Malware Research Group Project#21

[Chiron494]

An AV will always be a critical part of an Internet Security package. Novice users will not be able to make the correct decisions about whether to allow or deny. Also, even expert users sometimes make mistakes.

[Opus_Dei]

@Chiron494 post:41

An AV will always be a critical part of an Internet Security package. Novice users will not be able to make the correct decisions about whether to allow or deny. Also, even expert users sometimes make mistakes.

Agreed

X

[Jaki]

@JoWa post:37

:DThat is why I use CIS. To get the strongest proactive protection, that can block any threat, known or unknown.
So, is this test uninteresting, if D+ an FW can block everything, why care about AV? Obviously reactive protection can not be as strong as proactive, and CIS would not need the AV part to protect. But CIS has AV, and that will be more useful the more it detects, making CIS easier to use. When I started to use CIS (3.5 beta 2), the AV really was not very good. But it is a lot better now, and MRG shows it:

3.5: 91.4%/90.0% (malware/Adware, Spyware)
3.8: 96.2%
3.9: 97.1%
3.12: 98,1%

Looks good. :-TU And I know you will not stop there…

JoWa where did you get that data in order for you to conclude that CIS or any other security product for that matter is looking good?

Peace.

[JoWa]

I didn’t say that CIS (CAV to be correct) looks good. It’s the improvement that looks good, in my opinion. The data (detection rates) is from MRG Test Archive + their latest test.

Pax.

[Jaki]

@JoWa post:44

I didn’t say that CIS (CAV to be correct) looks good. It’s the improvement that looks good, in my opinion. The data (detection rates) is from MRG Test Archive + their latest test.

Pax.

Yes, but we are talking about CAV right. However, the source of that data is not what Melih wants. Please refer to: https://forums.comodo.com/empty-t39829.0.html

Consequently, in all fairness, CAV has not made progress that the current MRG Test indirectly claimed it has based upon the results of such a test.

Peace.

[Citizen_K]

Comodo most definitely needs a strong AV as well because CIS has the possibility to consider the computer clean, Clean PC mode. So less experienced people starting to use CIS need to be sure that the scan during installation does a thorough job. Melih realises this:

@Melih post:6

…
But there seems to be, thanks to ineffectiveness of AV products out there, a huge amount of users who are infected. They need help. So we are adding some acid like cleaning capability to v4…there ain’t going to be a rootkit that can not be cleaned by CAV!! Even the ones that hides… we are coming to get you

But to get a real idea about the protection capabilities of HIPS based firewall solutions like CIS there are of course different ways of testing required. Its neither black nor white.