What's closer to KAV.. NOD32 or Avast?

Yeah,but usually most of ppls don't even know there is a VB100% magazine,thats the problem... Ok i think we should stop. We went to offtopic. Thanks for the "chat" I'll say they are both close to KAV

 

The Avast! takes more resources (RAM and CPU) that NOD32?

 

Mcafee is probably the closest to kav in the area of unpackers and trojan detection.

 

yes if you only calculate the amount of malware/unpackers in the db's.. signature quality is a completely different thing.. the other of the two has way better detection, i think you know which one i'm talking about!

 

I like Avast but...
it didn't detect an eicar test file, this one :

http://www.securite-informatique.info/virus/eicar/download/eicar_niveau30.rar

It is a 30th level recursivity archive with zip and rar archives in it and an eicar.com inside.

Kaspersky detected it...

What I dislike in kaspersky is : no automatic software update, just signature update, we have to update the software ourself...

 

There is a simple archive scan method rule. Scanning 30 levels deep is the most moronic idea ever thought about. Its scanned on extraction/access anyway,when its in archive its completelly harmless.

 

Does Kasperski detect it with real time analysis or only with on access scanner ?

 

To everyone from Firefighter!

In my experience Avast 4.1 has better overall protection than NOD32 but NOD32 with AH has better unpacker capabilities than Avast 4.1. It's up to you to decide which characteristics you prefer most.

About VirusBulletin tests, I assume that you all know my opinion about those tests where samples where known (or somewhat 99 % of them) before the tests.

Best regards,
Firefighter!

 

With "on demand" scanner, I mean I right click on file and choose "scan".

Avast though detect the 12th level recusivity archive though, so it is ok.

Avast did not detect some eicar files when they are renamed, with the same method (right click). But I guess a virus with a weird extension is harmless, no way for it to execute...

 

Whole point of renaming/modifying EICAR is pointless. EICAR must be 100% matched with detection pattern. If not antivirus is messed up. Its test file not a real virus with specific structure of instructions and commands.

 

dear The Gloomy Kestrel, when you checked those renamed EICAR files did you configure to scan ALL file extensions? if not then renaming it to a weird extension won't let AVAST or any AV detect EICAR. lol scanning inside 30th archive level sounds very paranoid. but its nice to know that KAV picked it up.