PC Security Test 2006 - for real...???

Batfink · Dec 13, 2006

http://www.pc-st.com/us/

Ive been curious to know just how effective some security products were, and was looking for a way to test them out...

Finding sources was hard enough, other than the EICAR test virus, which was detected by all of the solutions I tried... then I stumbled across this site.. it seemed genuine enough, and was available from many respected sources to download.. so I tried it out...

Now, I tried Kaspersky Internet Security, Spyware Doctor and Anti Virus, neither of which detected ANY of the other test, apart from the EICAR virus.. suggesting their real-time scanning tools dont work...

This program was able to simulate browser manipulation, launch applications, open cd drive, amongst many other things, and gave me a really low score.. basically saying the solutions I had were simply not detecting any of the simulations...

Anyonw tried this, is it a fair test...??

cprtech · Dec 13, 2006

I tried it over a year ago and determined the results to be largely fraudulent. It reported security holes that just weren't there. There were reports by others elsewhere stating similar findings. I don't trust the software.

Rmus · Dec 14, 2006

If you are fast, you can grab the files and save to another location for review - they are deleted upon completion of the test.

I didn't run all of the tests, but here are a few.

Port scan test: it attempts to connect out to the pcsecurity server.

http://www.urs2.net/rsj/computing/tests/pcsec/scan.gif

If allowed, it scans:

http://www.urs2.net/rsj/computing/tests/pcsec/scanlog.gif

Virus/spyware tests. Some results:

VIRUS : Intrusion into Windows system files
During this test, PC Security Test places an apparent virus among the system files.
Click to expand...

VIRUS : Simulation of a file infected with a known virus

During this test, PC Security Test places a infected file into the Windows system directories.

This is a basic attack that any virus protection software should detect and neutralize.
Click to expand...

VIRUS : Simulation of a file infected with an unknown virus

During this test, PC Security Test places a file containing malicious
code into the Windows system directory.

This file has all the characteristics of a virus (size, location, code, profile,
method of replication).

Basic anti-virus scanners that only detect known viruses through signature identification
will not detect the infected file. The file should be detected by heuristic analysis
anti-virus programs and behavourial analysis anti-virus software.
Click to expand...

SPYWARE : Simulation of spyware being loaded in memory

This test simulates the activity of spyware in memory (known spyware CMESYS.EXE).
Click to expand...

http://www.urs2.net/rsj/computing/tests/pcsec/files_1.gif

VIRUS : Adding a "run at Windows startup" entry to the Windows Registry.

This test simualtes adding an entry to the Windows registry in the
"run at Windows startup" section.

Please note that this attack may not be detected by basic anti-virus programs.
This attack is detected and blocked by real-time protection software.
Click to expand...

http://www.urs2.net/rsj/computing/tests/pcsec/run.gif

Conclusion in the help-faq.txt file:

Here are some things to think about :

1. A simple anti-virus scanner is not enough to protect a computer against all threats.
Anti-virus scanners do not detect spyware, do not prevent hacking and
do not prevent Internet Explorer attacks. They only detect known viruses.
2. Viruses like Sasser infected millions of computers in a few days
though most of them were protected by some kind of anti-virus scanner.
3. Anti-virus programs are often incorrectly used or misconfigured.
4. Every month, Microsoft provides some new patch to correct a security issue in Windows,
OutLook or Internet Explorer. Why do you think this is ?
5. IT departments of large companies spend a significant part of their budgets
ensuring system security but do not prevent the installation of
simple anti-virus scanners and a free spyware cleaners.

It would be simplistic to think that protecting a computer is only about installing a program,
even a good one.

The best security is user attention.
Click to expand...

-rich

________________________________________________________________
"Talking About Security Can Lead To Anxiety, Panic, And Dread...
Or Cool Assessments, Common Sense And Practical Planning..."

--Bruce Schneier

Log in or Sign up

PC Security Test 2006 - for real...???

Batfink Registered Member

cprtech Registered Member

Rmus Exploit Analyst

Log in or Sign up

PC Security Test 2006 - for real...???

Batfink Registered Member

cprtech Registered Member

Rmus Exploit Analyst

Useful Searches