DRWEB is the Best AV....anyone else agree with this?

From my own experience, DRWEB is the best on access AV out there. Not only is it very light on resources (even lighter than Nod32), it is extremely sensitive and found many viruses and trojans that other AV's have missed. KAV is also very good, but when it come to an on access scanner, DRWEB is the best. Does anybody else out there have any feedback to this thread. Please give a reply, I am interrested in what you think.

Barney

 

A part of my experience re Dr. Web is documented here ( http://boardadmin.funpic.de/viewtopic.php?t=17 ).

Can you tell us a little bit more about your experience?

 

I have used Dr Web as a primary AV scanner on one of my computers here and obviously I think it is very good as both an on-demand and an on-access scanner. It is has a very small footprint, updates quickly and has not let through,over several years, any malware on this box so far.

However, I practise safe-hex and my surfing practices are fairly conservative and therefore my chances of coming into contact with malware are obviously a lot less than my teenage offspring.

In addition, the effectiveness of Dr Web running SpiderGuard may be better under Win98/Me systems rather than Win 2000/XP and the default setting of smart scan may not be the most effective.

https://www.wilderssecurity.com/showthread.php?t=35141


I am very happy in using Dr Web but as with most software programs, the 'best' one is difficult to judge. The best one overall is the one that seems to offer you good protection AND runs well on your particular system.

Since you seem happy with the program, it has stopped various malware getting in, and it seems to suit your system, Dr Web has the best on-access system for YOUR computer.

 

There are NO BEST AV. The best defense against PC gremlins is to keep only the operating system in the primary C partition and image that partition on a regular basis. My WXP Pro C partition is only 709MB. You can configure a good imaging software to automatically image any partition at set interval.

I have a software firewall and an e-mail AV scanner. I do not run the main AV program in the background. Never had a bug in my PC. Use common sense when browsing and avoid porn sites.

F

 

I completely agree with BlackCat that the SpIDer Guard works better under Win9x
than WinNT/2K/XP. Also, the Smart Scan setting is not good for everyone, and system
begins to crawl when the files are set to be scanned when created, opened and
accessed.

Unfortunately, SpIDer Guard under the Smart Scan setting does NOT scan files when
they're executed. You can test this inability yourself. Create EICAR.COM file some-
where on your disk while the SpIDer Guard is disabled. Then enable it back and apply
the Smart Scan setting. Open a command prompt window and change the working
directory to the folder containing the EICAR.COM file. Type EICAR and press enter,
you'll notice that SpIDer Guard fails to detect this dummy virus and lets it execute
freely.

Another problem with SpIDer Guard is that it can't be paused or stopped temporarily,
correct me if I'm wrong. DrWeb scanner is not without its own problems, either.
It has the tendency to inflate the processes while scanning the memory. While this
may not be a real problem, it does make the system look cramped and lacking free
memory for a few minutes. To the best of my knowledge, no other AV scanner does
what DrWeb does to the free memory.

Regards,
AgentX

 

Oh gee... that link uses microscopically small gray print against a jet black background. Much too hard to read.
~~~~~~~~~~~~~~
Concerning DrWeb, it's my main AV & a real rottweiler.

DrWeb makes it difficult to test any other AV. Even if I kill DrWeb from the start-up list {so that it does NOT show in Process Explorer when I reboot} DrWeb still pounces on my malware specimens before the AV I am testing even gets a chance.

Thus, to test another AV I have to uninstall DrWeb. Of course, this could be a peculiarity of my particular computer set-up. Has anyone else had similar experience?

grace & peace to all... bellgamin

 

Bill,

can't you simply right-click on the SpiderGuard icon in the system tray> Control, then select REMOVE from the Load Mode option. You can then choose Load/Install to get SpiderGuard back again after your testing.

 

@bellgamin

Help me if you can. I am not an artist. Provide me with a better style, tell me how to increase the font size etc. ... and I will consider you suggestions.

 

Paul:

We have discussed this before. Previously, I had problems with this forum. I could not log in because I was deemed logged in (although I was not).

I will try to log in as "Nautilus" in order to confirm that it's actually me. But I was never impersonated before. Therefore, I do not really need a registered name.

 

O.k.: I confirm that I am what I am.

Damn. I have a PM dated 19 June 2004 ...

 

I see that site on a medium dark blue background with white text and it is not difficult to read. I have trouble reading a lot of sites but that one seems fine to me. This is on XP using nVidia GeForce 5200 on a flat panel digital monitor. On my W98SE box I see a jet black background with white text. I have the original ATI video card on that box and a Trinitron CRT monitor.

So, how you see it is combination of your video card and your monitor. Are you using Firefox or Mozilla or Opera? I use Firefox and Mozilla almost exclusively and I started using them a couple of years ago because they had text zoom and it is very easy to increase text size for everything on the web page..unlike IE. So, you might consider one of those browsers as the default text size on that site is very small. I just enlarged it with text zoom.

 

In IE hold control and use mouse wheel.

 

Belgamin, you don't have to uninstall DRWEB at all when you test out another antivirus. All you have to do is go into "Control Panel" and open up the DRWEB icon. From there, just click on the remove button. This will turn off the drweb spiderguard. When you are ready to turn it back on all you have to do is reboot and start it back up through "Control panel" again.

Barney

 

dear f123, what makes you think keeping only the Windows files in C drive will protect you from viruses?

dear AgentX, i don't blame the Smart Scan technology. it just assumes that the files created before activating the Spider Guard are clean. this is why it has so small impact on the resources. its really smart if you keep it enabled all the time and regularly do full system scan.

 

Keeping ONLY the OS in the C primary partition DOES NOT decrease the chance of contracting a bug. However, it greatly facilitates the time it take to create/restore the image file. A modern PC can process the image file at 800MB/min....

Those with a big HD can set up a large extended logical partition to house the image files. One can pack about 40 image files in a 40GB partition. Most imaging software can create the image file via TASK SCHEDULER...while you're sleeping.

If you have a "clean" image file of the OS, then you should be able to restore the PC to the time prior to the virus infection. I test hardware, software, and PC gremlins. I install everything in the C partition when testing. Upon completion, I simply restore the good image file. And reboot back to windows. The entire restoration process takes less than 2 minutes. No AV or FW can claim this success rate.

F

 

Today's bugs are more interested in hijacking the PC...for self-propagation. Unfortunately, a few bugs will destroy data. Therefore, if you have important data, then put them in the C partition so they will be included during the imaging process.

To me, running a full-time AV scanner wastes precious CPU clock cycles. Most AV proggies will allow the user the option to manually scan a suspicious item for infection.

F.

 

Oh yes, it works! Thanks for the suggestion. Also thanks to Barney -- same suggestion as BC, but in different words. Thanks.

It's interesting that DrWeb will remove itself from startup, but neither StartUp Cop nor Mike Lin's Startup Control Panel can truly remove DrWeb from startup. They *seemingly* remove DrWeb, but then DrWeb still loads.

I wonder -- is that a bug or a feature?

 

dear f123, thats a good suggestion but sadly holds true for a poor soul without a CD burner. the image is useless if you lose your HDD. as the current threats are worms an image won't help you if your OS or some software is vulnerable.

 

The chance of a sudden HD death is rather slim because today's HD employs the SMART monitoring protocol. The user would loose the data anyway if the HD crashes...so what's the difference? The best in firewall and AV protections will not save a dead HD!

Writing to an extended logical partition on the primary HD is MUCH faster than an optical media. Use Bootitng (30 day trial) to repartition the primary HD. Paranoid souls could add a $50 slave HD for backup purpose. We've been using this method of data recovery for years without any problem.

If one has a good image file of the OS, then one can use it to over write the damaged OS! An imaging software does not rely on a functional OS or software in the HD to restore the image file. That's why it is important to create the boot discs/CD when installing the imaging software. Visit the Acronis forum to learn more about drive imaging and its limitations.

F

 

http://www.virusbtn.com/vb100/archives/products.xml?drweb.xml

It doesn't seem to be a very good antivirus to me.

 

As with other AntiVirus programs e.g. Kaspersky, the results from any ONE site do not tell the full picture.

In addition, the very strong heuristics of Dr Web means it can give more false positives compared to most other AV programs. And unfortunately false positives mean you 'fail' that particularly test over at Virus Bulletin.

Most people who are (have) used the program would say that it is much better AV than the results over at VB suggest.

 

I'd rather have my AV err on the side of caution.

 

I use Dr.Web and I like it.
With strong heuristics you have to be willing to sort out the occasional false positive.
That doesn't bother me.I've only had a few so far.
What AV is the best?
That's something an individual user has to decide.