Interesting ShawdowServer results

Ever heard of Orion? Draco? Libra?

AFAIK they pre-process all received samples in a virtual environment (sandbox) to sort out corrupted/benign samples. You can see some stats from the sandbox processing here: http://www.shadowserver.org/wiki/pmwiki.php?n=Stats.SandboxCharts


Cheers
Vlk

 

Hey VLK, in the new version of f-secure they are ditching Orion Draco Libra.
all that remains is the following:AVP with extended bases,norman sandbox +the in houses engines by f-secure hydra and blacklight and gemini.
f-secure is starting to get lighter.

 

cant argue that point Lodore.

 

Didn't it say that avast home doesn't detect script viruses? Maybe they were testing those?

 

Yes, I am aware it is a multi-engine product. Please explain to me as to wether the other engines (apart from avp) give the same signature verdicts as avp, using Kaspersky signatures.

Thanks.

 

If they tested a linux version of Avast, would that mean they tested it on Linux, because that would throw any detection way off compared to Avast on Windows.

 

Does f-secure still have kav? What about avast or whatever the other av is/was?

 

Hello,
there was another av vendor that had kav and avast and that was gdata.
f-secure have always used avp which is kav. and thye used to use the f-prot macro engine,adaware engine etc. but now they have taken most of the engines out and only kept the ones i mentioned above.