New Tests Show Rootkits Still Evade AV

Discussion in 'other anti-virus software' started by MrBrian, Jun 28, 2008.

Thread Status:
Not open for further replies.
  1. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    From New Tests Show Rootkits Still Evade AV:

     
  2. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    Terrific article.
    Thanks for the link :thumb:
     
  3. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    You're welcome :).
     
  4. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    2,509
    Location:
    Slovakia
    Wow, thanks as well. It appears, that I relied too much on ondemand scanners. I know, that AVs can not detect new rootkits, but I thought, that they have no problem detecting the old one. But not detecting 3 years known rootkits, common. I wonder, when there will be an antirootkit scanner for Vista 64 finally?! :'(
     
  5. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    AVG anti rootkit no longer free ?
     
  6. emperordarius

    emperordarius Registered Member

    Joined:
    Apr 27, 2008
    Posts:
    1,218
    Location:
    Who cares
    I wonder how Kaspersky 2009 would have done
     
  7. Malcontent

    Malcontent Registered Member

    Joined:
    Dec 30, 2005
    Posts:
    451
    Location:
    Cleveland, Ohio USA
    I also wonder how well Dr. Web would have done.
     
  8. GES/POR

    GES/POR Registered Member

    Joined:
    Nov 26, 2006
    Posts:
    1,490
    Location:
    Armacham
    Some lesser-known AV tools fared more poorly, including Dr Web Antivirus für Windows 4.44.0.09170
     
  9. btman

    btman Registered Member

    Joined:
    Feb 11, 2006
    Posts:
    576
    Grats proud of Kaspersky. Can't wait till 2009 comes out in Canada. Anyone know a release date?
     
  10. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    this was already discussed ages ago on this very forum,

    the test is old, the samples are extinct and this test....... was a waste of time.

    :rolleyes:
     
  11. pugmug

    pugmug Registered Member

    Joined:
    Oct 23, 2006
    Posts:
    413
    Do you make your post because Nurse Web faired poorly?
     
  12. Diver

    Diver Registered Member

    Joined:
    Feb 6, 2005
    Posts:
    1,444
    Location:
    Deep Underwater
    The article is a bit old, May 13th.
     
  13. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    nope, cos its fact.

    article is from may, but the test was from alot sooner, using extinct samples from way before then.
     
  14. computer geek

    computer geek Registered Member

    Joined:
    Oct 6, 2007
    Posts:
    776
    Have to agree with C.S.J. here, Dr web's employees have the sense to not mess around and add useless extinct viruses on their list, unlike some other so called 'leaders' in tests who get half their employees to get extinct ones to commercially impress users by major tests, AV-Comparatives e.t.c.
     
  15. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    i just think the 'professional' testers, or not so.......

    a flawed test, is an invalid one....

    so please show me a valid one....

    :rolleyes:
     
  16. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
  17. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    I have yet to see one test you have called "Valid" every time web gets shot down you take it out on the test and not the software. maybe that why there so unknown :cautious: spends to much time trying to say we had a unfair disadvantage instead of working on there software and fixing holes. :eek: I have a hard time believing every test that pops up here is "Invalid" or the "official" ones giving a unfair advantage to the rest.
     
    Last edited by a moderator: Jun 28, 2008
  18. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    then you obviously need to dig deeper, or are you one who sees the results and comes to the conclusion?

    FYI, drweb does not need to play this kind of game, this forum alone is full of stories of drwebs excellence.

    And also, if these so called tests bothered me, why would I be using drweb?

    Thinking IS allowed outside of the box, even if they dont want you to.
     
  19. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,740
    Location:
    Texas
    Please take any personal conversations to pm or email.
     
  20. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    Sorry Ronjor

    Anyways good read on the article and the other link provided to more recent test results from AV-Test.
     
  21. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    It is good to know that my av is one of the three that detected and cleaned all inactive and active samples. (test from AV-Test.org )

    Three AV tools had perfect scores, catching all active and inactive rootkits as well as removing all of them: Norton Antivirus 2008 15.0.0.58; Panda Security Antivirus 2008 3.00.00; and F-Secure Anti-Virus 2008 6.80.2610.0.
     
  22. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Eset did pretty well in the Vista Ultimate test as did Trend. Also Eset has upgraded their detection to detect new types with the latest build I believe.
     
    Last edited: Jun 28, 2008
  23. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    Yes NOD's 667 Release I believe has a new Anti Mod update in it.

    also on another note from the post above its nice to see Norton on a change for the bette. never ever thought I would be backing them after they have been the way they are for years. :eek:
     
Loading...
Thread Status:
Not open for further replies.