full-disclosure - Hi! Antiviruses Comparison

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <008501c423d3$0400a800$1214dd80@corp.emc.com>
From: exibar at thelair.com (Exibar)
Subject: Hi! Antiviruses Comparison - A Little Research Results

----- Original Message ----- 
From: "3APA3A" <3APA3A@...URITY.NNOV.RU>
To: <full-disclosure@...ts.netsys.com>
Sent: Friday, April 16, 2004 10:06 AM
Subject: Re: [Full-Disclosure] Hi! Antiviruses Comparison - A Little
Research Results

Dear Rafel Ivgi, The-Insider,

Now  bad things about McAfee: antiviral bases are updated only once in a
week (remember Mydoom? Kaspersky updates signatures every 4 hours),

----> McAfee has Daily DATS available and always makes new DATS available
within 4 hours (usually a lot quicker) of a major outbreak that is
classified Medium-on watch or higher (Level 3 and up according to Symantec's
levels)

dies on  checking far.exe, detects any MS Office file with dot in a name as
a
heuristic   virus,

--->Not true with the Enterprise versions that I've seen.... What version
are you talking about??

 requires  ePolicy  Orchestrator  to  be  managed  in
corporate  network

---> All AV products have their own management product... EPO can control
Symantec's stuff too :-)  There is also a smaller less expensive EPO like
product for corporations 500 nodes and smaller....

  and in case of centralized 'mirror' updates requires
all  updates  to  be downloaded twice (because it's impossible to update
machine with mirror itself from mirror).

---> Not true, sort of, the mirror machine will be the repository, and will
have to get the DATS from itself, big deal...
another comment:  although their distributed repositories arent' perfect,
EPO 3.x handles update much much better than previous versions.

Any  antivirus  comparsion  demonstrate one thing: CURRENTLY THERE IS NO
GOOD ANTIVIRAL PRODUCT ON MARKET.

 ---->  I'll give you this re-phrasing:  Currently there is no PERFECT
antivirus product on the market.

 Exibar