DRWEB is the Best AV....anyone else agree with this?

Discussion in 'other anti-virus software' started by Barney, Jul 4, 2004.

Thread Status:
Not open for further replies.
  1. Barney

    Barney Registered Member

    Joined:
    Jun 17, 2003
    Posts:
    119
    From my own experience, DRWEB is the best on access AV out there. Not only is it very light on resources (even lighter than Nod32), it is extremely sensitive and found many viruses and trojans that other AV's have missed. KAV is also very good, but when it come to an on access scanner, DRWEB is the best. Does anybody else out there have any feedback to this thread. Please give a reply, I am interrested in what you think.

    Barney
     
  2. 0--0

    0--0 Guest

  3. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    I have used Dr Web as a primary AV scanner on one of my computers here and obviously I think it is very good as both an on-demand and an on-access scanner. It is has a very small footprint, updates quickly and has not let through,over several years, any malware on this box so far.

    However, I practise safe-hex and my surfing practices are fairly conservative and therefore my chances of coming into contact with malware are obviously a lot less than my teenage offspring.

    In addition, the effectiveness of Dr Web running SpiderGuard may be better under Win98/Me systems rather than Win 2000/XP and the default setting of smart scan may not be the most effective.

    https://www.wilderssecurity.com/showthread.php?t=35141


    I am very happy in using Dr Web but as with most software programs, the 'best' one is difficult to judge. The best one overall is the one that seems to offer you good protection AND runs well on your particular system.

    Since you seem happy with the program, it has stopped various malware getting in, and it seems to suit your system, Dr Web has the best on-access system for YOUR computer.
     
  4. f123

    f123 Guest

    There are NO BEST AV. The best defense against PC gremlins is to keep only the operating system in the primary C partition and image that partition on a regular basis. My WXP Pro C partition is only 709MB. You can configure a good imaging software to automatically image any partition at set interval.

    I have a software firewall and an e-mail AV scanner. I do not run the main AV program in the background. Never had a bug in my PC. Use common sense when browsing and avoid porn sites.

    F
     
  5. AgentX

    AgentX Registered Member

    Joined:
    Dec 25, 2003
    Posts:
    44
    Location:
    The Intarweb
    I completely agree with BlackCat that the SpIDer Guard works better under Win9x
    than WinNT/2K/XP. Also, the Smart Scan setting is not good for everyone, and system
    begins to crawl when the files are set to be scanned when created, opened and
    accessed.

    Unfortunately, SpIDer Guard under the Smart Scan setting does NOT scan files when
    they're executed. You can test this inability yourself. Create EICAR.COM file some-
    where on your disk while the SpIDer Guard is disabled. Then enable it back and apply
    the Smart Scan setting. Open a command prompt window and change the working
    directory to the folder containing the EICAR.COM file. Type EICAR and press enter,
    you'll notice that SpIDer Guard fails to detect this dummy virus and lets it execute
    freely.

    Another problem with SpIDer Guard is that it can't be paused or stopped temporarily,
    correct me if I'm wrong. DrWeb scanner is not without its own problems, either.
    It has the tendency to inflate the processes while scanning the memory. While this
    may not be a real problem, it does make the system look cramped and lacking free
    memory for a few minutes. To the best of my knowledge, no other AV scanner does
    what DrWeb does to the free memory. ;)

    Regards,
    AgentX
     
    Last edited: Jul 4, 2004
  6. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,650
    Location:
    Hawaii
    Oh gee... that link uses microscopically small gray print against a jet black background. Much too hard to read.
    ~~~~~~~~~~~~~~
    Concerning DrWeb, it's my main AV & a real rottweiler.

    DrWeb makes it difficult to test any other AV. Even if I kill DrWeb from the start-up list {so that it does NOT show in Process Explorer when I reboot} DrWeb still pounces on my malware specimens before the AV I am testing even gets a chance.

    Thus, to test another AV I have to uninstall DrWeb. Of course, this could be a peculiarity of my particular computer set-up. Has anyone else had similar experience?

    grace & peace to all... bellgamin
     
  7. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    Bill,

    can't you simply right-click on the SpiderGuard icon in the system tray> Control, then select REMOVE from the Load Mode option. You can then choose Load/Install to get SpiderGuard back again after your testing.
     
  8. 0--0

    0--0 Guest

    @bellgamin

    Help me if you can. I am not an artist. Provide me with a better style, tell me how to increase the font size etc. ... and I will consider you suggestions.
     
  9. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Nautilus, why not just log in using your account over here?

    regards,

    paul
     
  10. O--o

    O--o Guest

    Paul:

    We have discussed this before. Previously, I had problems with this forum. I could not log in because I was deemed logged in (although I was not).

    I will try to log in as "Nautilus" in order to confirm that it's actually me. But I was never impersonated before. Therefore, I do not really need a registered name.
     
  11. Nautilus

    Nautilus Registered Member

    Joined:
    Oct 22, 2002
    Posts:
    37
    O.k.: I confirm that I am what I am.

    Damn. I have a PM dated 19 June 2004 ... :)
     
  12. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Nautilus,

    Give it a try (cleaning browser cache, existing wilderssecurity.com cookies, the common stuff). It's up to you in the end.

    regards.

    paul
     
  13. Mele20

    Mele20 Former Poster

    Joined:
    Apr 29, 2002
    Posts:
    2,495
    Location:
    Hilo, Hawaii
    I see that site on a medium dark blue background with white text and it is not difficult to read. I have trouble reading a lot of sites but that one seems fine to me. This is on XP using nVidia GeForce 5200 on a flat panel digital monitor. On my W98SE box I see a jet black background with white text. I have the original ATI video card on that box and a Trinitron CRT monitor.

    So, how you see it is combination of your video card and your monitor. Are you using Firefox or Mozilla or Opera? I use Firefox and Mozilla almost exclusively and I started using them a couple of years ago because they had text zoom and it is very easy to increase text size for everything on the web page..unlike IE. So, you might consider one of those browsers as the default text size on that site is very small. I just enlarged it with text zoom.
     
  14. Detox

    Detox Retired Moderator

    Joined:
    Feb 9, 2002
    Posts:
    8,507
    Location:
    Texas, USA
    In IE hold control and use mouse wheel.
     
  15. Barney

    Barney Registered Member

    Joined:
    Jun 17, 2003
    Posts:
    119
    Belgamin, you don't have to uninstall DRWEB at all when you test out another antivirus. All you have to do is go into "Control Panel" and open up the DRWEB icon. From there, just click on the remove button. This will turn off the drweb spiderguard. When you are ready to turn it back on all you have to do is reboot and start it back up through "Control panel" again.

    Barney
     
  16. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    dear f123, what makes you think keeping only the Windows files in C drive will protect you from viruses?

    dear AgentX, i don't blame the Smart Scan technology. it just assumes that the files created before activating the Spider Guard are clean. this is why it has so small impact on the resources. its really smart if you keep it enabled all the time and regularly do full system scan.
     
  17. f123

    f123 Guest

    Keeping ONLY the OS in the C primary partition DOES NOT decrease the chance of contracting a bug. However, it greatly facilitates the time it take to create/restore the image file. A modern PC can process the image file at 800MB/min....

    Those with a big HD can set up a large extended logical partition to house the image files. One can pack about 40 image files in a 40GB partition. Most imaging software can create the image file via TASK SCHEDULER...while you're sleeping.

    If you have a "clean" image file of the OS, then you should be able to restore the PC to the time prior to the virus infection. I test hardware, software, and PC gremlins. I install everything in the C partition when testing. Upon completion, I simply restore the good image file. And reboot back to windows. The entire restoration process takes less than 2 minutes. No AV or FW can claim this success rate.

    F
     
  18. f123

    f123 Guest

    Today's bugs are more interested in hijacking the PC...for self-propagation. Unfortunately, a few bugs will destroy data. Therefore, if you have important data, then put them in the C partition so they will be included during the imaging process.

    To me, running a full-time AV scanner wastes precious CPU clock cycles. Most AV proggies will allow the user the option to manually scan a suspicious item for infection.

    F.
     
  19. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,650
    Location:
    Hawaii
    Oh yes, it works! Thanks for the suggestion. Also thanks to Barney -- same suggestion as BC, but in different words. Thanks.

    It's interesting that DrWeb will remove itself from startup, but neither StartUp Cop nor Mike Lin's Startup Control Panel can truly remove DrWeb from startup. They *seemingly* remove DrWeb, but then DrWeb still loads.

    I wonder -- is that a bug or a feature? o_O
     
  20. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    dear f123, thats a good suggestion but sadly holds true for a poor soul without a CD burner. the image is useless if you lose your HDD. as the current threats are worms an image won't help you if your OS or some software is vulnerable.
     
  21. f123

    f123 Guest

    The chance of a sudden HD death is rather slim because today's HD employs the SMART monitoring protocol. The user would loose the data anyway if the HD crashes...so what's the difference? The best in firewall and AV protections will not save a dead HD!

    Writing to an extended logical partition on the primary HD is MUCH faster than an optical media. Use Bootitng (30 day trial) to repartition the primary HD. Paranoid souls could add a $50 slave HD for backup purpose. We've been using this method of data recovery for years without any problem.

    If one has a good image file of the OS, then one can use it to over write the damaged OS! An imaging software does not rely on a functional OS or software in the HD to restore the image file. That's why it is important to create the boot discs/CD when installing the imaging software. Visit the Acronis forum to learn more about drive imaging and its limitations.

    F
     
  22. spider-x

    spider-x Guest

  23. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    As with other AntiVirus programs e.g. Kaspersky, the results from any ONE site do not tell the full picture.

    In addition, the very strong heuristics of Dr Web means it can give more false positives compared to most other AV programs. And unfortunately false positives mean you 'fail' that particularly test over at Virus Bulletin.

    Most people who are (have) used the program would say that it is much better AV than the results over at VB suggest.
     
  24. tazdevl

    tazdevl Registered Member

    Joined:
    May 17, 2004
    Posts:
    837
    Location:
    AZ, USA
    I'd rather have my AV err on the side of caution.
     
  25. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    I use Dr.Web and I like it.
    With strong heuristics you have to be willing to sort out the occasional false positive.
    That doesn't bother me.I've only had a few so far.
    What AV is the best?
    That's something an individual user has to decide.
     
Loading...
Thread Status:
Not open for further replies.