Anti Virus (Desktop Security Software) Tests : What do you want to see in them?

[HeffeD]

@Creasy post:20

4)Ability to Prevent known or unknown malware from infecting your pc
+ Ability to remove malware completely from your infected PC:
so that you keep your pc clean and free of viruses/malware.

Yes, this would get my vote.

[devenroy]

4)Ability to Prevent known or unknown malware from infecting your pc

• Ability to remove malware completely from your infected PC:
  so that you keep your pc clean and free of viruses/malware.

Yes Creasy, that would be nice to have.

[Melih]

@usay_inn2 post:17

Hi,

I tried your AV (free version) and uninstalled it after doing a AV test.

I saved a fake virus on my computer and Comodo did not react untill I opened the fake virus.

I installed another AV and I tried the same test, as soon as I finished saving it the AV warned me of the virus (fake).

I prefer something that prevents such threats then stumbiling on a virus and opening it then suffering.

You see, this is exactly why I did this poll.

People confuse what an AV test is.

AV test as its carried out today does NOT test if you will stop viruses/malware from infecting your PC.

They think unless it can detect the malware it cannot protect you. This is so far from the truth… And these av testing organisations do not make this abundantly clear to people who rely on their test results.

AV test only proves one thing… It finds the malware it knows about.

It cannot speak about its prevention capability for malware it doesn’t know about! And thats what we call PROTECTION! Ability to protect you from known or uknown malware.

Melih

[AyeAyeCaptain]

@Melih post:23

You see, this is exactly why I did this poll.

People confuse what an AV test is.

AV test as its carried out today does NOT test if you will stop viruses/malware from infecting your PC.

They think unless it can detect the malware it cannot protect you. This is so far from the truth… And these av testing organisations do not make this abundantly clear to people who rely on their test results.

AV test only proves one thing… It finds the malware it knows about.

It cannot speak about its prevention capability for malware it doesn’t know about! And thats what we call PROTECTION! Ability to protect you from known or uknown malware.

Melih

+1 :-TU

[salmonela]

@Melih post:23

You see, this is exactly why I did this poll.

People confuse what an AV test is.

AV test as its carried out today does NOT test if you will stop viruses/malware from infecting your PC.

They think unless it can detect the malware it cannot protect you. This is so far from the truth… And these av testing organisations do not make this abundantly clear to people who rely on their test results.

AV test only proves one thing… It finds the malware it knows about.

It cannot speak about its prevention capability for malware it doesn’t know about! And thats what we call PROTECTION! Ability to protect you from known or uknown malware.

Melih

So where are heuristic and generic signature abilities of detection/protection for many AV solutions in your picture?

[Kyle142]

@Melih post:15

Did you know that AV comparitive Tests usually does 1 and even that in a totally non realistic way as they use non-live malware?
~SNIP~

Melih

So your telling me that I should expect different results from Comodo Standalone antivirus between real time and on demand scanning?

I didn’t think so. It doesn’t make a difference (atleast In cavs case…) between dormant or executed malware… they use the same sigs. Remember I’m talking about anti virus, not defense+ etc.

[OmeletGuy]

@Kyle post:26

So your telling me that I should expect different results from Comodo Standalone antivirus between real time and on demand scanning?

I didn’t think so. It doesn’t make a difference (atleast In cavs case…) between dormant or executed malware… they use the same sigs. Remember I’m talking about anti virus, not defense+ etc.

The memory scanner can detect Malware that the on-demand scan cant. So you should expect different results.

[Kyle142]

It’s the standard CAV that is scanning the memory, integrated with ye old’ BOClean sigs.

[HeffeD]

@OmeletGuy post:27

The memory scanner can detect Malware that the on-demand scan cant. So you should expect different results.

How does that work? There are two different databases?

Unless, are you saying that the on-demand scanner isn’t able to detect the contents of an encrypted packer, yet when it is un-packed the memory scanner can grab the payload? That is understandable, but if you mean that the memory scanner is somehow able to detect more malware than the on-demand scanner using the same definitions, that sounds a bit messed up. ???

[OmeletGuy]

@HeffeD post:29

How does that work? There are two different databases?

Unless, are you saying that the on-demand scanner isn’t able to detect the contents of an encrypted packer, yet when it is un-packed the memory scanner can grab the payload?

That is correct.

[Melih]

@OmeletGuy post:30

That is correct.

on demand does use an emulator…
but no emulator can be 100%…
so there is always some you might miss that you might be able to catch in memory…
thats why memory signatures are very powerful…

Melih

[Kyle142]

So comodo real time and on demand have different detections? (Just want to hear it from the horses mouth )
Thanks.

[Endymion]

What about the integration of BOClean engine?

NEW! Integrated In Memory Virus Scanner(i.e. Integrated BOClean)

Wasn’t a real time addition focusing on memory? :-TU

[Melih]

@Kyle post:32

So comodo real time and on demand have different detections? (Just want to hear it from the horses mouth )
Thanks.

Indeed. Memory signatures are more like Behaviour analysers where when things gets executed they kick in. They are different things.
Melih

[Kyle142]

Ok, My apologize, I am wrong.

[Opus_Dei]

I vote #3 but your poll lacks a selection for “all of the above”

Edit: spelling

[Kyle142]

It lacks a lot of options. 2.6k views only 47 votes.

[pedrothelemsipkid]

@usay_inn2 post:17

Hi,

I tried your AV (free version) and uninstalled it after doing a AV test.

I saved a fake virus on my computer and Comodo did not react untill I opened the fake virus.

I installed another AV and I tried the same test, as soon as I finished saving it the AV warned me of the virus (fake).

I prefer something that prevents such threats then stumbiling on a virus and opening it then suffering.

what comodo’s av doesn’t pick up comodo’s defense + will.When correctly configured defense + stops everything and anything including fake av’s getting on your PC.You will not find anything better,trust me as I have tried them all,yes!,all of them.

[SecurityAdvisor]

Mine is a combination of 3 and 2. Offcourse first of all prevention but no security set up is perfect so it must be able to remove malware as well

[4putt]

all this is nice, I would just like it to work and update without problems.