K7 Computing-what is this?

[Windfresh]

Happy New to everyone!
I've run into an unknown antivirus K7
http://www.k7computing.com/index.asp ,which is from India.
I know about Microworld with their eScan range of products, Quick Heal of CAT and ProtectorPlus, but I had never heard anything about K7.
You will ask me why I am so suprised-I will respond.
K7 Computing asserts on the official site that "Virus Security

Trusted by more than 4 million users in Japan".
4 million users!!!in Japan. That must be a very popular product,but why unheard anywhere? Are there any guys, interested in secyrity software from Japan?Give me a clue why K7 is so popular (or unpopular)in Japan.
What is the detection rate for K7? Have you got any info on it?

In order to not open a new thread concerning K7. They advise to reboot a computer after updating a K7 virus database.
So it means that a user should disconnect his/her Internet and all the opened services just to be protected with new signatures? Is it the way ALL antiviruses work? Or K7 is simply an outdated software technology?
Thank you all in advance!

[C.S.J]

erm not sure,

but i think commtouch have some integration.

http://www.commtouch.com/Site/News_E...d=843&cat_id=8

unless im mistaken, not quite easy to find information if you dont speak the language.

[C.S.J]

Jayaraman Kesavardhanan Founder, CEO & CTO

He founded K7 Computing in 1991 and built an antivirus engine which was christened Vx2000. Over the last 15 years he has assiduously built K7 Computing as a company focused on product development

Founded in 1991 by Jayaraman Kesavardhanan, we are headquartered in Chennai, with development and technical support centers in Chennai, India. K7 Computing has a sophisticated *Threat Control and Prevention Lab* that monitors and identifies threats on a daily basis and updates our products everyday.
K7's anti-virus is one of India's most successful "shrink-wrapped software product" with a total installed user base of more than 4.0 Million and growing at CAGR of 40% over the last three years.

A recognized expert on antivirus, Kesavan continues to maintain the core antivirus engine and apart from playing the role of CEO, provides technology direction to the organization. He is also the chief programmer at K7 Computing and embodies the spirit of the company as a developer centric organization. He loves to read fiction and wants to encourage software innovators. As a software entrepreneur who has seen the trials and tribulations of a small product company, he would like to make the path easier for the next generation of innovators.

sounds like it uses its own engine, not sure about detection.

[Diver]

Actually, it is the predecessor of the K9 Virus Sniffing engine. The program with a nose for malware. It was the first to identify the curry worm and the monsoon bot network.

[Windfresh]

Thanks for answers!
Though nothing has become clearer. The info from their site I knew already. I wonder whether K7 is good in AV province and why it is so popular in Japan.
I found their soft while I was on The Microsoft security soft providers and saw thier special offers alongside with those of Panda, Norton, TM and F-Secure.
http://www.k7computing.com/Microsoft/XP/Microsoft.asp

[Edwin024]

I am testing the K7 IS now and I must say that it feels good. Not heavy at all. All the things that other packages have are includes in K7's package too. Maybe a bit expensive though.

[ashishtx]

I had been to it's website about couple of months ago and found nothing intriguing. I assumed it to be rebranded antivirus using some known antivirus engine. If it has a new engine than i might give it a try. Being a microsoft security service provider this looks like a credible company.

[computer geek]

Well, it has got only one vb100, so it can't be too bad. But if it had some well known engines, don't you think they would have had more confidence and entered more times and won?

[JasSolo]

Testing it now. Low on use of resources .BUT only scans 1 level in compressed files, with no option to fix that in any setting. So the famous Eicar zip2 file is only detected, if you unpack it. That is not good eneough And the Eicar zip1 file is only detected if you scan it, when downloadet. Scans my hole computer in 16 min.But then again, if it only scans one level in compressed files, it's understandable how it does it that quick....Kaspersky does the same in 70 min. ESET in about 25 min., Symantec 35-40 min. Those AV' scan at least 3 levels in compressed files.
I like it's gui
The future will see if I feel safe with it.

Happy New Year

[C.S.J]

Originally Posted by JasSolo

Testing it now. Low on use of resources .BUT only scans 1 level in compressed files, with no option to fix that in any setting. So the famous Eicar zip2 file is only detected, if you unpack it. That is not good eneough And the Eicar zip1 file is only detected if you scan it, when downloadet. Scans my hole computer in 16 min.But then again, if it only scans one level in compressed files, it's understandable how it does it that quick....Kaspersky does the same in 70 min. ESET in about 25 min., Symantec 35-40 min. Those AV' scan at least 3 levels in compressed files.
I like it's gui
The future will see if I feel safe with it.

Happy New Year

ok, but does it matter that it only scans 1 level for archives?

i never understand the need for archive scanning anyway, are you protected still, yes!

[C.S.J]

Prevx detected Malware............

This object has a file size of 200,096 bytes, it is most frequently called K7SENTRY.SYS and is most frequently located in the %windir%\system32\drivers\ folder.
The file header contains the following information:
Vendor : K7 Computing Pvt Ltd
Product: K7AV Sentry Device Driver For NT/2K
Version: 7.06.000 built by: WinDD

This file is considered unsafe. It was first seen on Saturday, Nov 10 2007. It has been seen frequently by 107 users in this section of the community. The file was first seen in SWEDEN but has been seen in other locations, including JAPAN.
K7SENTRY.SYS has been seen to perform the following behaviors:
- This Process sends MIME Email
- This Process Creates a Hidden Frame
K7SENTRY.SYS has been the subjec

[computer geek]

i tried it out andit said in the activate your program corner, programme is updated ONCE a week and ocasionally TWICE!!!!

[C.S.J]

apart from having a fast scan speed, good options and a nice enough taskbar icon, the rest is all negative from me.

most likely a FP if it is infact a reputable company, but better to be safe than sorry.

[Windfresh]

What about rebooting a computer after receiving updates? Is it normal for modern antiviruses?

[samjeba]

This product is marketed in Japan by Source next under the name Virus Security
http://www.sourcenext.com/en/?i=top

[Windfresh]

Originally Posted by samjeba

This product is marketed in Japan by Source next under the name Virus Security
http://www.sourcenext.com/en/?i=top

Thank you samjeba! Your answer is comprehensive and helpful.

[Blackcat]

Downloaded this AV and have been playing about with it the last few days. Initial observations;

# You have to provide a email address both for the initial download and for setting up the updater. No spam as yet.

# Present Installer has vdfs from last August, so 13 files, were needed to update/upgrade; took about 50 minutes on dial-up. A reboot was necessary, but the regular DAT updates released on a daily basis don't require one. In case any of the product files are updated a reboot might be required depending on the file that was updated.

# One license is valid per machine and you can reinstall and reactivate K7 AV any number of times on the same system as long as the license period is valid. In case you format the system or change your PC you need to contact K7support for reactivation.


# Good, clear GUI. K7 uses 5 processes, but these only take up 9MB VM and the Guard is very light in real-time.

[Blackcat]

Configuration Options.

[Blackcat]

Scanner is easy to set up and fast; no false positives picked up on the first complete scan. The Scanner also picks up corrupted files!

If malware is detected you have a number of options.

[Blackcat]

Scheduler;

Updater. Minimum of one update is released per day.This might increase based on need. I had 2 updates yesterday.

[Blackcat]

It has been tested over at Virus Bulletin but just the once; it passed in June 2007, Win XP.

My unofficial testing here reveals a not too shabby detection rate; just behind the likes of BitDefender, Dr Web and F-Prot. Quarantine and the warning Window of the Guard are clearly set out in this respect.

[Blackcat]

# Very cheap to buy; $16/£10.

# Support answered my email within 2 hours and it was a detailed reply.

Overall; A promising AV; good GUI, fast scanner and a light-weight Guard.

Against this is the fact that its detection rate is unknown, it has poor termination potection and the frequency of updates needs to improve.

It may well be just cheap, flash candy but it is an AV, IMHO, to keep an eye on.

[bellgamin]

Thanks BC. A very helpful series of comments & screenshots.

K7AV seems to be a very interesting AV. Not quite ready for primetime, but worthy of support at such a cheap price. I bought a license & I'll set aside an image for running it real-time.

(I had to "remove" the back-up CD they automatically appended to my order. Otherwise it's a very smooth ordering process using element5.)

K7 isn't easy to search for at Wilders because "K7" is only 2 characters, & the Wilders forum search engine doesn't accept that. I did a search for "K7 AV" and that worked. So did "K7AV".

A long while ago someone showed me how to use Google to do a search at Wilders for just two characters, but I fogot how to do it. Anybody know how?

P.S. They also have a Security Suite bit I am NOT into suites.

[huangker]

Originally Posted by bellgamin

A long while ago someone showed me how to use Google to do a search at Wilders for just two characters, but I fogot how to do it. Anybody know how?

P.S. They also have a Security Suite bit I am NOT into suites.

In google type "k7 site:www.wilderssecurity.com" without the quotations.

[JasSolo]

Originally Posted by Blackcat

It has been tested over at Virus Bulletin but just the once; it passed in June 2007, Win XP.

It has also been tested several times at West Coast Labs, and passed every test.


Cheers