Kaspersky, AVG, avast! Norton only Cleaning Products

[TonyChipper911]

Melih stated in several video’s that antivirus companies started as cleaning products, and they still are today. I am struggling to agree/understand that statement, because if that’s true, millions of people would not rely upon their antivirus software to protect them e.g., I am a cooperate enterprise, I deploy Kaspersky endpoint security to protect all software, keeps hackers away from confidential documents, the UK government use antivirus software, are they not protected. Plus,

Melih states that these antivirus vendors, who failed in protecting your PC, are going to be no better in cleaning the malware from your system – is this true?

Secondly, Comodo is pure protection and Comodo Cleaning Essentials is for infected PC’s yet CCE as only available on the Comodo forum, not on the website so how could people access it?

My question – Does Kaspersky, Norton, AVG, avast! Provide protection against online threats (protection) or do they only clean a PC after it becomes infected?

[captainsticks]

@Tony Cole post:1

Secondly, Comodo is pure protection and Comodo Cleaning Essentials is for infected PC’s yet CCE as only available on the Comodo forum, not on the website so how could people access it?

Hi Tony,
Comodo Cleaning Essentials Help
Comodo Cleaning Essentials Product Page

[Seany007]

@Tony Cole post:1

Melih stated in several video’s that antivirus companies started as cleaning products, and they still are today. I am struggling to agree/understand that statement, because if that’s true, millions of people would not rely upon their antivirus software to protect them e.g., I am a cooperate enterprise, I deploy Kaspersky endpoint security to protect all software, keeps hackers away from confidential documents, the UK government use antivirus software, are they not protected. Plus,

“That’s true. That’s how AV’s started. And only now we see that extra so called ‘proactive protection’ but it’s still not enough again as many AV vendors still rely on the detection only. It won’t keep the hackers away but it will make it more difficult to penetrate the network. AV’s have their limits. Also one thing is to talk about home protection another is to talk about corporate one where many use similar Default Deny protection who are serious about their security among other things.”

Melih states that these antivirus vendors, who failed in protecting your PC, are going to be no better in cleaning the malware from your system – is this true?

“That’s from the point that if they failed to detect the malware on access they won’t find a malware even after the AV update of the new database or just not very good at removing it dep on the AV vendor”

Secondly, Comodo is pure protection and Comodo Cleaning Essentials is for infected PC’s yet CCE as only available on the Comodo forum, not on the website so how could people access it?

" True. You can still get CCE on the official Comodo website. In order to understand this you need to understand two things: Default Permit/Allow and Default Deny. 99% of the AV market today is Default Permit. 1% is Default Deny (Comodo). Once again I’m talking about home protection not corporate one. Good basic info read it: (The Six Dumbest Ideas in Computer Security)"

My question – Does Kaspersky, Norton, AVG, avast! Provide protection against online threats (protection) or do they only clean a PC after it becomes infected?

"Many AV vendors will claim many things which are not necessary true such as having proactive protection, self-defence, etc. They try to sell the AV and make money so sometimes it can mean lying to their customers. But don’t get me wrong here some do have a good proactive protection but it depends on many things, settings, etc. This is a wide area to cover all the info. "

[Citizen_K]

In the current situation so much malware gets made it is for no AV solution possible to keep up with at any given point in time. Also heuristic detection and generic av signatures are falling short. Add to that the average short life span of a computer virus is 27 hrs you can understand this battle is one that is hard to put up with.

With CIS unknown programs get limited to the extend that however they run they are not able to make permanent changes to your system. It is a proactive approach.

To use the bounder analogy a user once made (and adapted to the current situation with the sandbox):

• When on black list (av definition or heuristics) you don’t come in
• When on the white list (with invitation) you get all freedom
• When unknown you go on the leash until we figured you out

An av is always running after the facts. It will miss new viruses by definition as there are no definitions for that; notice that heuristics and generic signatures are all but perfect. With signature based solutions you will get infected first and then you hope for a cure.

With a proactive approach you are unlikely to get infected.