New AV Test From SSU

http://ssupdater.com/modules/Forums/index.php?showtopic=3746

 

For those who are not familiar with this excellent website, the choice of programs to be tested was voted on by the members with the exclusion of those Av's like Avira, Kaspersky, etc which were going to be included no matter what.

Just though it should be mentioned in case anyone had questions about the inclusion criteria.

 

Looks like Avira tops again and Avast pleasantly surprises us all.

 

Now I want to know if there are many clean/corrupted samples in the test,and if they have enough ability to analyze if all of them contain malicious code

 

yeah, that $8.00 antivirus didnt do to bad either.

 

yes, yes and yes.

 

[fanboy on] Way to go Twister, little fella! (not that i care about what AV tests say). Stood up with dignity! [/fanboy off]

Does CIS include the D+ module in the score?

What's the engine of "Spy emergency"?

 

What's really surprising is the Comodo CIS result - OK 92% isn't that good but hey - for a free security suite with a very new antivirus this isn't too bad . According to Melih it will take some month until the antivirus is on par with Kaspersky & Co. - so let's wait and see ^^

 

yeah, for Comodo, ~92% is great on which/whatever samples...

 

hello........the most suggested and advocated mbam and superantispyware are languishing at the bottom....

 

I haven't checked this test lately, anyway I had a look at that test on last August and, from what I remember:

1) Not well selected samples (read: let's get all together what is supposed to be infected)

2) Some corrupted samples (yes, some av can still detect them, it depends on the kind of signature used and rules applied - i.e. if a file is corrupted then scan it anyway or not)

3) Wrong file extensions (some files were packed too, while the extension was saying another kind of file)

4) Source codes present inside the collection. Why those? What's the goal with them?

5) Harmless files present inside the collection (i.e. plain text files)

 

It would be interesting to know if CIS AV3 did the work alone or also with the help of D+. But very good beginning

 

I'm starting to believe to the sample corruption. Unless they are using a terribly small amount of spyware, and half of it made up of cookies, I can't really believe this:



28. Ad Aware - 28.04%
29. SuperAntiSpyware - 07.24%
30. Malwarebytes Anti-Malware - 02.66%

 

29 and 30 rely on file name detaction (malwarebytes does it quite extensive), so it's good for cleaning an infected system which has sychost in c:\windows but once that program is renamed to 4e3d2eea13ea8.... it won't detect it based on file name

 

I don't know about SAS(Maybe Nick can tell us something about it), but MBAM doesn't detect only using file name detection

Look here: http://www.malwarebytes.org/forums/index.php?showtopic=6316

 

if D+ was tested, testing will for sure be in progress for some time in very long future, and of course when finnished will be at ~100% on testing board...
D+ WAS NOT TESTED . (← period)
P.S. try to execute 800025 items and answer to all D+ questions, number of clicks will be ~∞...

 

Wow, Avast is breathing down the necks of Avira.

 

Oh.... PLEAAAASE..... this is so ridiculous it isn't even funny anymore....


Edit: ow wait, they added the IKARUS engine... hooray for an incredible amount of FPs

 

Not really, since it includes Ikarus engine since version 4...

 

@emperordarius
SAS en MBAM are especially for cleaning, not for 'normal av on-access' detection.

@rolarocka
It's on-demand scanning so no help of D+ there.

 

Too bad that it seems to have a lot of positives

a-squared Anti-Malware - Good - Extreme Caution!

 

Yes, I know, but if they got so low scores there musn't have been many spyware samples.

 

Ow well, Avira improved in this too. Personally I must say that I saw more fp's from a2's own engine then from Ikarus.

Probably. Maybe many viruses were packed, and SAS an MBAM don't have (or very little) unpackers as far I noticed (a couple of months ago).

 

Why panda 2009 products are not on that Test?
Is a relevant player.

 

They probably don't wanna be in the test, just like they don't wanna be in almost all other tests. I wonder what they are afraid of?!


Cheers