![]() |
Prevx is not bad, but only for simplest rootkits. Also, during tests it has a lot of "false-positives"... Their heuristics engine is too angry, even in basic scanning mode.
Anyway i'm using Kaspersky 2010. |
I think :rolleyes:
There is not much different with anti viruses(of course they use many different tricks and philosophy for protect your data's) But at all if you do not be careful about what you do they cannot help you, even you have BEST,Expensive,Top rate Security Suite Finally you fail This days i recommend Immunet Protect Free, with Open source engine |
http://www.360.cn
Best antivirus~ |
every AV has points of excellence and points of low reactivity.
I like kaspersky engine, but also i would recommend Comodo, especially the Firewall solution (i've worked for Comodo) it's a good growing AV engine ;) |
For a personal use, i go with Kaspersky. For me best engine, fastest signature updates...
For an enterprise/console management use i vote for TrendMicro. I supose everyone tells which one he used more... |
Personaly, i use Kaspersky Internet Security (good engine, and not very slowing down computer, in difference of Norton).
At my job, we're using BitDefender Internet Security 2010 (many slow down and numerous false positives). |
Kaspersky Internet Security 2010. On linux mailserver and my personal computer. It Works fine but uses resources...
|
I used to use Kaspersky for several years and am using McAfee now, both great.
NOD32, SYMANTEC tested and bring about too many problems with my crack/reverse tools. even you need to disable McAfee and maybe other Anti-viruses when unpacking an enveloped/packed file to avoid deleting of dumped file. |
for me modern threat come from different direction nowadays,there is roque(fake antivirus,antimalware,firewall),trojan,virus,worm,keylogger,etc.
For antivirus i prefer multi-engine antivirus(gdata,etc),for single engine i prefer avira/kaspersky,anti malware i prefer antimalware byte and pctools antispyware,for trojan i pick anti malwarebyte,i always check for every year if the performance of this following setup would be still top notch because AFAIK brand doesn't always tells quality over years,there is always be performance degradation over several months/years and i always check for performance on forum(http://www.wilderssecurity.com/) or any independent review site which right now there is so many review site that are clouded by vendor money offer.Forgot to mention i also doing internal self test of any product that i interested to use using VM(virtual machine),folder,registry side by side comparing(clean vs infected) just to double make sure that the independent forum/review site are really independent :),most of the reviewer on youtube are to be honest quiet amateur,mostly they just comparing live sample (-2 weeks/0day),reviewer forgot to add the aftermath of virus cleaning effect(system files,registry,files) by the product. Now i run : Windows 7 64 Bit Avira Pro 32 bit (realtime) AntiMalwarebyte (on demand) PCTools antispyware(on demand) Prevx(realtime) Hitman(on demand) Outpost Firewall pro(realtime) Why?it's from my own internal research :D. |
Back in the days I was using norton antivirus...a looong time ago, and then I moved to Kaspersky, then NOD32...now I don't use any anti-virus, I switched to sandboxie + virtual machines + opendns filter, an updated host file from mvps and a router firewall.
When I get myself familiar with virtual machines I never looked back to my main computer cuz I have the best security bundle :envy me:. |
I'd use Nod32, alongside MBAM for malware.
Aside from that if I detect suspicous activity which Nod nor MBAM can detect I manually remove the malware, using various tools such as ComboFix, gmer, HijackThis (now outdated) etc... |
The latest beta of Kaspersky Internet Security 2011 looks quite promising :)
|
the best antivirus it its Microsoft securyty essentials good
|
I never use any AV. They disturb me.
|
I use NOD32 as antivirus without problems and I use free spybot for spyware and similar threats.
zeuscane |
I used Avira until today, when I found a file named "~TEMP.exe" running.
Scanning it with Avira didn't find anything. I scanned it online, only Kaspersky and F-Secure were able to detect it as a trojan. Here is the report if anyone is interested: http://tinyurl.com/25zc85z |
for long time I have used Kaspersky and Nod32..
but these "commercial" antivirus fails to detect and defeat some virus that I tested... (some malware trojan banks in my country, I receive a lot (spam) emails with this kind of s..hit , really very bad.) and the only that allways alert me (or in the bad situations, have a "fast" vacine submit with vacine update in 24h) was AVIRA... and I'm talking about "free version". today I use AVIRA (free) version + sandboxie control (a very usefull "utility") + Online Armor (free). If I in doubt with a file (and avira doesn't alert me), I run the suspect file under a sandbox using sandboxie control and If nothing estrange happens the file is "probably" clean.. the Online Armor (free) firewall, comes as a natural enforcement because I don't trust in windows firewall that is to basic, and doesn't have control over process communication (and online armor has this..) |
They are all rubbish. I wrote a very simple heuristics goat file which is part of my test suite.
This goat file performs the following operations 1. GOAT Stub: Seek Kernel32.dll in memory 2. GOAT Stub: Locate GetProcAddress() 3. GOAT Stub: User GetProcAddress to get address for GlobalAlloc() 4. GOAT Stub: Allocates a buffer using GlobalAlloc() and copies decryptor and rest of goat file to new location 5. Jmp to new buffer 6. GOAT Encrypted Body: Execute decryptor (simple xor byte ptr[] routine to allow AV xraying) 7. GOAT Encrypted Body: Load all apis from a structure into a structure (copied from a real virus) using GetProcAddress() 8. GOAT Encrypted Body: Fetch all system paths (eg system32 and windows and mydocs etc) 9. GOAT Encrypted Body: Find all "*.exe" in the current folder 10. GOAT Encrypted Body: no payload... just beeps each time a file is found. 11. GOAT Encrypted Body: return control to parent process. 12. GOAT Encrypted Body: Embedded in the code are funny strings like "*.com" "*.scr" "*.dll" suspicious API names (MapViewOfFile etc) Ok so my first generation goat file (which only XOR's with a zero key) [ie no decryption] is flagged as funny by a few av vendors. (about 45% of virustotal.com). My second generation goat file which xors with a static byte of 0xCD shows f*ck all warnings in all AV's EXCEPT VBA. I am very dissapointed with the trace scanning capabilities of current AV products as my code is suspicious and performing naughty things. I have not tested runtime behavior analysis of Sophos and Symantec. However runtime analysis by AVIRA and AVG failed on its a$$ All AV products suck with heuristics and unknown virus emulation |
None... easy enough to sniff out virus ridden files... ie. if it sounds too good to be true, it usually is... then again.. hard to resist a file named IDA Advanced V10232.12 ELiTe eDiTiON! :-)
|
personal preferance kaspersky of course(the firewall has caught some attacks others couldn't) but but for slower computers NOD32...
|
hi
i prefer kaspersky (paid)and it is working fine for me
|
You try Symantec AntiVirus Corporate Edition 10.2.2
Link: Quote:
|
i prefer NOD32 for home or standard PC's also for old PC VERY FAST
Symantec AntiVirus Corporate is WOOW in WIN server and domains |
I have the opposite experience. NOD slowed my computer to the extent of being almost unusable. I tolerate AVG these days, but all AV's are a big performance hit.
Git |
NOD32 was pretty fine in the 2.x days.
Now I prefer Avira Antivir, lighter, faster, and according to most AV reviews, with higher detection ratios. I will go for KIS as my second option. Not as light, but probably with equal or better detection degrees. |
I'm very pleased with MS security essentials. Not only has great detection ratios but it's the lightest A/V ever tried.
|
MS Security Essentials + ThreatFire + Outpost! Works good on my i3! :)
|
yesterday i've installed a newest version of kaspersky internet security 2011 and i am little disgusted... of course everything worked great untill i decided to scan my pc - it found a lot of 'infected' software (most of them are cracking tools and i was not suprised) but when i decided to remove one of the installation file, kis was scanning pc about 20 minutes (i dont know why) and after this decided to reboot pc without any notification... after reboot there was a monit about necessity to restore computer, i couldnt hide this, so i had to do it... nothing changed after restoring (only notification disappeared) but then there was an another notifiaction - about file that was detected as infected and deleted by kaspersky. i couldnt repair this and hide it, so i had to reinstall kis and for now there is everything OK, but we will see how long :)
of course newest interface is underdone... i'm using a non-english software and it's not fully translated. maybe in the next version it will be fixed, hope to be :) |
Amazing, here nobody talks abt mcafee i am using it it is definatly not worth not able to remove newfolder.Exe(i don't remember name) worm
any antivirus capable to remove this? |
I use avast because of free.
|
Avira is the best IMHO. NOD and OneCare have a poor drivers emulator (seems that noone other have), but they have a big problems with new malware. KAV (seems to be a copy of the F-Secure or vice versa due to the same detection names) is crap. Avast has a good web analytics module (for browser exploits prevention). Other AV are a real crap.
|
Some high skilled VXers state that DrWeb and M$ Security Essentials got the best emulators.
|
Can't agree with u. For example, DrWeb couldn't emulate cpuid untill this information was posted widespread :)
|
i think you are discuss the antivirus engine,but you are discuss the antivirus software.
|
I tried most of popular security software...... in case of risk detection
kaspersky works better than the others. |
I like avira
|
Eset Nod-32 & Kaspersky Both of them are the best ;)
|
Best Antivirus Engine
Kaspersky is one of the most reliable and complete antivirus software. It also gives the user the possibility to take decisions during the scanning process, but doesn't stop to wait for user input at every detection as antivira does (or did when I used it); this is a good thing. I used to have avira, but every scansion was a pain, it asked for a decision at every single detection.
Though Kaspersky is a resource eater, especially when its update process starts. Thus, in the end, I think nod32, which is much faster, is the best, even though is a little bit less secure than kaspersky (or seems so; I never reversed them, so far). |
I went from Norton antivirus for DOS, to Dr. Solomons, and for quite some years been using Symantec Antivirus CE, and noways the new Symantec Endpoint Protection. Never let me down
|
Ahnlab V3 engine is g00d :)
contains patented technology and everyone knows the koreans are hard workers... |
| All times are GMT +8. The time now is 00:41. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX