Honest Opinion about antivirus switch of Online Armor AV++

Discussion in 'other anti-malware software' started by JCorliss, Jul 2, 2009.

Thread Status:
Not open for further replies.
  1. JCorliss

    JCorliss Registered Member

    Joined:
    Dec 9, 2006
    Posts:
    84
    Hi, I use and really like Online Armor AV++. They have recently switched the AV portion from Kaspersky to the A2/Ikarus engine. Your opinion..is this a good or bad move? Thanks.

    EDIT: Proper forum??
     
    Last edited: Jul 2, 2009
  2. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    Good.
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    It,s bad. Reason: too many false positives.
     
  4. BrendanK.

    BrendanK. Guest

    I'd rather a FP then a missed detection. False positives make me feel safe :) :p
     
  5. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    For ordinary users, false positives are as annoying as malware. We are talking of general users here, i think.
     
  6. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    IMO, the best choice between the top engines... fresh and rapidly evolving engine. False positives? Never had a single one. I only found them while reading AV tests ;)

    Fax
     
  7. Anth-Unit

    Anth-Unit Registered Member

    Joined:
    Oct 13, 2006
    Posts:
    108
    They need to hurry up and develop a 64-bit compatible version.
     
  8. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,347
    Location:
    Europe, UE citizen

    I often read here that A-Squared has many FP. I believe the Wilders users, but I'v been used it for a weekly on demand scan from 4 years and the only FPs that A-Squared gave to me are 2 joke files - java scripts - that I have in Documents.
     
  9. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    Not saying that Kaspersky was a bad choice either, but I think the switch was a good move. You get engines from two decent programs-animalware and antivirus.
     
  10. dja2k

    dja2k Registered Member

    Joined:
    Feb 15, 2005
    Posts:
    2,121
    Location:
    South Texas, USA
    Just a minor correction, the new AV+ is called OA++ not AV++.

    Now about the KAV to EMSI change, well all I got to say is "Two scanners are better than one". :D

    dja2k
     

    Attached Files:

  11. Zyrtec

    Zyrtec Registered Member

    Joined:
    Mar 4, 2008
    Posts:
    534
    Location:
    USA

    Hey there,

    Well, as long as the so called “false positives” are NOT critical Windows system files I wouldn't mind an AV engine getting some FPs every now and then.

    I've read horror stories about major AV vendors whose AV's have crippled Windows installations for mistakenly flagging Windows files as viruses. Right?


    Best regards,

    Carlos
     
  12. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    or missing a nasty virus cause it coudnt detected:argh:
     
  13. MikeNash

    MikeNash Security Expert

    Joined:
    Jun 9, 2005
    Posts:
    1,658
    Location:
    Sydney, Australia
    Hi Aigle,

    I had a couple of false positives with the Emsi engine, but only on a couple of internal tools that we had developed. That's not too bad really.

    Remember, OA has its own whitelist and other logic as well, so even if there were FPS (and that has not been my experience) then the rest of OA will mitigate this.

    When we detect a virus , we're also checking against OASIS as an FP filter. This means that if we get FP reports, we can actually take care of them ourselves (at least for OA users).

    It's not just an engine switch, there's a lot of extra thinking gone in too.

    I'm very excited about OA++


    Mike
     
  14. MikeNash

    MikeNash Security Expert

    Joined:
    Jun 9, 2005
    Posts:
    1,658
    Location:
    Sydney, Australia
    I know. We've been working in background on this, and as soon as our release is done we'll be on Win7 and x64
     
  15. HJO

    HJO Guest

    Hi,

    Where do I get OA++ ?

    It seems like it's not on the official website. :doubt:

    Thanks in advance.
     
  16. dja2k

    dja2k Registered Member

    Joined:
    Feb 15, 2005
    Posts:
    2,121
    Location:
    South Texas, USA
    Hi HJO! The OA++ version is in Public Beta testing phase right now and can only be downloaded in our forum at http://support.tallemu.com/vbforum/showthread.php?t=9010 but you need a key to use it as there is no trial version.

    dja2k
     
  17. alex_s

    alex_s Registered Member

    Joined:
    Aug 13, 2007
    Posts:
    1,251
    Testing ++ now, and actually FPs number is higher than with KAV, but .. most of FPs are for the programs average user never uses and even never heard of :) I still didn't notice FPs for the popular programs like FF, Opera, CCleaner, known P2P clients etc. So, for average user I'd say this is rather good (due to high detection rate) than bad.
     
  18. Makav3l1

    Makav3l1 Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    241
    I'll say this about the Ikarus engine. I have scanned my computer with a few major a/v engines and Ikarus always shows detections for cracks, keygens, and other files of that sort that the others usually don't show. Is this good? Is it bad? I assume that since these types of software do contain malicious code that it's a positive thing. So I continue to use it. That's my two cents on Ikarus and the extra 'false positive' detections. Just an opinion.
     
  19. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    It wil be really good if it can be fixed pretty fast.
    I think i need to give it just a trial scan on my notebook to see how many false positives i get. I wil see if i get some time.
     
  20. alex_s

    alex_s Registered Member

    Joined:
    Aug 13, 2007
    Posts:
    1,251
    Ikarus is worth of the respect in any case. As far as I know this company developed a language to describe computer viruses back in 80th. I'm afraid from all the currently known players they are the most experienced :)
     
  21. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    The Ikarus engine was only used in Austria. After A2 decided to add it to its A2 malware package. Due to the world wide customer scope of A2, Ikarus hgad to be tuned to decrease FP's. This is normal. With the increased user base of OA, this will happen again. After some time it will be solved. This is a normal thing to happen when user scope is increased. So i would not worry about it.

    OA with A2 will provide more synergy in future than OA with Kapersky.

    Just my 2 cents thought
     
  22. andyman35

    andyman35 Registered Member

    Joined:
    Nov 2, 2007
    Posts:
    2,336
    What isn't open to debate is the quality of the detection rate of the A2 dual engines,if FPs can be minimised this will be an awesome suite IMO.
    What I like about A2 is the quality of their signatures and the way they keep the overall number to a reasonable level.As an example on Wednesday they numbered over 3 million,today 2.5 million,it all helps to keep it feeling light on the system.
     
    Last edited: Jul 3, 2009
  23. alex_s

    alex_s Registered Member

    Joined:
    Aug 13, 2007
    Posts:
    1,251
    I think the same. Kaspersky would hardly go beyond the OEM, while Emsi and Tall Emu mastered true partnership and I hope it will go mutually beneficial.

    Some subtle results of this alliance start to show themselves already:

    http://malwareresearchgroup.com/?p=942
     
  24. andyman35

    andyman35 Registered Member

    Joined:
    Nov 2, 2007
    Posts:
    2,336
    Encouraging signs there:thumb:
     
  25. Astech

    Astech Registered Member

    Joined:
    Jan 17, 2009
    Posts:
    67
    I agree, this may become a powerful security suite. As far as I know it is not final yet, is it?
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.