Dr.Web adding more virus signatures

Discussion in 'other anti-virus software' started by Miyagi, Apr 7, 2006.

Thread Status:
Not open for further replies.
  1. Inspector Clouseau

    Inspector Clouseau AV Expert

    Joined:
    Apr 2, 2006
    Posts:
    1,329
    Location:
    Maidenhead, UK
    And just for information: Taylor managed detection. Meaning Sophos is detecting it now too.
     
  2. Severyanin

    Severyanin AV Expert

    Joined:
    Mar 19, 2006
    Posts:
    57
    That's great!
    I am really happy it turned out to be easy to detect one month after it appeared.
     
  3. Inspector Clouseau

    Inspector Clouseau AV Expert

    Joined:
    Apr 2, 2006
    Posts:
    1,329
    Location:
    Maidenhead, UK
    Yub it's there for one month i know. But hey, it's not that much advanced that it's difficult to detect it. Especially that some AV companies returned infected samples as clean to customers. If even a junior analyst doesn't see that there's something wrong with such infected files then they have the wrong job :rolleyes:
     
  4. Firefighter

    Firefighter Registered Member

    Joined:
    Oct 28, 2002
    Posts:
    1,670
    Location:
    Finland
    Have you overestimated that Symantec guy skills among polymorphics when Symantec hasn't resolved that thing yet? :doubt: :D

    Best regards,
    Firefighter!
     
  5. Firefighter

    Firefighter Registered Member

    Joined:
    Oct 28, 2002
    Posts:
    1,670
    Location:
    Finland
    I'm probably getting old, when a guy almost 20 years younger than I is calling some professionals as JUNIORs. :( :D

    Best regards,
    Firefighter!
     
  6. RejZoR

    RejZoR Lurker

    Joined:
    May 31, 2004
    Posts:
    6,426
    It's not about age but about expertise level.

    Maybe saying "novice analysts" woulde be better but i get the context anyway...
     
  7. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    well, just checked again Dr.Web update webpage....it's awesome...they're adding about 2000 viri every day. :D
    Good work guys. :)
     
  8. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    Hopefully bodes well for the next on-demand test over at av-comparatives ;)
     
  9. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    8,213
    Location:
    The land of no identity :D
    I always have faith in the Russians (I'm not saying that my NOD32 is bad though) :D

    Also, @Severyanin: Does Virus Chaser use the very same engine as Dr.Web with same capabilities, or is it an older version?
     
  10. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,865
    Location:
    Innsbruck (Austria)
  11. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    u're right IBK! ;)
    Hmm...only 199500 defs...I thought they had much more...anyway, their heuristic engine is not so good as far as I remmember from Av-comparatives tests. :(
     
  12. Sputnik

    Sputnik Registered Member

    Joined:
    Feb 24, 2005
    Posts:
    1,198
    Location:
    Москва
    They have 119550 definitions at the moment. Numbers don't say anything, the leaner the database the better in my opinion. Besides Dr. Web's heuristic ain't bad at all....
     
  13. David007

    David007 Registered Member

    Joined:
    May 4, 2006
    Posts:
    8
    defs signatures does not matter at all. 199500 its not so many but this AV detects more threats then other AV that has more signature numbers!

    Their heuristic engine has start to be very effective and good this last month, but unfortnely detecting to many FP's
     
  14. TAG97

    TAG97 Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    616
    Location:
    Connecticut USA
    Turn in those false positives http://support.drweb.com/sendnew/
     
  15. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    well, of course defs are not so important always. ;) But I was reffering that their heuristic engine with only 25% detection needs some improvement to reach more than 40% like BD, KAV, NOD32. But they're working hard with defs which is good. :)
     
  16. Krond

    Krond Registered Member

    Joined:
    Aug 28, 2005
    Posts:
    55
    KAV....over 40%.....Where?
     
  17. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    on av-comparatives.org
     
  18. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    DrWeb introduced much better heuristics engine with version 4.33 (av-comparatives tested v4.32b). It should score better in upcoming R/PA test.


    tD
     
  19. Krond

    Krond Registered Member

    Joined:
    Aug 28, 2005
    Posts:
    55
    Not really......ITW-->0%, Sum-->32%
     
  20. Don Pelotas

    Don Pelotas Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    2,257
    You're only quoting the last retrospective which were in Andreas's own words not good enough (not enough samples), go back to the one before that (ITW 35% total 48%).
     
  21. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,865
    Location:
    Innsbruck (Austria)
    not good / not enough samples only regarding the itw category, not the whole test.
     
  22. Don Pelotas

    Don Pelotas Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    2,257
    Yes, i know.:)
     
  23. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    Hope so.... it will be a big battle on this test between AVs I think... :D
     
  24. Durad

    Durad Registered Member

    Joined:
    Aug 13, 2005
    Posts:
    594
    Location:
    Canada
    I decided to remove this post as its nothing to do with antivirus software..

    This was a myth not support ticket...

    sorry about this
     
    Last edited: Jul 4, 2006
  25. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,242
    Location:
    New England
    To those that reported the above as "private email" being posted on the forum, since the entire exchange is fully available to the public, "as is" at the link provided, it would not be deemed to be a private exchange and therefore doesn't fall under that rule.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.