3 VB 100 "failed" tests; false positives?

Discussion in 'NOD32 version 2 Forum' started by WaterSprite, Mar 29, 2005.

Thread Status:
Not open for further replies.
  1. WaterSprite

    WaterSprite Registered Member

    Joined:
    Sep 17, 2003
    Posts:
    3
    Hi,

    This isn't about any technical problem (happily, I've never really had any technical problems with NOD32!), but I would like to satisfy my curiosity about something, and I hope someone here can help me.

    NOD32 has "failed" only 3 of 33 tests at VB 100 since 1998, yet Eset claims to have never missed any ITW detections in the VB 100 tests it has participated in. If this is correct, I can only assume that the three "failed" tests were due to false positive detections and/or something else I haven't considered.

    I've been doing a bit of googling to see if I can dig deeper into this little mystery, but so far, I've only come up with a few quotes about the Nov. 2001 (or Nov. 2000?) test referring to a possible false positive detection, and these were only quotes from Eset or in this forum's archives, and they didn't go into any detail about the actual test results.

    According to VB 100, these were the three tests where NOD32 failed to receive the VB 100 award:

    1) April 2002/SuSE Linux

    2) November 2000/Windows NT

    3) February 1998/DOS

    Could someone here point me in the direction of the actual test results that show just exactly why NOD32 failed these three particuar tests? As I said, this is just to satisfy my curiosity, and to reconcile in my mind Eset's claim of having not missed a single ITW detection in those tests since 1998 with the three "failed" tests in question.

    Thanks!
     
  2. rothko

    rothko Registered Member

    Joined:
    Jan 12, 2005
    Posts:
    579
    Location:
    UK
  3. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
    The claim Eset makes is that NOD hasn't missed an ITW virii in 6 years of VB testing. The failures that NOD has are related to False positives on noninfected files, not missing an actual infected file.
     
  4. WaterSprite

    WaterSprite Registered Member

    Joined:
    Sep 17, 2003
    Posts:
    3
    I understand the claim about the ITW detections, and as I mentioned, I've thought about the false positive thing, but I'm still interested in seeing the actual evidence in the form of the detailed test results. Do you have any idea where/how I can obtain these actual details?

    Thanks!
     
  5. WaterSprite

    WaterSprite Registered Member

    Joined:
    Sep 17, 2003
    Posts:
    3
    Thanks! The interview explains two out of three (though I'd still like to see the actual test results in detail), so now I have to find out what the third "failed" test was all about! :)
     
  6. webyourbusiness

    webyourbusiness Registered Member

    Joined:
    Nov 16, 2004
    Posts:
    2,640
    Location:
    Throughout the USA and Canada
    I'll take the odd false positive in lieu of missing itw viruses - ANY DAY!!
     
  7. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    You'll have to subscribe to Virus Bulletin Magazine to see the full results:

    http://www.virusbtn.com/vb100/about/index.xml

    Hope this helps...

    Cheers :D
     
  8. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,803
    Location:
    Texas
  9. mrtwolman

    mrtwolman Eset Staff Account

    Joined:
    Dec 5, 2002
    Posts:
    613
    April 2002/SuSE Linux - none product had on-access part, thus no VB 100
    November 2000/Windows NT - single FP
    February 1998/DOS - in February 1998 NOD 32 did not exist... :)

    Best Regards
     
  10. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    Only $358/annum :eek: :eek:

    Although WaterSprite, if you subscribe for 3 years it works out at a very reasonable $251 for the detailed results you are looking for :rolleyes:

    It's a pity that VB does not push out a free 'summary' of their individual tests, with a little more detail than they provide at present.

    At least we would have a better idea of why some AV's failed a particular test.
     
  11. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Old VB tests are available on their web site (PDF format)
    http://www.virusbtn.com/magazine/issues/old_pdfs.xml



    tECHNODROME
     
  12. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    Not yet complete but this is good news :)
     
Thread Status:
Not open for further replies.