PDA

View Full Version : Nod32 Detection


chaos16
March 22nd, 2005, 02:54 PM
I just want to know

Is it true that Nod32 is the best antivirus for removing viruses and worms??

But not at all good for removing trojans??

Coz i used to use nod32 but then i went to KAV and KAV found 2 trojans that Nod32 coulden't find????

hollywoodpc
March 22nd, 2005, 03:29 PM
-{ Quote: "

Is it true that Nod32 is the best antivirus for removing viruses and worms??

But not at all good for removing trojans??

Answer to both questions is No . For question 1 , not the best but , very good . IMHO . For question 2 , still very good . You will always be able to find faults in any AV program . Hope that helps .

mercurie
March 22nd, 2005, 09:40 PM
My thinking on this: add BoClean to Nod32 and you are good to go my friend ;)

hollywoodpc
March 22nd, 2005, 09:43 PM
Hi Mercurie .
Adding any decent AT is really required for top notch protection . I agree 100 % . That goes for ANY AV .

mercurie
March 22nd, 2005, 09:50 PM
-{ Quote: "Hi Mercurie .
Adding any decent AT is really required for top notch protection . I agree 100 % . That goes for ANY AV ." }-Nice see you around too Hollywoodpc,
Yes. I agree AT is needed to round out ones protection. BoClean just happens to be the one I like. There certainly are others a few other protection licenses listed there with all your posts in fact. :)

hollywoodpc
March 22nd, 2005, 09:58 PM
:) ;) ;) :)

chaos16
March 23rd, 2005, 08:13 AM
i think that KAV and nod32 are roughly equal they have tehre on adavntage nod32 has the advantage that its much lighter then KAV and KAV has the advantage that it has a better trojan detection

Firecat
March 23rd, 2005, 10:47 AM
nod32 also cost less than KAV...

bigc73542
March 23rd, 2005, 10:51 AM
-{ Quote: "i think that KAV and nod32 are roughly equal they have tehre on adavntage nod32 has the advantage that its much lighter then KAV and KAV has the advantage that it has a better trojan detection" }-


That would be true if all you were wanting to detect is viri and some trojans. But Kav detects much more than that. nod might eventually catch Kav on detection but they have a long way to go for now.

Firecat
March 23rd, 2005, 10:54 AM
-{ Quote: "That would be true if all you were wanting to detect is viri and some trojans. But Kav detects much more than that. nod might eventually catch Kav on detection but they have a long way to go for now." }-
Yes, KAV has the best overall detection especially when you consider adware/spyware/riskware and other dangerous stuff.

Stan999
March 23rd, 2005, 11:02 AM
-{ Quote: "That would be true if all you were wanting to detect is viri and some trojans. But Kav detects much more than that. nod might eventually catch Kav on detection but they have a long way to go for now." }-


Taking a look at http://virusscan.jotti.org/ over the past few days they all have a ways to go even KAV.

Last piece of malware found was Trojan.Downloader.Delf.Jy in cartao.scr, detected by:

Scanner Malware name
AntiVir X
Avast X
AVG Antivirus X
BitDefender Trojan.Downloader.Delf.JI
ClamAV X
Dr.Web X
F-Prot Antivirus X
Fortinet X
Kaspersky Anti-Virus X
mks_vir Trojan.Downloader.Delf.Jy
NOD32 X
Norman Virus Control X


----------------------
Last piece of malware found was BehavesLike:Trojan.Downloader in ifc.exe, detected by:

Scanner Malware name
AntiVir X
Avast X
AVG Antivirus X
BitDefender BehavesLike:Trojan.Downloader
ClamAV X
Dr.Web X
F-Prot Antivirus unknown virus
Fortinet X
Kaspersky Anti-Virus X
mks_vir X
NOD32 probably unknown NewHeur_PE
Norman Virus Control Sandbox: W32/Downloader


---------

Last piece of malware found was Dropped:Win32.Worm.Kiph.A in main.exe, detected by:

Scanner Malware name
AntiVir X
Avast X
AVG Antivirus X
BitDefender Dropped:Win32.Worm.Kiph.A
ClamAV X
Dr.Web X
F-Prot Antivirus unknown virus
Fortinet X
Kaspersky Anti-Virus X
mks_vir Win32
NOD32 probably unknown NewHeur_PE
Norman Virus Control Sandbox: W32/P2PWorm


-----------

Last piece of malware found was W32/SDBot.CWI in rfc.exe, detected by:

Scanner Malware name Time taken
AntiVir Worm/SdBot-43744 0.39 seconds
Avast Win32:SdBot-1245 1.53 seconds
AVG Antivirus IRC/BackDoor.SdBot.154.AT 0.54 seconds
BitDefender X 0.53 seconds
ClamAV X 0.61 seconds
Dr.Web X 0.91 seconds
F-Prot Antivirus X 0.13 seconds
Fortinet X 0.45 seconds
Kaspersky Anti-Virus X 1.03 seconds
mks_vir Win32 0.23 seconds
NOD32 X 0.49 seconds
Norman Virus Control W32/SDBot.CWI 0.23 seconds


-----------------

Last piece of malware found was Dropped:Trojan.Agent.DN in m2.exe, detected by:

Scanner Malware name Time taken
AntiVir X 0.42 seconds
Avast X 1.53 seconds
AVG Antivirus X 0.56 seconds
BitDefender Dropped:Trojan.Agent.DN 0.60 seconds
ClamAV Trojan.Dropper.Purityscan.F 0.66 seconds
Dr.Web X 0.94 seconds
F-Prot Antivirus X 0.18 seconds
Fortinet X 0.49 seconds
Kaspersky Anti-Virus X 1.07 seconds
mks_vir X 0.47 seconds
NOD32 Win32/TrojanDropper.PurityScan.G.gen 0.60 seconds
Norman Virus Control Sandbox: W32/Malware 22.03

----------------------------------------------------------------------------------

Last piece of malware found was probably unknown NewHeur_PE in hmzz.exe, detected by:

Scanner Malware name Time taken
AntiVir BDS/Optix.Pro.13.28 0.81 seconds
Avast Win32:Optix-J 3.08 seconds
AVG Antivirus X 1.12 seconds
BitDefender Backdoor.OptixPro.1.Gen 1.16 seconds
ClamAV Trojan.PWS.Wexd 1.54 seconds
Dr.Web X 1.71 seconds
F-Prot Antivirus X 0.19 seconds
Fortinet X 0.88 seconds
Kaspersky Anti-Virus X 2.12 seconds
mks_vir Trojan.Optix.Pro.13 0.43 seconds
NOD32 probably unknown NewHeur_PE 1.07 seconds
Norman Virus Control X 0.64 seconds

Firecat
March 23rd, 2005, 11:06 AM
Ooohh....MKS is not as bad as it seems...seems it can hold its own against even KAV uh?

Wolfe
March 23rd, 2005, 11:23 AM
-{ Quote: "Ooohh....MKS is not as bad as it seems...seems it can hold its own against even KAV uh?" }-

Seems like NOD32 outperforms KAV as well.

That said putting some samples up for examination isn't actually trustworthy overall. av-comparatives is a reliable source for example.

Wolfe

Firefighter
March 23rd, 2005, 01:44 PM
-{ Quote: "Taking a look at http://virusscan.jotti.org/ over the past few days they all have a ways to go even KAV.

Last piece of malware found was Trojan.Downloader.Delf.Jy in cartao.scr, detected by:" }-Unfortunately this doesn't shock me at all. I can throw more than 100 samples with a mention as "Last piece of malware found was...", but SURPRISE, only Kaspersky was that av that detected them all and the rest were far away. Almost the same I can do with McAfee VSE 8.0i too. And with all other well performed scanners too.

This is typical, when we are advertising something but these kind of examples are far from RAMDOMLY picked samples.

Best regards,
Firefighter!

se7engreen
March 23rd, 2005, 03:04 PM
Six malware detections from Jotti's is not even close to an indication of overall detection rates for any of these AV's. I think the point that Stan999 is trying to make is that all vendors need improvement and no single AV is a catch-all for malware.

EDIT: Sorry, I guess this has already been stated :)
-{ Quote: "That said putting some samples up for examination isn't actually trustworthy overall. av-comparatives is a reliable source for example." }-

RejZoR
March 23rd, 2005, 03:35 PM
But in general you couldn't get more random samples than on Jotti.

chaos16
March 24th, 2005, 12:42 PM
so in the end nod32 wont give better protection then KAV but will be lighter for ur computer.

But the new KAV version 6.0 will be lighter i think and faster plus it will have better detection then any other antivirus so i guess i will stay with KAV and the future KAV

Firecat
March 24th, 2005, 04:54 PM
And it has the behaviour blocker too...KAV 6 seems to be shaping up very well.

Don Pelotas
March 24th, 2005, 05:44 PM
-{ Quote: "And it has the behaviour blocker too...KAV 6 seems to be shaping up very well." }-
Yes, that one is shaping up quite nicely... :)

chaos16
March 24th, 2005, 05:56 PM
Wat feature is the behaviour blocker???

Firecat
March 24th, 2005, 06:07 PM
chaos,

Dont you remember my PM? Its a technology which will prevent suspicious action from executing on your computer. Kinda like a heuristic engine, but works only realtime. And its really good at its job too.

Firecat :)

chaos16
March 25th, 2005, 03:59 PM
lately the update of nod32 hasen't been doing very well as previous updates??

look

http://www.eset.com/support/info.htm#CurVersion

compared to NOD32 - v.1.1018 (20050305)

And as Nod32 doesn't do that well in trojans why don't they pay other trojan companies to give them there signatures for trojans???

Blackcat
March 25th, 2005, 04:14 PM
-{ Quote: " And as Nod32 doesn't do that well in trojans why don't they pay other trojan companies to give them there signatures for trojans???" }-
NOD has improved tremendously in trojan detection in the last 6-12 months. For example, the recent results over at av-comparatives show that for trojans and backdoors it was on par with McAfee and ahead of Dr Web. Both of the latter AV's are well-known trojan slayers!!!! And these results have been confirmed by some of FireFighter's recent results here.

So not quite KAV standards yet, but not too shabby either ;)