February On-Demand Predictions

that is a scary thought. makes me think that half of ones tested will fail.

 

such a tease.

 

I don't think hes joking. if it really does happen i guess there will be lots of signature adding after the test.

 

If so many samples have been added, there's also a bigger likelyhood that new corrupted samples have been added. During the last months there have been a few waves of corrupting malware as well as mass-spamming with corrupted samples. It will be a lot of work to sieve them out. Also there were quite a few new polymorphic worms, which hopefully did not end up in the normal set as standard files, but should go into the polymorphic set. One undetected poly worm variant can mean tens of thousands of missed samples in the standard set which could severely skew the statistics.

Looking forward to seeing the results anyway

 

Yeah, I remember well those waves of Backdoor-CEP.svr junk on VT. Those samples were patched beyond any functionality. But still, some certain AV caught most of them just because they made a very silly detection based on the file size of the malware. IBK, I hope you didn't add these crap files to your collection.

 

You have read my mind
I was thinking in corrupted samples too. Although, with the recent trends on malware writing, is not unlikely that many AVs begin to miss more samples than expected.
IBK, it seems that you need more help/money/time to manage the test bed?

 

yes, that might be a problem. I've noticed those samples too, but I'm sure IBK has good ways of selecting the samples. He's online now as I see and perhaps he can answer.

btw, I trully hope AVs will add undetected working samples after the test, not expecting the next one to come to add them...

 

like you say

 

AV Comparatives Februari 2007

In februari a new AV Comparatives test will arrive.
Any idea when it will be released?

I know Trend is never competing, but I'm very curious how they will do.
Also I hear only a few will do good this time?

who will it be??

 

Re: AV Comparatives Februari 2007

1st march i think....

 

Re: AV Comparatives Februari 2007

The February results don't usually appear till 1 March or thereafter.

 

Re: AV Comparatives Februari 2007

FYI: av-comparatives is changing server. due that, the website may be unreachable for some hours during the next days (and displays some errors).
the website code will be re-written (optimized) and the website speed should be faster.

 

Re: AV Comparatives Februari 2007

Sounds good!

 

Re: AV Comparatives Februari 2007

Lets guess....

1 - KAV based
2 - AntiVir
3 - NOD32
.....

 

Re: AV Comparatives Februari 2007

Only guess i make is that since IBK has included comodo into the test results that they are having less than 30 percent detection.

 

Re: AV Comparatives Februari 2007

Comodo and others will be tested in a separate test whcih will be published mid-March. Please wait some more weeks, also my own predictions were wrong. we will see.

 

Re: AV Comparatives Februari 2007

I´m waiting for the FPs

 

Re: AV Comparatives Februari 2007

@IBK, comodo says their strong point is the hips, so you have to execute the malware to get results from it. will this test be like kav's pdm test?

also, are there any plans to change the testing methodology in the future, seeing as more AVs begin adopting different solutions then signatures and heuristics?

 

no. since comodo is called an antivirus and not comodo HIPS, the test is legit. as seen in other tests, making a HIPS which warns about everything and due that gets high results is a quite easy task, while delivering a good antivirus with high detection rates is much more difficult.

 

is comodo really only 30% detection? *lol*

 

Re: AV Comparatives Februari 2007

IMHO, AV-Comparatives´ tests are mainly focused to AV engines, not security solutions.

 

Re: AV Comparatives Februari 2007

yes, but it might not be possible to keep those 2 separated for long. avs are getting different things, that stops separating them from the traditional Avs .

 

avast advanced maybe?
lodore

 

IBK has said alot wont be getting advanced+ which tells me the test this time round is a difficult one,

still hoping for an advanced from dr.web though

 

i wonder which of the regular A+ will get a lower value, avira,nod32,kav,bitdefender,symantec etc.