DRWEB vs. NOD32...My conclusion.

Yes. Both versions use the same virus signature files.


tECNODROME

 

That doesn't look so bad! Mine never had NOD written on it and it was darker bloodred not a vivid scarlet red like yours. That may be explained by the fact I was using NOD32 version 1 on my older 98SE box with an ATI video card. The colors of everything on that box are totally different from the colors with my new XP box with nVidia and digital vibrance enabled. Yours doesn't look hideous like mine did.

I'm curious as to why anyone is still using version one. I was wondering why there is still activity in the version one forum. Isn't that version way too old now?

 

I have an opinion on both Nod32 and DRWEB. Most people say that DRWEB is a slow on demand scanner. I never did any accurate tests, but from what I see, DRWEB is a very fast and thorough scanner. I say it is definately right up there if not a little faster that NOD32. Does anybody else agree with this?

Barney

 

Glad to read something else about NOD32. I agree with you completely. I am running Dr.Web for about a month now and I'm amazed about the speed, updates, malware catches etc. I have been using Nod32 for quite some time and never regretted switching to Dr. Web.
I find Nod32 a hard program to configure and it didn't handle infected mailattachments properly, received through the Eicar Mailtest, as Dr. Web detected them all and dealt with them properly!!!!!
I still believe that an infection should be dealt with by the AV program and it should not be left to decide what to do with it and scan your whole system or whatever, in order to get rid of the infections. That's the problem with eTrust as well at the moment.
But this is all a personal idea and feel very comfortable with the very fast and effective Dr. Web. But I have it configured with the smart scan option and if you configure it scanning all files, it surely slows down, but I'm comfortable with the smart scan option!!!!!!

Cheers...... Putin

 

I also run DRWEB with the Smart Scan option. Is it possible to run Spidernt on run/open - create/write mode with out a slowdown in system speed. What kind of system requirements does it actually take to use this more thorough scanning mode. I remember that I tried it once in the past, and I did notice a slowdown. To me it was about equivalent to the speed of Kaspersky on a bad day. I really hope they get this resolved, because it would be nice to use this feature.

Barney

 

Any system that does not run on NT platform.

It probably takes more then just one small patch to fix this. This is a known problem for years now. I'd guess they need to rewrite spiderNT code from scratch.

On side note:Smart mode combine with regular on demand scans will protect you just fine.


tECHNODROME

 

Does anybody know whether DRWEB is in the process of coming out with a completely new and improved version of DRWEB? Don't get me wrong, DRWEB is working good, but there is always room for improvement...especially the slowdown when the scan setting are changed in Spidernt.

Barney

 

Comparing NOD32 and Dr Web and only come up with a little faster Dr Web is not cool. NOD32 detects much more than the doctor. And that is a fact. Have a look at Av-compartives. And watch out for their new results which should come out in less than ten days from now. If all's well!

 

How accurate are the tests on AV-Comparatives? Are they anything like virusbtn.com. I feel virusbtn.com's scores are over rated. I don't feel one false positive should completely disqualify an antivirus program even though they earned a 99.999999999999999999999999999999 percent detection rate.

Barney

 

Looking at what they do and how they do it I think they are far more credible than the ons you mention plus a few others. The Greek av-site for instance rates strange too. And there all kinds of things are counted in which have no meaning. So NOD32 is somewhere around 20 there. VirusBTN is a nice gimmick for an overall view. If you look at how AV-compartives results look you must agree with me that it looks impressive.

 

While I respect your opinion, one only needs to look at the very recent issues with fp's that both KAV and F-PROT have dealt with to know that fp's can indeed be a very big deal.

 

I don't deny the results in AV-Comparatives testings 08-2004, but "much more" is a bit over reacting, 88.12 % with NOD vs. 87.38 % with DrWeb in Total without DOS & OtherOS malware is in my mind inside the error marginal.

What I really know in my own experience against my 3014 infected samples,

1243 Trojan like malware

85.4 % -- DrWeb & NOD32 with AH

-------------------------------

526 Script like malware

93.5 % -- DrWeb

82.1 % -- NOD32 with AH

-------------------------------

1060 VIRUSES as a whole

92.4 % -- DrWeb

83.0 % -- NOD32 with AH

-------------------------------

185 riskware

41.1 % -- DrWeb

49.7 % -- NOD32 with AH

and not submitted any sample to any av-vendor, let's look at the situation again after some months.


Best regards,
Firefighter!

 

Hi Firefighter,

Looks like to me both DRWEB and NOD32 provide good everday protection. I am not sure about your samples as all being current stuff out there that someone might encounter? I use three different AV on four machines. We have NOD32 on a game machine used by a bunch of teens. NOD stops a lot of infections they come across looking at the gaming platforms walk throughs and cheat sites amoung other things teens do. Looking at your results they probably have about a 20% chance of getting infected by a current virus, etc. if they use NOD32. However, to date that hasn't happened?

Seeing your post on another forum that DRWEB was very low in resource usage I did try DRWEB for a short test. It did seem to slow things down a bit compared to NOD so I put NOD back on that gaming machine. That may have been my fault as I may not have set up DRWEB for the best performance.

I guess in the end I just have to take all of these test results with a grain of salt and based upon my day to day experence using the different AVs.

 

In my mind excellent point of view. But don't forget a backup av-scanner, even that you are using KAV as your resident scanner for instance.

Best regards,
Firefighter!

 

Hi Firefiighter,

Good advice! On that game machine we also have BOClean running and in addition run eScan about once a week to double check.

Take care,

-

 

Very good backup that eScan to every av:s except KAV ones and a free one.

Today findings with eScan Free from one PC of a friend of mine, who has used Avast 4.5 Home and the former versions of it a couple of months now also by using Norman VC's firewall updated and/or configured what so ever! Of course the Win98 SE was also unupdated. After all, very common PC user.

TrojanDownloader.Win32.Wintrim.cd
TrojanDownloader.Win32.Lookme.g
TrojanDownloader.Win32.Wintrim.bw
TrojanDownloader.Win32.Agent.br
TrojanDownloader.Win32.Agent.bt
TrojanDownloader.Win32.Agent.ex

Avast is still quite good against trojans but even it has their limits. I have not yet these nasties in my collection but maybe tomorrow, when I'm gonna clean that baby.

That guy hasn't even any SpyBot or Ad-Aware, 560 findings more with Ad-Aware.

Best regards,
Firefighter!

 

Does anybody know any other good websites that show antivirus detection results for both DRWEB and NOD32. I want to see some good comparisons on both of these.

Barney

 

Don't forget to submit samples to company that missed them

 

from www.virus.gr, their latest test from August:

Code:

1. Kaspersky Personal Pro version 4.5.0.58 - 99.09%

2. F-Secure 2004 version 4.71.5 - 98.77%

3. Extendia AVK Pro version 11.0.4 - 98.68%

4. AVK version 14.0.7 - 98.50%

5. Kaspersky Personal version 5.0.149 - 97.88%

6. eScan 2003 Virus Control version 2.6.484.8 - 96.75%

7. McAfee version 8.0.41 - 93.59%

8. Norton version 2004 Professional - 93.38%

9. RAV version 8.6.105 - 93.14%

10. F-Prot version 3.15 - 91.85%

11. Command version 4.90 - 91.41%

12. Panda Titanium version 3.02.00 - 91.38%

13. Norton Corporate version 9.0.0.338 - 90.29%

14. Panda Platinum version 7.05.04 - 89.97%

15. MKS_VIR 2004 version 2.0 - 89.45%

16. Virus Chaser version 5.0 - 89.07%

17. BitDefender version 7.2 - 88.52%

18. BullGuard version 4.5 - 87.26%

19. Dr. Web version 4.31b - 85.35%

20. PC-Cillin 2004 version 11.00.1253 - 84.80%

21. Nod32 version 2.0.0.9 database 1.840 - 82.68%

22. Sophos Sweep version 3.84 - 81.31%

23. Avast version 4.1.418 - 80.55%

24. AntiVir version 6.27.00.01 - 79.57%

25. Vexira version 2.14.00.01 - 79.50%

26. AVG version 7.0.262 - 72.50%

27. Norman version 5.70.14 - 67.72%

28. UNA version 1.83 - 62.85%

29. Solo 2.5 version 2.6.3 - 61.08%

30. ZoneAlarm with VET Antivirus version 5.0.590.015 - 60.82%

31. Fire version 2.7 - 60.52%

32. E-Trust version 6.2.0.28 - 58.48%

33. V-Buster Pro - 57.61%

34. Protector Plus version 7.2.F04 - 51.28%

35. VirScan Plus version 14.091 - 48.36%

36. ClamWin version 0.35 - 48.08%

37. ViRobot Expert version 4.0 - 45.68%

38. MR2S version 1.47 - 44.36%

39. V3Pro 2002 Deluxe version SP2 - 42.33%

40. RHBVS version 4.13.656 - 41.99%

41. Digital Patrol version 5.00.08 - 38.52%

42. Quick Heal version 7.01 - 30.13%

43. Wave version 2.0 - 22.07%

44. TDS version 3.2.0 - 16.67%

45. PestPatrol version 4.4.3.24 - 15.34%

46. A Squared 2 - 15.05%

47. AntiTrojan Shield version 1.4.0.9 - 11.82%

48. PC Door Guard version 3.0.0.14- 11.77%

49. Trojan Hunter version 3.9.807 - 6.76%

50. The Cleaner version 4.1.42.52 - 6.34%

Go to that site and have a deep insight in how the tests are performed and what all the results are. The site has a strange way of testing

 

The Heuristics on DRWEB are very sensitive indeed. When I go to ebay, every time a new web page loads, I get a script virus detection. Has anybody else experienced this with DRWEB? Has anybody ever experienced this with NOD32 also?

Barney

 

NOD32 shouted but once when I went to www.bugmenot.com

 

First thumbs up to these!

Best regards,
Firefighter!

 

The second thumbs up to these. Unfortunately missed the rest samples.

Btw, a bit unsatisfied to McAfee VSE 8.0i, missed both of them.

Best regards,
Firefighter!

 

Wow Firefighter, it looks like NOD32 found a virus that DRWEB didn't on that test. Do you know of any tests that show where DRWEB found viruses that many other antivirus programs missed? If you do, tell me where to look. I would be interrested in reading about that.

barney