Some interesting "group" Mac AV test results.

They tested the 51 know Mac malware samples and ran a large group of Mac AV programs against them. Supposedly, Intego and ClamXav have taken this test seriously and added some updated definitions to their database files.

This guy left out Avira for Mac, and I was surprised by how bad Kaspersky did in this test.




http://www.reedcorner.net/downloads/malware_detections.pdf


.

 

avast! and DrWeb took the crown hands down.

 

No, I think that would be Sophos was the winner.

 

Hey Blueshoes! Just ran across Thomas' site a few days ago. Was wondering what you were using...if any? Of course I don't have Java enabled.

I have both win7 (parallels) and Mountain Lion on my mac (home). Using Appguard, MBAM Pro, and WSA on win7...WSA (real-time), Sophos (on-demand) on the mac side. Thinking of purchasing "Little Snitch"...even though I have Firewall on and customized.

Regards,

scotsman

 

I have been running Intego and Sophos together for a year now. I also have a Zyxel UTM with Blue Coat enterprise content filtering and I am running an Untangle UTM in bridge mode. BitDefender, ClamXav, and Dr Web for on-demand scans. I play around in the bad part of the web

Run in Mountain Lion Guest Mode when surfing malware sites.
NoScript
Ghostery
Better Privacy
AdBlock Plus
User Agent Switcher when surfing malware sites.
Apple GateKeeper set to App Store only
No Java



Why not enable Sophos real-time scanner on the Mac side. Whocares if it uses some ram.

.

 

Why aren't these AV's picking up all Mac viruses? There's like 100 of them total. How hard could it be?

 

It looks if he used all the known malware, but not all the variants of each. Then there is all the privately known pieces of malware each vendor catches but has not shared with the AV community.

http://mac-security.blogspot.com/2012/11/mac-security-blog-status-report-2012-11.html

.

 

The great Avira free for Mac was not taken into account... how do you like that?

I remember have read somewhere, UK websites if I recall correctly, a couple of articles with quick tests where Avira free came 1st over other paid solutions.
Go figure..

 

http://www.reedcorner.net/mac-av-detection-rates/

Sophos

Kaspersky

 

Avira came in as a 100% with Avast and ZeoBit with what ever malware they were using. 477 samples of what would appear to be two families of Mac malware. There had to be tons of copies of the variants to get to the 477 number. I think the Thomas security corner test was far superior with ALL families of Mac malware, not just two.

Also Avira for Mac appears to be an on-demand scanner only with a scheduler. Useful, but not at least for me, I want my full time main AV to be a real-time scanner AV. I do know SO many people on this site freakout if the Av consumes ram and processor cycles.

http://www.av-comparatives.org/images/docs/mac_review_2012_en.pdf


.

 

Nope, Avira secures your Mac in real-time:

Source

Avira, Avast and ZeoBit 100% effective on the av-comp review from your link.

 

ZeoBit uses the AVIRA engine.

 

Great, I did not catch that. Another real-time Mac AV added to the list. I hope Thomas includes that in his next test.