New Test from PCSL: China Region Malware Test

Hi All,
Long time no see. We have started a new test call China Region Malware Test which will use security products scan both the top prevalent threats in China and also check products will take false alarm to the popular products.

Please check the report from Chinese media PChome:
http://article.pchome.net/content-1116841-1.html

and also english report from my site:
http://www.pcsecuritylabs.net/document/report/China_Region_Malware_Test_2010_May.pdf

Thank you very much!
Regards
Jeffrey

 

Thanks for the report.

So this time Panda IS 2010 rocks !!

So you have tested only "Chinese Malwares" ?

 

In this test, we only use the thrests from the crawler system in China and also other channels that only collect China region popular threats.

So it is called China Region Malware Test.

 

So these samples are ITW ? Can you please let us know in which period you collected these samples?

 

April 1st to April 30th

 

Well, I think that your tests Jeff are getting better and more thrustworthy time after time

So congrats to Panda, A2, Trustport and G-Data.

Even if the sample set was small, it's still interesting

 

We will surely enlarge the sample set next time, top 2000 top 3000

I have developed a series of new test and I will release them when everything is ready.

 

Jeff (and others) don't you think fp's should remove more score? Emsisoft gets 10fp's, that's really bad if you compare it to the small malware base, yet still scores 98.36

Just throwing my opinion out there.

 

BTW is there any specific reason to use only Chinese Malware samples?

 

For FP, the whitelist database is much bigger than the malware samples

I am thinking about sort whitelist into several folders

most important like office if FP then -0.3
important like im or if FP then -0.2
less important if FP then -0.1

what do you think?

 

provide some information to Chinese users

 

This would be ideal. I think you could also ask different vendors for prevalence data about specific files (FPs) to see how important they are. We could provide this information from our community of users. But if you do this it is very important that the data come from multiple vendors, not just rely in 1 vendor telemetry.

 

Okay...That's a great innovative idea i must say !!!

 

In test after test i see, does Dr.Web "ever improve"

 

I haven't saw that Dr. Web improved, its still there where it was in version 5

 

I don't see Avast. Any special reason for not including it or you just missed it?

 

Yes, the next step for my test is to make the test material with more information attached, either fp samples or malware samples.

 

I will add AVAST in next test

 

Is it possible to add Zillya! Antivirus at next test? I think it's will look better some AVs in current results

 

let me try to contact them

 

It would be much easier if you just contacted OlegSych who works a Zillya!

 

Nice to read Vipre has been tested

Good result.

 

You can contact "Oleg"....He's from Zillya !!

 

Ahhh, seeee

 

Panda,Emisisoft Good Results