But Fax has given you an answer. The other place is the vendor site, ask them.