VB100, again

Discussion in 'other anti-virus software' started by Diver, Apr 3, 2008.

Thread Status:
Not open for further replies.
  1. Bunkhouse Buck

    Bunkhouse Buck Registered Member

    Joined:
    May 29, 2007
    Posts:
    1,286
    Location:
    Las Vegas
    Most- not some are human behavior and then we get the feedback that such and such AV failed.
     
  2. Diver

    Diver Registered Member

    Joined:
    Feb 6, 2005
    Posts:
    1,444
    Location:
    Deep Underwater
    VB100 is just one test of many. None of them are perfect. As far as stay infection free since 1980 is concerned, I would only count the period since the start of 2006, because that is when the malware for profit thing really started to get off the ground.

    The real problem we face today is malware authors are constantly tweaking their programs to avoid signature detection. While it is possible in theory to test the new versions against nearly any AV, I believe that most of the tuning effort is directed at Symantec because of its huge market share. Secondarily, McAfee, Trend Micro and AVG as these also have a large market share. Lets face it, they will not be able to tune for every AV out there.
     
  3. risl

    risl Registered Member

    Joined:
    Dec 8, 2006
    Posts:
    581
    Just simply test new malware samples to virustotal or jotti? :doubt:
     
  4. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    Those samples are probably sent to the AV companies.
     
  5. Diver

    Diver Registered Member

    Joined:
    Feb 6, 2005
    Posts:
    1,444
    Location:
    Deep Underwater

    They used to be able to use the public scanners but those now do report results to the AV industry. There is one that charges and claims no reports to the AV industry. Yes, in theory this gives a test against many scanners, but in practice different AV's base their signatures on different things, so I suspect it might be too difficult to change the malware to avoid every AV out there. Therefor, the logical thing is to go for the low hanging fruit and hope to beat the four AV's that cover over 80% of the market. They might get past a few others by accident or luck.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.