Personal AV tests

Discussion in 'other anti-virus software' started by dan_maran, Apr 30, 2005.

Thread Status:
Not open for further replies.
Page 2 of 3
  1. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,886
    Location:
    Innsbruck (Austria)
    35 garbage files in 3333 is 1% (and not 0,01%!)
    811 garbage files in the large collection, which is 1,5%
     
    IBK, Apr 30, 2005
    #26
  2. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    98031
    Sorry about the typo.

    CRC32 Log is now updated for the small, working on the large, not the zip though.
     
    dan_maran, Apr 30, 2005
    #27
  3. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    8,251
    Location:
    The land of no identity :D
    I'd totally and completely agree with Happy Bytes, because he's been in the industry for quite some time now, and is a very active malware analyser. He knows what he says perfectly well.

    @HB: I'd be interested in having your guidelines for AV testing, though I usually dont look upon just detection.
     
    Firecat, Apr 30, 2005
    #28
  4. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,886
    Location:
    Innsbruck (Austria)
    Please remove also those from the small set and update it later again please:
    E:\VIRUS!\Live\VIRUS\0\00\00C8F6A9.COM
    E:\VIRUS!\Live\VIRUS\1\10\10E92B3F.COM
    E:\VIRUS!\Live\VIRUS\1\17\173B7FD8.COM
    E:\VIRUS!\Live\VIRUS\1\19\19145773.COM
    E:\VIRUS!\Live\VIRUS\1\19\1999EC1D.bat
    E:\VIRUS!\Live\VIRUS\1\1D\1DDBC2B6.COM
    E:\VIRUS!\Live\VIRUS\2\20\20F9F9CA.EXE
    E:\VIRUS!\Live\VIRUS\2\25\2592C58A.COM
    E:\VIRUS!\Live\VIRUS\2\28\281CDB60.COM
    E:\VIRUS!\Live\VIRUS\2\2A\2A2E159D.COM
    E:\VIRUS!\Live\VIRUS\3\31\319FB6D6.COM
    E:\VIRUS!\Live\VIRUS\3\31\31D150CE.COM
    E:\VIRUS!\Live\VIRUS\3\32\32C8B783.COM
    E:\VIRUS!\Live\VIRUS\3\36\368812A6.COM
    E:\VIRUS!\Live\VIRUS\3\3B\3B945CAA.COM
    E:\VIRUS!\Live\VIRUS\3\3C\3CD7F76F.COM
    E:\VIRUS!\Live\VIRUS\3\3D\3D60F342.COM
    E:\VIRUS!\Live\VIRUS\3\3F\3F4791C8.COM
    E:\VIRUS!\Live\VIRUS\4\45\4555A480.COM
    E:\VIRUS!\Live\VIRUS\4\46\4628793E.COM
    E:\VIRUS!\Live\VIRUS\4\47\47F89B9E.COM
    E:\VIRUS!\Live\VIRUS\5\51\51A614C4.COM
    E:\VIRUS!\Live\VIRUS\5\52\523CE5C2.COM
    E:\VIRUS!\Live\VIRUS\5\53\537F7F50.exe
    E:\VIRUS!\Live\VIRUS\5\54\5493ECC8.COM
    E:\VIRUS!\Live\VIRUS\5\5D\5DCD8EF7.COM
    E:\VIRUS!\Live\VIRUS\5\5F\5FD51BB1.COM
    E:\VIRUS!\Live\VIRUS\6\63\63135C6A.COM
    E:\VIRUS!\Live\VIRUS\6\67\674717E2.COM
    E:\VIRUS!\Live\VIRUS\6\6B\6B7B7232.COM
    E:\VIRUS!\Live\VIRUS\6\6C\6CE5D2FA.COM
    E:\VIRUS!\Live\VIRUS\7\78\7830ED9C.plugin
    E:\VIRUS!\Live\VIRUS\7\7C\7C5070F5.COM
    E:\VIRUS!\Live\VIRUS\7\7E\7ED2BDBC.eml
    E:\VIRUS!\Live\VIRUS\8\83\83D2248E.COM
    E:\VIRUS!\Live\VIRUS\8\84\843898AF.EXE
    E:\VIRUS!\Live\VIRUS\8\8C\8C1D2060.COM
    E:\VIRUS!\Live\VIRUS\9\91\9184085F.COM
    E:\VIRUS!\Live\VIRUS\9\9C\9C36573F.COM
    E:\VIRUS!\Live\VIRUS\9\9E\9EAB7747.EXE
    E:\VIRUS!\Live\VIRUS\A\A1\A134C9C7.exe
    E:\VIRUS!\Live\VIRUS\A\A4\A482CBD8.COM
    E:\VIRUS!\Live\VIRUS\A\AD\AD9A92E5.COM
    E:\VIRUS!\Live\VIRUS\A\AF\AF607D1E.COM
    E:\VIRUS!\Live\VIRUS\B\B0\B0E5F81F.COM
    E:\VIRUS!\Live\VIRUS\B\B7\B72504B1.COM
    E:\VIRUS!\Live\VIRUS\B\B9\B9BF2AAA.COM
    E:\VIRUS!\Live\VIRUS\B\BD\BDB08E25.COM
    E:\VIRUS!\Live\VIRUS\C\C3\C373299A.COM
    E:\VIRUS!\Live\VIRUS\C\C6\C6A157D5.COM
    E:\VIRUS!\Live\VIRUS\C\C7\C7942545.COM
    E:\VIRUS!\Live\VIRUS\C\C8\C89AAF19.COM
    E:\VIRUS!\Live\VIRUS\C\CE\CED2F9B0.ex
    E:\VIRUS!\Live\VIRUS\D\D9\D90B05AC.COM
    E:\VIRUS!\Live\VIRUS\D\DA\DA3211B8.COM
    E:\VIRUS!\Live\VIRUS\D\DB\DB549023.EXE
    E:\VIRUS!\Live\VIRUS\D\DE\DEA46F9E.COM
    E:\VIRUS!\Live\VIRUS\D\DE\DEAC286A.COM
    E:\VIRUS!\Live\VIRUS\E\E1\E17BD388.COM
    E:\VIRUS!\Live\VIRUS\E\EC\ECE53E86.COM
    E:\VIRUS!\Live\VIRUS\F\F4\F4A099D8.COM
    E:\VIRUS!\Live\VIRUS\F\F6\F603FB9A.COM
    E:\VIRUS!\Live\VIRUS\F\FD\FD583789.EXE

    I post it here as this is faster than uploading etc.
     
    IBK, Apr 30, 2005
    #29
  5. Diver

    Diver Registered Member

    Joined:
    Feb 6, 2005
    Posts:
    1,444
    Location:
    Deep Underwater
    Testing AV's can be fairly difficult. The main problem is acquiring a collection that is representative of what is out there.

    It takes a lot of time and effort. IMO, it is best to rely on an expert, like AV-Comparatives.
     
    Diver, Apr 30, 2005
    #30
  6. Firefighter

    Firefighter Registered Member

    Joined:
    Oct 28, 2002
    Posts:
    1,670
    Location:
    Finland
    Still there are over 97 % of samples left, how accurate must those "private tests" be?

    Best regards,
    Firefighter!
     
    Firefighter, Apr 30, 2005
    #31
  7. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,886
    Location:
    Innsbruck (Austria)
    They have to be so much accurate as possible.
     
    IBK, Apr 30, 2005
    #32
  8. Stan999

    Stan999 Registered Member

    Joined:
    Sep 27, 2002
    Posts:
    566
    Location:
    Fort Worth, TX USA

    Well, I guess you could also say, how inaccurate are the "private test". It would seem to me that it would be prudent for you to do the same for your collection.
     
    Stan999, Apr 30, 2005
    #33
  9. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    98031
    I see where you got the latest list from IBK, and I am working on that now.
    I don't know how much longer I will be working on this today, but I would just like to thank you for helping me sort this out.
     
    dan_maran, Apr 30, 2005
    #34
  10. JimIT

    JimIT Registered Member

    Joined:
    Jan 22, 2003
    Posts:
    1,035
    Location:
    Denton, Texas
    I would disregard any test beds that contained almost 1000 non-viral files. ;)



     
    JimIT, Apr 30, 2005
    #35
  11. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,886
    Location:
    Innsbruck (Austria)
    Np ;)
     
    IBK, Apr 30, 2005
    #36
  12. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    98031
    If you are refferencing my large testbed, it has so far 811 out of 53,992. I am not going to disregard that for 811.

    But to each there own. :)

    //Edit//
    In retrospect, this s great excersize for all who have "collections" you learn something new all the time. ;)
     
    Last edited: Apr 30, 2005
    dan_maran, Apr 30, 2005
    #37
  13. controler

    controler Guest

    likuidkewl

    I will commend you for your efforts. It is nice to see someone actualy
    testing for themselves instead taking every other persons word for it.

    How far will you be taking your testing? Will you be doing a detection after infection test? Will you be hexediting any of your samples to test?
    Are you sticking to only testing those to AV's?

    Thank You

    Bruce
     
    controler, Apr 30, 2005
    #38
  14. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    98031
    Well as of right now it seems most of my time will be spent cleaning the crap out fo the collections, the large one will take longer but the smaller collection should be good to go soon. thanks to IBK. I don't believe I have the capacity to fully test an outbreak so more than likely it will be Od testing only. I plan on testing more than just those to but I need to get my ducks in a row first.
    Thanks for the input.
     
    dan_maran, Apr 30, 2005
    #39
  15. Wack Thomas

    Wack Thomas Guest

    Liku...,

    You da man.

    Although you may not achieve the same complexity as the pro's, you are giving it a shot.

    And every bit of info we get can be utilized in to form a total picture.

    Appreciate your time and effort.
     
    Wack Thomas, Apr 30, 2005
    #40
  16. Happy Bytes

    Happy Bytes Guest

    At least i have some "respect" for this likuidkewl guy, because he's taking advices based on facts and does do actually something to correct the things, that means i'm willing to help this guy if he has more questions. That's a thing what will never happen for Firefighter 'tests', cause he's not willing to let him help. Andreas Clementi uses every possible chance to ask him for CRC checksums etc - no reply.
     
    Happy Bytes, Apr 30, 2005
    #41
  17. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,886
    Location:
    Innsbruck (Austria)
    @HB: I got today a reply from FF, asking me for how to make the CRC lists, so maybe I will get the list from FF soon (better late than never).
     
    IBK, Apr 30, 2005
    #42
  18. dog

    dog Guest

    You can sign me up too HB. ;) But you already know that, I'm just making it official. ;)
     
    dog, Apr 30, 2005
    #43
  19. Happy Bytes

    Happy Bytes Guest

    I count 3 replies so far ;) :D
    Only El Presidente Paul Wilders could add 5 voices at once :D
     
    Happy Bytes, Apr 30, 2005
    #44
  20. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    You can sign me up too HB.
     
    Stephanos G., Apr 30, 2005
    #45
  21. Happy Bytes

    Happy Bytes Guest

    3.5 ;)

    Are you already adult?
    Oh well... 4 ;)
     
    Happy Bytes, Apr 30, 2005
    #46
  22. JimIT

    JimIT Registered Member

    Joined:
    Jan 22, 2003
    Posts:
    1,035
    Location:
    Denton, Texas
    Hey--not putting you down. Keep on rockin'! At least you're trying to clean it up. ;)



     
    JimIT, Apr 30, 2005
    #47
  23. no13

    no13 Retired Major Resident Nutcase

    Joined:
    Sep 28, 2004
    Posts:
    1,327
    Location:
    Wouldn't YOU like to know?
    mesa 5...
     
    no13, Apr 30, 2005
    #48
  24. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    HB, u need 1.5 more for the record:)
     
    Stephanos G., Apr 30, 2005
    #49
  25. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    8,251
    Location:
    The land of no identity :D
    You been watching too much of The Phantom Menace? :D
     
    Firecat, Apr 30, 2005
    #50
Page 2 of 3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...